Attendees 
- @dduportal (Damien Duportal)
- @jayfranco999 (Jay Reddy)
- @MarkEWaite (Mark Waite)
- @poddingue (Bruno Verachten)
- @hlemeur (Hervé Le Meur)
Announcements 
-
Jenkins Weekly Releases
- Last Week: 2.539 - successful - You're invited to talk on Matrix
- Packaging worked as expected BUT the cron on pkg.origin.jenkins.io was forgotten: it broke the RPM and debian indexes for ~30min.
- Contains a CSP bugfix.
- Release process failed once due to test issues. Second tentative went well.
- This Week: 2.540 - started on time - You're invited to talk on Matrix
- Packages changes:
- Staging per branch is now supported, and introduced staging only, promotion only
- Manual promotion required only this time (avoid bad surprises for LTS next week)
- openSUSE instructions changed to support autorefresh
- Packages changes:
- Last Week: 2.539 - successful - You're invited to talk on Matrix
-
Announcements:
- Weekly trigger time: What if we trigger weeklies 6 hours earlier to fit with Jay’s timezone?
- => Mark have not asked Tim yet. No emergency

- => Mark have not asked Tim yet. No emergency
- Incoming team holidays:
- Jay is off starting next week, for 3 weeks. Back on the 29 Dec. 2025.
- Mark, Herve and Damien off from 22 Dec. 2025 afor 2 weeks, back on 5th January 2026
- Infra Roadmap: Jenkins Roadmap
- Current Priority: pkg.origin.jenkins.io migration
- Roadmap deserves an update for beginning December (Herve + Damien)
- Upcoming things not tracked by issues yet:
- PostgreSQL to be upgraded (current managed version in Azure unsupported). Caught by Tim while working on rating changes
- Rating(.jenkins.io) PR which will require DB changes
- Docker 29.x => need an issue, but since docker-plugin fails with this version let’s put it on hold until fixed
- Terraform 1.13 => need an issue
- Jenkins Elections are completed. Congratulations on newly elected officer and board members!
- Weekly trigger time: What if we trigger weeklies 6 hours earlier to fit with Jay’s timezone?
Upcoming Calendar 
- Next Weekly: 2.541 - 2025-12-09
- Next LTS: 2.528.3 - 2025-12-10 - Kris is release officer.
- Next Security Release as per jenkinsci-advisories: N.A.
- Upcoming credentials expirations (~3 weeks):
- 2025-12-04: Cloudflare credential used by update center mirrors - [trusted.ci.jenkins.io] Update Center credential for Cloudflare R2 expires on `2025-12-04` · Issue #4879 · jenkins-infra/helpdesk · GitHub
- Hervé will pair with Damien to renew this token tomorrow
- 2025-12-04: Cloudflare credential used by update center mirrors - [trusted.ci.jenkins.io] Update Center credential for Cloudflare R2 expires on `2025-12-04` · Issue #4879 · jenkins-infra/helpdesk · GitHub
- Next major event:
- Contributor Summit + FOSDEM in Brussels, 30/31 Jan and 1st Feb
- We have a booth for Jenkins at FOSDEM
- Agenda for Summit is still WiP. Bring ideas (in community.jenkins.io)
- Jenkins Contributor Summit on Jan 30, 2026 - Call for topics and ideas
- Mark is working on priority list for contributors to be funded to travel there.
- Contributor Summit + FOSDEM in Brussels, 30/31 Jan and 1st Feb
Cloud Budgets
-
Azure CDF - Remaining: ~$9.0k (30 Nov.) for 2025 - monthly threshold set at $6.0k
- September: $5.8k (invoice)
- October: $5.5k (invoice)
- November: $5.7k (waiting for final invoice)
- December: $212 (too early for a forecast)
-
DigitalOcean - Remaining $11,122.37 until January 02, 2026 (12 months left at current rate)
- September: $365 (invoice)
- October: $788.81 (invoice)
- November: $831.38 (invoice)
- December: $15 (too early for a forecast)
-
AWS:
-
CloudBees:
- September: $709
- October: $580
- November: $530
- December: $12 (too early for a forecast)
-
Sponsored account - $65,282.32 left (30 November 2025) until 2027 ($5,282.32 until 31 Jan. 2027 and $60,000 until 31 May 2027)=> ~11 months remaining at this rate (Nov.)
- September: $5.4k
- October: $6.9k
- November: ~$5,9k
- December: $46 (too early for a forecast)
-
-
Jfrog Artifactory Usage
- Storage: 1.48TB - decreased (slighlty)!
- Bandwidth:
- September: 19.31 Tb
- October: 16.67 Tb
- November: 15.9 Tb (yay!)
- December: 0.8Tb (too early for a forecast)
Notes 
-
Done:
- Support:
- Request to Re-trigger Jenkins Job Due to Suspected False Failure
- discourse account is hosed
- Admin access for Jenkins GSoC org admins to GSoC SiG Gitter channel
- Handed over to the board, closeable as per last Kris message.
