# April 2026 (/docs/news/2026/news-04-26)
### IAM permission policies — export and import across accounts
Permission policies can be exported to JSON and imported into other accounts, making it easier to maintain consistent access configurations across a multi-account organisation. More in [IAM documentation](/account/iam).
Account
Platform
### SSL certificate renewal errors — actionable messages returned
An issue that caused SSL certificate renewal failures to return unclear error responses has been resolved; the API now returns specific, actionable messages.
Platform
### Remote Block Storage — available in beta
Scalable block storage can be added to servers without replacing or installing local disks. More in [Remote Block Storage](/rbs/getting-started).
* create, attach, resize, disable, and delete volumes via Customer Portal, Public API, Terraform, and Kubernetes (RBS CSI driver)
* currently available in AMS7; volumes can be used from other locations, but IOPS and bandwidth depend on network latency
* volumes can be resized and temporarily disabled without deletion
*Note: this is a beta release. For best performance, use RBS with servers in the same datacenter (AMS7).*
Remote Block Storage
### Managed Kubernetes — pod limit increased to 250 per node
New clusters support up to 250 pods per worker node, up from 110. The Pod CIDR per node has been widened to /23 to accommodate the higher pod count.
*Note: applies to new clusters only. Existing clusters and nodes added to existing clusters are unaffected. No action required.*
Managed Kubernetes
### iPXE boot — available for EBM servers
EBM servers can boot from a custom iPXE script over the network on every start, without going through the standard OS installer. More in [Public API](/api-reference/ipxe-boot/).
* two modes available: public iPXE boot (via public network interface) and private iPXE boot (via private interface)
* script URL and optional `user_data` string configurable without reprovisioning
* MAC addresses and DNS server addresses automatically injected as variables before the script runs
* activate at order time via the `features` field, or on an existing server via `/features/public_ipxe_boot/activate` or `/features/private_ipxe_boot/activate`
* to update the script on a running server: deactivate, update `ipxe_config` via `PUT`, reactivate, and reboot
Enterprise Bare Metal