Infrastructure Team Meeting - August 04, 2026

Name: 2026 08 04 Jenkins Infra Meeting
Uploaded: 2026-08-05T13:09:42Z
Description: [2026 08 04 Jenkins Infra Meeting] Attendees :busts_in_silhouette: @dduportal (Damien Duportal) @jayfranco999 (Jay Reddy) @MarkEWaite (Mark Waite) Announcements :loudspeaker: Jenkins ...

dduportal · August 5, 2026, 1:09pm

Attendees

@dduportal (Damien Duportal)
@jayfranco999 (Jay Reddy)
@MarkEWaite (Mark Waite)

Announcements

Jenkins Weekly Releases
- Last Week: 2.575, minor issue on Docker image publication, fixed by chore(ci/publish) ensure all docker bake build calls uses the same set of `--file` flags by dduportal · Pull Request #2422 · jenkinsci/docker · GitHub
- This Week: 2.576 (tomorrow, as part of the advisory)
Announcements:
- Team capacity:
  - Damien is off on August 10>13 and August 19->23, and on 31
  - Herve is off on August 19 → 30
- Priorities:
  - Infra Roadmap: Jenkins Roadmap
  - Current EPICs (by priority): GitHub · Where software is built
- No meeting to cancel in August

Upcoming Calendar

Next infra meeting: 2026-08-11
Next Weekly:
- 2.576 on 2026-08-05 (tomorrow - advisory)
- 2.577 on 2026-08-11
Next LTS: 2.568.2 - 2026-08-05 (tomorrow - advisory)
Next Security Release as per jenkinsci-advisories: 2026-08-05 (incoming advisory)
Upcoming credentials expirations (~3 weeks):
- 2026-08-09: [infra.ci] contributors|stats|plugins FileShare service principal credentials
  - [infra.ci.jenkins.io] Azure Credentials for stats.jenkins.io, plugins.jenkins.io, and contributors.jenkins.io expires on 2026-08-09 · Issue #5237 · jenkins-infra/helpdesk · GitHub
- 2026-08-19: [infra.ci] NPM token expires
  - Issue to create => @7JoquqrvQFu6FDlR14JVhg
- 2026-08-22: [trusted.ci] Artifactory Admin Token for RPU expires
  - Issue to create => @dduportal
Next major event: N.A.

Cloud Budgets

Azure (CDF paid)
- May: ~$2,800 (invoice)
- June: ~$2,108 (invoice)
- July: $2,182.84 (forecasted at $2,2k)
- August: ~$213.47 (forecasted at $2,1k)
  - We will meet our threshold of $2.5k monthly
  - Note: publick8s should move to sponsored subscription ($880 for June, forecasted at $960 for July)
Azure Sponsored subscription (Microsoft Credits): $74630 credits on August 4 2026
- May: ~$5,734 (invoice)
- June: ~$5,542 (invoice)
- July: $5,518.05 (forecasted at $5.1k)
- August: ~$793.16 (forecasted at $5,6k)
  - At current rate, we shall deplete credits on September 2027 (unless we have to move ci.jenkins.io here)
DigitalOcean - Remaining $6,472.29 until January 02, 2027
- May: $1186.97 (invoice)
- June: $740.32 (invoince)
- July: $496.88 (forecasted at ~$516)
- August: $45.62 (forcasted at ~$460)
  - At current rate, we shall deplete credits on June 2027
AWS:
- Sponsored account, credits left: $29.8k until 01/31/2028 (on 1st July)
  - May: $14.9k
  - June: ~$7,893
  - July: $5,891.74 (forecasted at ~5.8k)
  - August: ~$487.03 (forecasted at ~5.4k)
    - At current rate ($5.6k monthly), we shall deplete credits on January 2027
JFrog Artifactory Usage
- Storage: 1.87 Tb (steady)
- Bandwidth:
  - May: 29.98 Tb
  - June: 23.24 Tb
  - July: 31.3 TB (forecasted at ~29 Tb)
  - August: 6.77 TB (forecasted at ~50.7Tb)
Algolia API usage
- Context: [plugins.jenkins.io] Watch Algolia search usage for June 2026
- plugins.jenkins.io:
  - (July): ~86.4K (21%) search requests(max. 400K monthly)

