Infrastructure Team Meeting - August 16, 2022

[dduportal (Damien Duportal)]

2022 08 16 Jenkins Infra Meeting

Attendees

• @dduportal (Damien Duportal)
• @hlemeur (Hervé Le Meur)
• @poddingue (Bruno Verachten)

Announcements

1. Weekly: 2.634 WAR published, release checklist to be finished

Upcoming Calendar

• Next Weekly: Next Tuesday
• Next LTS: N.A.
• Next Security Release: N.A.
• Next major event: N.A.

Notes

• Done:

  • Latest Trilead API plugin version 1.71.v9e7860a_67a_df fails when using JDK8 for agent process
    • EC2 plugin contribution to be done for EC2 Windows templates (not blocking the issue)
    • Kubernetes plugin contribution
    • To be production-proffed when we’ll changed to JDK17
  • Puppet Upgrade Campaign to latest 6.x
    • All agents are using open source Puppet
    • But the puppetmaster uses Puppet Enteprise (<10 nodes)
  • All maven-11 agents are unavailable
    • Caused by Trilead. Fixed.
  • Pipeline failing from ‘maven-windows’ nodes offline
    • Caused by Trilead. Fixed.
  • checks-api 1.7.5: download plugin checks-api to file: status code: 403, reason phrase: Forbidden
    • Fixed by @danielbeck , many thanks!
  • Granting “Triage” permission to jenkins-cert-app on RPU
  • Update Jenkins to 2.346.3

• Work In Progress:

  • Access to npm namespace
  • (Re) Introduce an artifact caching proxy for ci.jenkins.io
  • [pkg.jenkins.io,releases] Finish cleanup of mirrorbrain
  • Want containerized Java 17 Windows agents
  • https://twitter.com/jenkins_release is many weeks behind
  • [ci.jenkins.io] collect datadog metrics for ephemeral VMs
  • [INFRA-3100] Migrate updates.jenkins.io to another Cloud
  • Valid ssl certificate for trusted.ci.jenkins.io
  • Weekly release build does not resume
  • Alert fatigue: Datadog + Pagerduty are too verbose
  • Replace s390x Ubuntu 18.04 agent with s390x Ubuntu 20.04 agent
  • Publish acceptance-test-harness docker image on release
  • Publish pipeline-steps-doc-generator and backend-extension-indexer artifacts to some kind of storage

• New/Important:

  • migrating Pipeline jenkinsio-cn from trusted to infra.ci
  • [Azure Terraform] Import existing resources
  • Use cases and repositories for github-comment-ops on jenkins-infra org
  • [infra.ci.jenkins.io] Start using JDK17
  • enable Development integration in JIra
  • Downloads /latest directory out of date
  • [ci.jenkins.io][Infra-as-code] Define Core and plugins as code in a custom built Docker Image
  • [ci.jenkins.io][Infra-as-code] Define Job Configuration as code
  • [INFRA-2754] Realign repo.jenkins-ci.org mission
  • Puppet Upgrade Campaign to latest 7.x
  • [INFRA-3080] Migrate Windows Server from 2019 to 2022
  • Upgrade to Kubernetes 1.23
  • Ubuntu 22.04 upgrade campaign
  • temp-privatek8s cluster backup
  • [terraform:AWS] manage EKS modules as code
  • AKS: add cluster privatek8s
  • [INFRA-3135] Terraform 2021 Winter (/ 2022 Summer )
  • Add observability for the build agents
  • [INFRA-3137] Terraform: Import unmanaged Oracle Cloud resources
  • Migrate Blue Ocean remaining jobs from ci.blueocean.io to the OSS Infra
  • [Documentation] add a public page with the “add a jenkins mirror” procedure
  • Keycloak performance horrific when looking up / modifying users
  • GC AWS Old Images (from packer)
  • Monitor builds on our private instances (trusted.ci.jenkins.io / infra.ci.jenkins.io / release.ci.jenkins.io)
  • Updatecli: Use separated pipelines + organization scanning for all updatecli processes in jenkins-infra
  • Separate terraform backends & repositories: “Azure Net” and “Azure”
  • [INFRA-3125] Migrate jenkins-infra repositories from branch “master” to “main”

• ToDo (next milestone) (infra-team-sync-2022-08-23 Milestone · GitHub)