Attendees 
- @dduportal (Damien Duportal)
- @jayfranco999 (Jay Reddy)
- @MarkEWaite (Mark Waite)
Announcements 
- Jenkins Weekly Releases
- Last Week: 2.578, no issues except it started a bit late due to a stuck pipeline from 2.577.
- Thanks Herve and Mark!
- This Week: 2.579, went well no issues
- Last Week: 2.578, no issues except it started a bit late due to a stuck pipeline from 2.577.
- Announcements:
- Team capacity:
- Hervé is off and back on 31 Aug
- Damien is off on 31 Aug
- Jay is off on 31 Aug. and 1st Sep.
- Mark is off from 26 up to 1st Sep. included
- Priorities:
- Infra Roadmap: Jenkins Roadmap
- Current EPICs (by priority): GitHub · Where software is built
- Topic worth mentioning (timeframe of the upcoming 2 months)
- mirrorbits v0.6.2 (from 0.6.1)
- Nginx ingress retirement
- Kubernetes 1.35 upgrade
- Sponsoring: NodeOPS
- Damien as a test account and a few credits granted for tests. Starting to test their plugin (still private source).
- Team capacity:
Upcoming Calendar 
- Next infra meeting: 2026-09-01
- Next Weekly: 2026-09-02 - 2.580
- Next LTS: 2026-09-02 - 2.568.3
- Next Security Release as per jenkinsci-advisories: N.A.
- Upcoming credentials expirations (~3 weeks):
- 2026-08-26:
- [infra.ci] Fastly Automation token used by Terraform expires => [infra.ci.jenkins.io] Fastly API tokens used by the Fastly Terraform project expires on 26 August 2026 · Issue #5264 · jenkins-infra/helpdesk · GitHub
- [infra.ci] Fastly Automation token used to purge (plugins|contributors|etc.) => [infra.ci.jenkins.io] Fastly API tokens to deploy [infra.ci] Fastly Automation token used to purge (plugins|contributors|spotlight).jenkins.io websites expires on 26 August 2026 · Issue #5265 · jenkins-infra/helpdesk · GitHub
- 2026-08-27:
- [trusted.ci] Renew Cloudflare R2 Bucket Credential => [trusted.ci.jenkins.io] Update Center credential for Cloudflare R2 expires on 2026-08-27 · Issue #5266 · jenkins-infra/helpdesk · GitHub
- 2026-08-30:
- [release.ci] Fastly API token expires => [release.ci.jenkins.io] Fastly token used to decache pkg.jenkins.io expires on 30 August 2026 · Issue #5267 · jenkins-infra/helpdesk · GitHub
- [trusted.ci] Fastly API token expires => [trusted.ci.jenkins.io] Fastly token used to decache www.jenkins.io expires on 30 August 2026 · Issue #5268 · jenkins-infra/helpdesk · GitHub
- 2026-09-03:
- Terraform credentials expire (aws-sponsored, azure, azure-net, cloudflare, datadog, digitalocean, fastly) => @dduportal
- 2026-08-26:
- Next major event: N.A.
Cloud Budgets
-
Azure (CDF paid)
- May: ~$2,800
- June: ~$2,108
- July: $2,182.84
- August: $1,735 (forecasted at $2.2k)
We will meet our threshold of $2.5k monthly- Note: publick8s should move to sponsored subscription ($993 for June, forecasted at $967 for August)
-
Azure Sponsored subscription (Microsoft Credits): $75449 credits on August 1 2026
- May: ~$5,734
- June: ~$5,542
- July: $5,518.05
- August: $5,321 (forecasted at $6.9k)
- Increase due to cert.ci.jenkins.io builds
At current rate, we shall deplete credits on August 2027 (unless we have to move ci.jenkins.io here)
-
DigitalOcean - Remaining $5,841.64 until January 02, 2027
- May: $1186.97
- June: $740.32
- July: $496.88
- August: $289.89 (forcasted at ~$360)
At current rate, we shall deplete credits on June 2027
-
AWS:
- Sponsored account, credits left: $29.8k until 01/31/2028 (on 1st July)
- May: $14.9k
- June: ~$7,893
- July: $5,891.74
- August: $4,464, -10% compared to last month (forecasted at $5.5k)
At current rate ($5.6k monthly), we shall deplete credits on January 2027- Renewal: new contacts at AWS (Mila Z. is changing role)
- Sponsored account, credits left: $29.8k until 01/31/2028 (on 1st July)
-
JFrog Artifactory Usage
- Storage: 1.95 Tb (increased)
- Bandwidth:
- May: 29.98 Tb
- June: 23.24 Tb
- July: 31.3 TB
- August: 27,97 TB (forecasted at ~34Tb)
-
Algolia API usage
- Context: [plugins.jenkins.io] Watch Algolia search usage for June 2026
- plugins.jenkins.io:
- (July): ~64.7K (16%) search requests(max. 400K monthly)
Notes 
-
Done:
-
keep-infra-up-to-date
-
keep-infra-sane-and-maintainable
-
-
-
keep-infra-up-to-date
- JDK critical patch upgrade campaign (August 2026)
- JDK is now moving to a monthly release lifecycle as agreed by both Oracle and Temurin. We’ll have to prepare for this.
