Infrastructure Team Meeting - August 29, 2023

[dduportal (Damien Duportal)]

2023 08 29 Jenkins Infra Meeting

Attendees

• @dduportal (Damien Duportal)
• @MarkEWaite (Mark Waite)
• @smerle33 (Stéphane Merle)
• @poddingue (Bruno Verachten)
• @kmartens27 (Kevin Martens)

Announcements

1. Weekly:

• 2.421 is released, packaged and Docker image is out
• Ready to roll for infra
• Next release items ongoing (changelog merged, etc.)

Upcoming Calendar

• Next Weekly: 5th of September 2023, 2.422
• Next LTS: 2.414.2
  • RC 6th September
  • 20th of September 2023, release lead is Kris Stern
• Next Security Release as per jenkinsci-advisories: N.A.
• Next major event:
  • DevsOps World tour (NYC, Chicago, Santa Clara, Singapour, London) is coming! Incoming blog post about community speakers on each of these events

Notes

• Done:

  • How to instruct Jenkinsfile to use VS 2022 ?
  • [HTTP/401 on repo.jenkins-ci.org] Fix LDAP user configurations in Artifactory to avoid unexpected HTTP/401 when logging in
  • I cannot log into JFrog Artifactory anymore
  • 401 when publishing new version of HCL AppScan plugin
  • WIndows downloadd page not working
  • plugins.jenkins.io does not show up new release

• Closed as not planned:

  • Blocked Anti Spam System
  • Rajnneel
  • I didn’t receive password reset email
  • Confirming whether i am a robot or human

• Work In Progress:

  • [INFRA-3100] Migrate updates.jenkins.io to another Cloud
    • Rsync reference service works. need to be set as internal (no external access)
    • Configuration of rsync working, gotta check the exact and proper rsync URL for mirrors (current one reports “empty”)
    • mirror system ready to roll
    • next step: add content in mirrors
  • Migrate cert.ci.jenkins.io from prod-public to the private network
    • Done, gotta remove resources tomorrow
    • Allow VPN and legacy network resources to be removed also tomorrow
  • Assess Artifactory bandwidth reduction options
  • [publick8s] Ensure high availability of replicated services
  • plugin-site build commonly fails on infra.ci when accessing https://plugins.jenkins.io resulting in a 502
  • VMs: improve command prompts to avoid confusion between services
    • WiP on local vagrant by Stephane, working against the escaping of puppet template
    • Need a quick pair to unblock efficiently, otherwise need a bit more time
  • ATH builds commonly become unresponsive
    • Nothing done, should be worked after pipeline library for arm64
  • LF status page redirect may be cached for too long
    • No news from Mark neither LF
  • Remove IP restriction on bounce or migrate to VPN
    • Validated the setup for the new cert.ci
    • Gotta apply to trusted next milestone
  • Proposal for application in publick8s to migrate to arm64
    • Pipeline library is almost there. Uses docker-bake for Linux.
    • Next step wiki, and then matomo if it is ok
  • Matomo github/docker repos
    • Nothing done

• New subjects:

  • JDK21: change from nightly builds to weekly ea builds in the infra
    • EA builds are already used by Jenkins official images (for the jdk21-preview)
    • Allow tracking JDK21 version with updatecli
    • Should simplify the puppet configuration for our infra
    • JDK21: change from nightly builds to weekly `ea` builds in the infra · Issue #3736 · jenkins-infra/helpdesk · GitHub
  • VPN.jenkins.io + legacy networks cleanups

• ToDo (next milestone) (infra-team-sync-2023-09-05 Milestone · GitHub)