diff --git a/.changelog/17831.txt b/.changelog/17831.txt
new file mode 100644
index 0000000000000..2833bda1d5765
--- /dev/null
+++ b/.changelog/17831.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ca: Vault CA provider config no longer requires root_pki_path for secondary datacenters
+```