April 2026
IAM permission policies — export and import across accounts
Permission policies can be exported to JSON and imported into other accounts, making it easier to maintain consistent access configurations across a multi-account organisation. More in IAM documentation.
NewAccountPlatformSSL certificate renewal errors — actionable messages returned
An issue that caused SSL certificate renewal failures to return unclear error responses has been resolved; the API now returns specific, actionable messages.
FixedPlatformRemote Block Storage — available in beta
Scalable block storage can be added to servers without replacing or installing local disks. More in Remote Block Storage.
- create, attach, resize, disable, and delete volumes via Customer Portal, Public API, Terraform, and Kubernetes (RBS CSI driver)
- currently available in AMS7; volumes can be used from other locations, but IOPS and bandwidth depend on network latency
- volumes can be resized and temporarily disabled without deletion
Note: this is a beta release. For best performance, use RBS with servers in the same datacenter (AMS7).
NewRemote Block StorageManaged Kubernetes — pod limit increased to 250 per node
New clusters support up to 250 pods per worker node, up from 110. The Pod CIDR per node has been widened to /23 to accommodate the higher pod count.
Note: applies to new clusters only. Existing clusters and nodes added to existing clusters are unaffected. No action required.
ImprovedManaged KubernetesiPXE boot — available for EBM servers
EBM servers can boot from a custom iPXE script over the network on every start, without going through the standard OS installer. More in Public API.
- two modes available: public iPXE boot (via public network interface) and private iPXE boot (via private interface)
- script URL and optional
user_datastring configurable without reprovisioning - MAC addresses and DNS server addresses automatically injected as variables before the script runs
- activate at order time via the
featuresfield, or on an existing server via/features/public_ipxe_boot/activateor/features/private_ipxe_boot/activate - to update the script on a running server: deactivate, update
ipxe_configviaPUT, reactivate, and reboot