add 1.20.x updates

Author: kpcraig

content/vault/global/partials/important-changes/summary-tables/1_20.mdx

@@ -16,7 +16,7 @@ Introduced | Recommendations | Edition    | Change
 1.20.0     | **Yes**         | All        | [Key pair authentication for Snowflake DB secrets engine](/vault/docs/v1.20.x/updates/important-changes#snowflake-keypair-auth)
 1.20.0     | **Yes**         | All        | [Audience warning for Kubernetes authentication roles](#k8-audience-warning)
 1.20.3     | No              | All        | [JSON Payload Limits](/vault/docs/v1.20.x/updates/important-changes#json-limits)
-
+1.20.5     | **Yes**         | All        | [Rotation manager schedule strings in UTC](/vault/docs/v1.20.x/updates/important-changes#rotation-manager-utc)
 
 
 ### Known issues

content/vault/v1.20.x/content/docs/updates/important-changes.mdx

@@ -231,6 +231,17 @@ You would then authenticate with the command below.
 $ vault write auth/kubernetes/login role=demo audience="my_audience" jwt=...
 ```
 
+
+### Rotation manager schedue strings in UTC ((#rotation-manager-utc))
+
+| Change       | Affected version | Vault edition
+| ------------ | ---------------- | -------------
+| New behavior | 1.20.5+          | Enterprise
+
+Vault interprets `rotation_schedule` strings relative to UTC to match the
+behavior of static role rotations in the database plugin. Old rotations use
+their existing schedule until you manually update rotation with an API call.
+
 ---
 
 

content/vault/v1.20.x/content/partials/rotationfields.mdx

@@ -8,8 +8,8 @@
   defining the schedule on which Vault should rotate the root token. Standard
   cron-style time format uses five fields to define the minute, hour, day of
   month, month, and day of week respectively. For example, `0 0 * * SAT` tells
-  Vault to rotate the root token every Saturday at 00:00. **You must set one of
-  `rotation_schedule` or `rotation_period`, but cannot set both**.
+  Vault to rotate the root token every Saturday at 00:00. Vault interprets the schedule in UTC.
+  **You must set one of `rotation_schedule` or `rotation_period`, but cannot set both**.
 - `rotation_window` `(string/integer: 0)` – <EnterpriseAlert product="vault" inline />
   The maximum amount of time, in seconds, allowed to complete
   a rotation when a scheduled token rotation occurs. If Vault cannot rotate the