- Exotic CPUs: what do we do? (infra containers scoped, not jenkinsci/docker scoped) And JDK8/11 (slower to release)?
- WiP on some updatecli manifest
- Prepare update-center root CA rotation
- Daniel tested a temp certificate with success. PR opened on Jenkins Core to add the new CA.
- Waiting for the next Core releases with this change
- Drop Windows 2019 support
- All Docker (jenkinsci/) images have dropped 2019 + blog post + discourse post + upgrade guide for upcoming LTS .3 \o/
- Next step: winp CI(.jenkins.io) builds to use Windows 2025
- JDK critical patch upgrade campaign (August 2026)
-
support
- Jira is responding very, very slowly
- Problem not there anymore: we can close (a 1-day spike).
- Let’s ask for access log from sunday just in case.
- Support Mirror Selection in Update Center
- TUNA mirror is now China only
- TUNA admin contacted to ask for clarification
- Jira is responding very, very slowly
-
keep-infra-sane-and-maintainable
- [pipeline-library] define a common
nodeWithTimeoutAndRetry()function for website builds- Almost there (Damien plays with Claude)
- [cert.ci.jenkins.io] migrate controller VM from Azure CDF to Azure sponsored subscription
- Started to task list. Important: use a “non burstable” instance family
- [stats.jenkins.io/infra-statistics] Move “data for the usage stats site” generation (from anonymized data) out from Andrew machine
- Work resumed, WiP on infra + pgsql on census.jenkins.io
- [pipeline-library] define a common
-
-
Issues added to the next milestone:
- [infra.ci.jenkins.io] Fastly API tokens to deploy [infra.ci] Fastly Automation token used to purge (plugins|contributors|spotlight).jenkins.io websites expires on 26 August 2026
- [infra.ci.jenkins.io] Fastly API tokens used by the Fastly Terraform project expires on 26 August 2026
- [trusted.ci.jenkins.io] Fastly token used to decache www.jenkins.io expires on 30 August 2026
- [release.ci.jenkins.io] Fastly token used to decache pkg.jenkins.io expires on 30 August 2026
- [trusted.ci.jenkins.io] Update Center credential for Cloudflare R2 expires on 2026-08-27
- Create sonarcloud-token
- HealthScore under Security shows 0% for a resolved security issue
-
Issues staying in backlog/triage:
- JDK patch upgrade campaign (July 2026)
- Bump NodeJS from 22 to 24 (most recent LTS)
- Decrease BOM costs by splitting tests more efficiently
- [ci.jenkins.io] optimize Maven Cache loading during EC2 Agent startup
- Migrate
publick8sAKS cluster to the Azure 2026 Sponsored subscription - [Maven Dependency] could not be resolve
org.eclipse.m2e:lifecycle-mapping:jar:1.0.0Maven plugin - Upgrade to Kubernetes 1.35
- Debian upgrade campaign:
bookworm(12.x) totrixie(13.x) - Tombstone
plugin-site-apiservice (in favor of a static report file) - [Terraform azure/aws/shared-tools] Migrate Kubernetes provider resources (
kubernetes_*) to versioned resources (kubernetes_*_v1) - See if we can get OIDC enabled on our artifactory
- main branch Jenkins build status is in progress but not build was triggered
- msbuild not available on ci.jenkins.io Windows agent for winp build process
- Sporadic HTTP 503 First byte timeout errors on jenkins.io
- Provide Maven 4 pre-release templates on ci.jenkins.io
- Move docker controller images publication job from trusted.ci.jenkins.io to release.ci.jenkins.io
- Enable Jenkins CLI
- [(status|contributors|stats|docs|stories|cn|jenkins-io-components).jenkins.io, Websites PR previews] Netlify billing plan changed: evaluate and act
- Prepare for post-Jira account management
- Inform of Ingress NGINX Retirement in March 2026
- [Azure Deprecation] Convert your OS disks to Standard SSD or Premium SSD before 8 September 2028
- [Azure] Merge webservices data storage accounts into a single one with NFS v4.1
- private docker image registry for staging core security releases
- [ci.jenkins.io] diagnose and eventually fix the EC2 Windows VM performances and build failures/retries
- [PHS/Datadog] improve monitoring using application logs
- Chinese jenkins site incorrect site redirection
- Add a real-world job to weekly.ci.jenkins.io
- [ci.jenkins.io] Monitor and Garbage collect data volume of the DockerHub registry mirror and EC pull through cache
- Move collection of stats out from Kohsuke’s home
- Support [skip ci] on default branch
- Create build for jenkinsci/winp on release ci server
- [Update Center] HTTP/404 on
/current/updates/*.json*links - Add monitoring for CD secrets updates
- Matomo github/docker repos
- Add reminder about Jira notification email address
- [INFRA-3046] Monitor Jenkins mirrors Age
- [INFRA-2352] Add monitoring for age of crawler files