diff --git a/.changelog/11163.txt b/.changelog/11163.txt
new file mode 100644
index 000000000..f47fe685a
--- /dev/null
+++ b/.changelog/11163.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+connect: ingress gateways may now enable built-in TLS for a subset of listeners.
+```