# April 2026 (/docs/news/2026/news-04-26) ### IAM permission policies — export and import across accounts Permission policies can be exported to JSON and imported into other accounts, making it easier to maintain consistent access configurations across a multi-account organisation. More in [IAM documentation](/account/iam). Account Platform ### SSL certificate renewal errors — actionable messages returned An issue that caused SSL certificate renewal failures to return unclear error responses has been resolved; the API now returns specific, actionable messages. Platform ### Remote Block Storage — available in beta Scalable block storage can be added to servers without replacing or installing local disks. More in [Remote Block Storage](/rbs/getting-started). * create, attach, resize, disable, and delete volumes via Customer Portal, Public API, Terraform, and Kubernetes (RBS CSI driver) * currently available in AMS7; volumes can be used from other locations, but IOPS and bandwidth depend on network latency * volumes can be resized and temporarily disabled without deletion *Note: this is a beta release. For best performance, use RBS with servers in the same datacenter (AMS7).* Remote Block Storage ### Managed Kubernetes — pod limit increased to 250 per node New clusters support up to 250 pods per worker node, up from 110. The Pod CIDR per node has been widened to /23 to accommodate the higher pod count. *Note: applies to new clusters only. Existing clusters and nodes added to existing clusters are unaffected. No action required.* Managed Kubernetes ### iPXE boot — available for EBM servers EBM servers can boot from a custom iPXE script over the network on every start, without going through the standard OS installer. More in [Public API](/api-reference/ipxe-boot/). * two modes available: public iPXE boot (via public network interface) and private iPXE boot (via private interface) * script URL and optional `user_data` string configurable without reprovisioning * MAC addresses and DNS server addresses automatically injected as variables before the script runs * activate at order time via the `features` field, or on an existing server via `/features/public_ipxe_boot/activate` or `/features/private_ipxe_boot/activate` * to update the script on a running server: deactivate, update `ipxe_config` via `PUT`, reactivate, and reboot Enterprise Bare Metal