Infrastructure Team Meeting - Apr 05, 2022

[dduportal (Damien Duportal)]

2022 04 05 Jenkins Infra Meeting

Participants

Damien Duportal (@dduportal ), Hervé Le Meur (@hlemeur ), Stephane Merle (@smerle), Mark Waite (@MarkEWaite )

Announcements

1. Weekly 2.342
   • Release checklist is complete, Docker image built and verified
2. Announcements ?
   • LTS 2.332.2 release tomorrow
     • Do not merge to k8s cluster or trusted.ci during the release process

Notes

• Done (GitHub · Where software is built)

  • Artifactory slow (again..)
    • TODO: proxy caching
  • Fixed Terraform Digital Ocean
    • Kubernetes 1.20 not available anymore on Digital Ocean
    • TODO: Kubernetes 1.21 upgrade
  • Increase disk space for census.jenkins.io
  • Introduced the “jenkins-jobs” chart to allow defining credentials as code at folder level
    • Currently used on infra.ci
  • Minor support issues (accounts, RPU failing, trusted.ci failing config with census)
  • Monitor Artifactory error rate => to be closed (datadog monitor)

• Work in Progress (GitHub · Where software is built)

  • Migrating rating.jenkins.io
    • Helm chart and database installed, working together
    • Continue working for next milestone: todo ingress, migrate DB data for full test @smerle
  • Apply to Docker Open Source Program
    • Continue working for next milestone: todo contact Docker @dduportal
  • DockerHub credential for vm agents
    • Blocked as @dduportal need to document the credential account to allow @smerle to implement it in controllers + pipeline-library
    • Delayed for milestone in 2 weeks @smerle
    • For next milestone: @dduportal to audit the DockerHub account with Olivier + document in runbooks
  • Add a email alias for press
    • No answer from KK. Let’s proceed with the LF.
    • Continue working for next milestone: todo in parallel: contact LF for email service hosting / contact mailgun to see if we can recover the account @dduportal
  • GC AWS Old Images (from packer)
    • Continue working for next milestone: todo @smerle on the dev cleanup + @dduportal on reminding the cleanup rules in the issues
  • Infracost
    • Continue working for next milestone: todo Waiting for review by @dduportal + @lemeurherve for next steps with Infra cost
  • git long path on Windows
    • To be closed,+ linked to building our own Docker windows images on infra.ci (TBD in 2 weeks)
  • monitor trusted.ci.jenkins builds
    • Herve leading, Stephane shadowing in pair, next week
    • To do next milestone
  • weekly.ci.jenkins.io
    • Almost there: initial install merged but need to check
    • Todo next week: finalize + let @timja close the issue once then

• New Subjects (New “long-living” milestone infra-team-sync-next holding the incoming new major subjects)

  • Kubernetes 1.21
    • Work starting for next milestone: @smerle & @lemeurherve
  • Artifactory Proxy Caching
    • Work starting for next milestone: @dduportal
  • HTTP Security Headers on jenkins.io
    • Work starting for next milestone: @dduportal

• ToDO (e.g. next milestone starting today) (GitHub · Where software is built)