This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Summary
AI summaryAdded create_vng, delete_vng, and update_vng readback‑mismatch detection for AWS Ocean VNGs.
Full changelog
Added
create_vng— Create an AWS Ocean VNG (launch spec) under an existing Ocean cluster.ocean_idis a first-class argument (rejectingoceanIdinsidespec_json). PlaintextuserDatais auto-base64-encoded (opt out withencode_user_data=false). Optionalinitial_nodes>0launches that many nodes immediately. Requiresconfirm=true; safety preview otherwise.delete_vng— Delete an AWS Ocean VNG.delete_nodes=truedrains + detaches + terminates all nodes in the VNG.force_delete=truepermits deleting the only non-template VNG. Requiresconfirm=true; safety preview otherwise.update_vngreadback-mismatch detection — fallout from a 2026-05-05 dev triton-gpu incident where Spot.io returned 200 OK and bumpedupdatedAtbut silently did not persist the newuserData. The tool now diffs every submitted field against the readback and surfaces any mismatch as_readback_mismatchwith a_readback_mismatch_hint.userDatais compared on decoded-plaintext bytes so benign re-encodes don't false-positive.
Tests
- Unit tests for the readback-diff helpers (
_diff_submitted_vs_readback,_extract_launchspec) covering userData round-trip, silent non-persist, value drift, and nested response shapes. - New live integration suite under
tests/integration/(opt in withSPOTINST_RUN_INTEGRATION=1) that spins up an ephemeral sandbox VNG, exercisescreate_vng/update_vng/delete_vngacross encoded and plaintext userData,auto_apply_tags, safety previews, and teardown. Sandbox VNGs are triple-tainted (NoSchedule + NoExecute + unique key) and capped atmaxInstanceCount=1onc7a.mediumso nothing real ever lands. Excluded from defaultpytestrun.
Live integration matrix validated against dev Ocean before release: 8/8 passing, zero sandbox leftovers.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About arnstarn/mcp-server-spotinst
MCP server for Spot.io (Spotinst) API with 23 tools for managing Ocean clusters, VNGs, Elastigroups, costs, right-sizing, and logs across AWS and Azure with multi-account support.
Related context
Beta — feedback welcome: [email protected]