Attendees 
- @jayfranco999 (Jay Reddy)
- @lemeurherve (Hervé Le Meur)
- @MarkEWaite (Mark Waite)
Announcements 
- Jenkins Weekly Releases
- Last Weeks: 2.550 - no issues with the release process
- Old controller tags rebuilt and republished on trusted.ci.jenkin.io
- Thread in
#jenkinsci/release: You're invited to talk on Matrix - Temporary disabled the publication job on trusted.ci.jenkins.io
- Release process to be reviewed, first step: migrating publication of docker images to release.ci.jenkins.io (cf helpdesk below)
- Thread in
- Encountering 429 rate limits errors from Docker Hub
- Opened 429 rate limit errors from Docker Hub since January 2026
- In contact with Docker support, in progress
- Announcements:
- Weekly 2.551 and LTS 2.541.2 security releases today
- Jenkins Digicert Code Signing Certificate expires in May: [pkg.jenkins.io/release.jenkins.io] Certificate signing the MSI Jenkins package expires on 16 May 2026 · Issue #4923 · jenkins-infra/helpdesk · GitHub
- Team capacity:
- Damien is off until mid March 2026
- Priorities:
- Infra Roadmap: Jenkins Roadmap
- Current topics:
- MSI signing renewal
- Windows 2025/2022/2019
- JDK25 as runtime for our controllers
- (add to roadmap + open helpdesk issue): Maven 4 RC/GA
- Maven 4 pre-release version preview in ci.jenkins.io mailing list thread
- (add to roadmap): weekly.ci.jenkins.io as public live demo
Upcoming Calendar 
- Next infra meeting: next week
- Next Weekly: 2.552
- Next LTS: 2.541.3
- Next Security Release as per jenkinsci-advisories: today
- Upcoming credentials expirations (~3 weeks):
- None
- Next major event:
Cloud Budgets
-
Azure (CDF paid)
- October: $5.5k (invoice)
- November: $5.7k (invoice)
- December: $5.4k (invoice)
- January: $??k (previously forecasted at $5.8k, Hervé has no access to invoice)
- February: $4.2k (forecast at $6.8k, previously at $6.4k)
-
Azure Sponsorship (Microsoft Credits): still stuck.
- We see the $100k credits in the account but can’t use them
- Still dealing with Microsoft Support and Partner program, Hervé is meeting them today
-
DigitalOcean - Remaining $10,411.25 (not updated) until January 02, 2027 (20 months left at current rate)
- October: $788.81 (invoice)
- November: $831.38 (invoice)
- December: $454.60 (invoice, previously forecasted at $585)
- January: $385.30 (invoice, previously forecasted at $407)
- February: $391.64 (forecast at $609, previously at $630)
-
AWS:
- Sponsored account - $54,613.14 left (31 December 2025) until 31 May 2027=>
5 months remaining at this rate
- October: $6.9k
- November: $5.9k
- December: $10.7 (previously forecasted at $9.5k way higher than usual)
- Huge increase due to EC2 plugin bug
- January: $15.5k (invoice, previously forecasted at $15.3k)
- Still really high, ci.jenkins.io is once again at risk if we don’t decrease the consumption or if we don’t move it somewhere else before end of April 2026
- Need an issue ASAP for the EC2 agents GC (Damien)
- Need an issue for packer image various resources cleanup
- Mark opened an issue on the EC2 plugin: ci.jenkins.io EC2 agents sometimes hang and fail to connect with SSH key not found · Issue #1990 · jenkinsci/ec2-plugin · GitHub
- Request for sponsoring renewal sent
- To ping?
- February: $6.5k (forecast at $10.3, previously at $11.7k)
- Forecast lowered but still quite high
- Sponsored account - $54,613.14 left (31 December 2025) until 31 May 2027=>
-
Jfrog Artifactory Usage
- Storage: 1.69 Tb - (same as last time)
- Bandwidth:
- October: 16.67 Tb
- November: 15.9 Tb
- December: 30.34Tb
- A single IP address consumed 12Tb in December
- JFrog didn’t block this address until this month (unless this consumer changed its IP?)
- January: 16.67 Tb (previously forecasted at 15.9 Tb)
- Sounds like the abuser stopped abusing
- February: 11.78 Tb (forecast at 18.3 Tb, last week at 18.7 Tb)
Notes 
-
Done:
-
Keep infrastructure up to date
- Switch controllers to use Windows 2025 agents by default
- Prepare release and packaging backports for LTS 2.541.2 and Weekly 2.551
- [infra.ci.jenkins.io] Azure Credentials for
stats.jenkins.io,plugins.jenkins.io, andcontributors.jenkins.ioexpired on 2026-02-15 - [infra.ci.jenkins.io] NPM token expires the 16 February 2026
- [infra.ci.jenkins.io] Netlify token expires the 2026-02-16
-
Keep infrastructure sane and maintainable
-
Support
-
-
-
Support
-
Keep infrastructure sane and maintainable
- Move docker controller images publication job from trusted.ci.jenkins.io to release.ci.jenkins.io
- [ci.jenkins.io] Require authentication for read access
- [(status|contributors|stats|docs|stories|cn|jenkins-io-components).jenkins.io, Websites PR previews] Netlify billing plan changed: evaluate and act
- Optimise cost and maintainance by merging Windows 2022 and Windows 2025 templates
- Monitor builds on our private instances (trusted.ci.jenkins.io / infra.ci.jenkins.io / release.ci.jenkins.io)
- Pending bandwith
- [staging.pkg.origin.jenkins.io/staging.get.jenkins.io] Garbage collect the inactive branches
- [get.jenkins.io,mirrors.updates.jenkins.io] Resume GeoIP database weekly update
- Ensure the BOM cache filler runs successfully and is easier to use and monitor
- Setup a job/set of jobs to allow performing maintenance operations (cron, GCs of resources, etc.)
- [stats.jenkins.io/infra-statistics] Move “data for the usage stats site” generation (from anonymized data) out from Andrew machine
- Tests stuck for new contributors of Contributor Spotlight repo
- Plugins RSS feed no longer updating
- Bunch of bad links on https://updates.jenkins.io/ and https://get.jenkins.io
-
Keep infrastructure up to date
-
-
Issues added to the next milestone:
- Keep infrastructure sane and maintainable
-
Issues staying in backlog/triage:
-
Keep infrastructure sane and maintainable
-
Support
-
Uncategorized
- Upgrade to Kubernetes 1.34
- Inform of Ingress NGINX Retirement in March 2026
- [Azure Deprecation] Convert your OS disks to Standard SSD or Premium SSD before 8 September 2028
- [Azure] Merge webservices data storage accounts into a single one with NFS v4.1
- [updates.jenkins.io] set up mirrorbits to keep serving update-center from mirrors even if outdated
- private docker image registry for staging core security releases
- Tombstone Puppet (and replace it by something else)
- Chinese jenkins site incorrect site redirection
- Add a real-world job to weekly.ci.jenkins.io
- [ci.jenkins.io] Monitor and Garbage collect data volume of the DockerHub registry mirror and EC pull through cache
- Move collection of stats out from Kohsuke’s home
- Support [skip ci] on default branch
- Create build for jenkinsci/winp on release ci server
- [Update Center] HTTP/404 on
/current/updates/*.json*links - Add monitoring for CD secrets updates
- [INFRA-3046] Monitor Jenkins mirrors Age
-