diff --git a/.changelog/14598.txt b/.changelog/14598.txt
new file mode 100644
index 000000000..f76b4958d
--- /dev/null
+++ b/.changelog/14598.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+connect: Fixed a bug where old root CAs would be removed from the primary datacenter after switching providers and restarting the cluster.
+```