Notes

Done:
Work in Progress:
- support
  - Enable previews for the plugin-modernizer-stats repo PRs
    - Damien on it. Was delayed from last week, let’s roll
  - build-pipeline plugin tests now fail with ‘cannot find Chrome binary’
    - No work done yet, but keeping it open for plugin contributors if they have the same issue.
    - Let’s move out of milestone as no more active tasks from infra team
- keep-infra-up-to-date
  - Prepare release, packaging and docker backports for LTS 2.568.2
    - packaging and release done in emergency this morning to unblock advisory staging (Damien missed it last week)
    - WiP on Docker for today (later). Must be done before advisory.
  - [infra.ci.jenkins.io] Azure Credentials for stats.jenkins.io, plugins.jenkins.io, and contributors.jenkins.io expires on 2026-08-09
    - Jay will do it tomorrow early his time
    - Note: start with plugins.jenkinbs.io
  - Prepare update-center root CA rotation
    - 2nd certificate released
    - On hold until after the advisory
    - Waiting from Wadeck (security officer) to be back from holidays to be Damien’s backup
  - Bump NodeJS from 22 to 24 (most recent LTS)
    - incremental-publishers => Dockerfile wasn’t tracked (already on 24.x though)
    - Still open, because we fail to bump uplink’s NodeJS version. need more time to spend on this one
  - Drop Windows 2019 support
    - SIG platform was informed about the upcoming infra deprecation of Windows 2019
    - Controller container image already deprecated in June
    - Issues opened for agent container images
      - PR opened and ready to merge for SSH agent
      - WiP on the inbound agent PR
    - Next step: wip on ci.jenkins.io, before removing all infra 2019 stuff
- keep-infra-sane-and-maintainable
  - [pipeline-library] define a common nodeWithTimeoutAndRetry() function for website builds
    - WIP: Damien is playing with Claude and Pipeline Libraries.
  - Migrate publick8s AKS cluster to the Azure 2026 Sponsored subscription
    - On hold, back to backlog until cert.ci controller is migrated as we should move to Sweden but need 2 requirements ()
    - Service endpoint for storage challenge solved in cert.ci for build reporting => good for NFS
    - Next challenge to solve: ACR caching service endpoint between regions (see cert.ci below for that)
  - [cert.ci.jenkins.io] migrate controller VM from Azure CDF to Azure sponsored subscription
    - Ddduportal resuming work, need to comment and set up task list
  - [AWS] Activate user-defined cost allocation tags
    - Didn’t help with pinpointing high cost consumption, discussion to be removed.
  - Matomo github/docker repos
    - MySQL 8.0 support is costing us additional $$ in CDF subscription on 31 July OR upgrade to 8.4
    - Performed the 8.4 upgrade (for the fun)
    - But since Matomo never was put in production, DB was not used ; removed these unused resources (CDF)
    - Back to backlog now
Issues added to the next milestone:
- JDK patch upgrade campaign (July 2026)
  - Mark confirm that no need to rush this update on tomorrow’s updated (2.576 / 2/568.2) as no criticial fixes there
  - Jay takes it, can start after the advisory
- Request for PR preview to be enabled for contributor-spotlight repo’s non-default branch
  - Needed for GScoC, need Netlify + infra.ci pipeline minro changes to be set up
- Request for PR preview to be enabled for stories repo’s non-default branch
  - Same as above
Issues staying in backlog/triage:

Topic	Replies	Views
Infrastructure Team Meeting - July 21, 2026 Infrastructure meeting , sig-infra	33	July 21, 2026
Infrastructure Team Meeting - July 28, 2026 Infrastructure meeting , sig-infra	32	July 29, 2026
Infrastructure Team Meeting - June 2, 2026 Infrastructure meeting , sig-infra	34	June 5, 2026
Infrastructure Team Meeting - June 23, 2026 Infrastructure meeting , sig-infra	39	June 25, 2026
Infrastructure Team Meeting - June 9, 2026 Infrastructure meeting , sig-infra	55	June 11, 2026