- Support:
-
- Keep infrastructure up to date:
- Upgrade to Kubernetes 1.33
- WiP: ensuring Jay and Herve have access, tooling and setup for all Kubernetes clusters
- Change of order: starting with AWS EKS (e.g. ci.jenkins.io), ideally this week
- Then infra.ci.jenkins.io Azure AKS cluster (agents) this week eventually
- private and public, most probably in the upcoming 2 weeks, by Herve but without Jay (holidays)
- Add support for Windows 2025 agents
- WiP: Trying to use Windows 2025 as host to build both 2025 and 2022 container images
- virtualization ain’t a piece of cake

- ci.jenkins.io with AWS EC2 shows random errors when running this “all in one” setup. We had to check it wasn’t related to hardware/virtualization stuff.
- But last 10 builds were stable: needs to wrap analysis.
- Next step: moving windows nod pool of privatek8s cluster out of 2019 to (latest available)
- virtualization ain’t a piece of cake
- WiP: Trying to use Windows 2025 as host to build both 2025 and 2022 container images
- [trusted.ci.jenkins.io] Update Center credential for Cloudflare R2 expires on
2025-12-04- Herve and Damien to pair on this tomorrow. WiP on gathering permission requirements for Herve.
- Upgrade to Kubernetes 1.33
- Keep infrastructure sane and maintainable:
- [pkg.jenkins.io] migrate the pkg.origin.jenkins.io service from AWS VM to Azure
publick8s- [release.ci.jenkins.io/trusted.ci.jenkins.io] Ensure Core Package build only copy package indexes/websites to
pkg.origin.jenkins.ioVM- Waiting for 2.528.3 LTS release to have some of the weekly packaging changes backported: staging and RPM repo created on release.ci, but not the RH/openSUSE unified RPM process.
- Then we can move to the pkg.origin.jenkins.io service in Azure with 2 main changes:
- Nginx instead of Apache (end of .htaccess)
- Eventually less data served
- dnf5 update fails with gpgcheck=1
- https://get.jenkins.io/war-stable/latest/ does not point to latest stable release
- [release.ci.jenkins.io/trusted.ci.jenkins.io] Ensure Core Package build only copy package indexes/websites to
- Setup a job/set of jobs to allow performing maintenance operations (cron, GCs of resources, etc.)
- [incrementals.jenkins.io/ci.jenkins.io] Outage of incrementals due to
releasebotuser’s API token reset- On hold, resuming now that we can work in GH issues
- [stats.jenkins.io/infra-statistics] Move “data for the usage stats site” generation (from anonymized data) out from Andrew machine
- On hold, back to triage
- ci.jenkins.io pages are slow to respond
- On hold, not priority
github-jenkinsci-permissions-report.jsonhasn’t been updated since Sep 12- Waiting for infra.ci.jenkins.io agents to move on Azure sponsored subscription (because no spot instance quota when using credits)
- [pkg.jenkins.io] migrate the pkg.origin.jenkins.io service from AWS VM to Azure
- Support:
- Set up 2.539+ CSP protection on weekly.ci.jenkins.io, remove
cspplugin and associated configuration- Jay (remove CSP plugin) and Mark on the JCasC part.
- Bunch of bad links on https://updates.jenkins.io/ and https://get.jenkins.io
- Looks like a jenkins-io component misconfiguration. Need analysis. Most probably a change on the HTML files.
- No emergency, nice to have.
- Set up 2.539+ CSP protection on weekly.ci.jenkins.io, remove
- JIRA → GitHub Jenkins issues migration
- Migrate core components issues to GitHub
- Migrate core issues to GitHub
- Need an issue for rating (@dduportal)
- No infra task, migrating some plugins now.
- Need an issue about www.jenkins.io redirection generation (@dduportal)
- Keep infrastructure up to date:
-
Issues staying in backlog/triage:
- Inform of Ingress NGINX Retirement in March 2026
- Automated process for a plugin maintainer to request migration from Jira to GitHub issues
- [Azure Deprecation] Convert your OS disks to Standard SSD or Premium SSD before 8 September 2028
- [Azure] Merge webservices data storage accounts into a single one with NFS v4.1
- [updates.jenkins.io] set up mirrorbits to keep serving update-center from mirrors even if outdated
- private docker image registry for staging core security releases
- [Azure]: credentials less Service Principal
- Tracking Issue for Groovy Script Conversion in RPU
- Tombstone Puppet (and replace it by something else)
- Chinese jenkins site incorrect site redirection
- Add a real-world job to weekly.ci.jenkins.io
- [ci.jenkins.io] Monitor and Garbage collect data volume of the DockerHub registry mirror and EC pull through cache
- Move collection of stats out from Kohsuke’s home
- Support [skip ci] on default branch
- Create build for jenkinsci/winp on release ci server
- [Update Center] HTTP/404 on
/current/updates/*.json*links - Add monitoring for CD secrets updates
- Add
.war.ascto get.jenkins.io - Monitor builds on our private instances (trusted.ci.jenkins.io / infra.ci.jenkins.io / release.ci.jenkins.io)
- [INFRA-3046] Monitor Jenkins mirrors Age
-
Issues added to the next milestone: N.A.