Attendees 
- @dduportal (Damien Duportal)
- @MarkEWaite (Mark Waite)
- @smerle33 (Stéphane Merle)
- @kmartens27 (Kevin Martens)
- @hlemeur (Hervé Le Meur)
Announcements 
- Jenkins Weekly Releases
- Last week: 2.492 released with no issues.
- This Week: 2.493 started time
- Domain
jenkins.io
continues- ICANN blog post
- We will continue to use jenkins.io as our base domain, no need to change
- Azure Outages impacting Container Instances
- [Incident] Windows build of plugins don't start on `ci.jenkins.io` · Issue #4490 · jenkins-infra/helpdesk · GitHub
- Scope: only Windows container builds on ci.jenkins.io
- Not critical, but really slowing down top contributors
- Endlines issue: jgit cloning not converting line ends on windows? · Issue #3865 · jenkins-infra/helpdesk · GitHub
- Issues to create:
- Write down procedure to switch labels to VM (without breaking JDK selection)
- Monitoring should alert us when agent allocations starts to fail
- Increase build retention for jenkins-infra-plugin and the Infra/acceptance-tests
- Datadog monitor (for both builds): status? build time?
- See if pattern emerges to trigger alerts
- Plugin “customize-header” allows to have system messages has banner everywhere
- Outage not finished: need to communicate (after this meeting)
- Let’s cancel this meeting for the 4 Feb. (post FOSDEM)
Upcoming Calendar 
- Next Weekly: 2.494, 21 Feb. 2025
- Next LTS: 2.492.1 - (5 Feb 2025) - Jeremie Playout + Mark Waite as release leads
- Damien will be on train (e.g. async and limited connectivity) but Stephane should be there
- If we met requirements for Jeremie, we can start early
- Next Security Release as per jenkinsci-advisories: N.A.
- Upcoming credentials expirations (~3 weeks):
- 2 Feb. 2025:
- cert.ci Azure SP for agents: Azure AD Application password for Azure VM agents in `cert.ci.jenkins.io` expires on `2025-02-02T00:00:00Z` by jenkins-infra-updatecli[bot] · Pull Request #920 · jenkins-infra/azure · GitHub
- @smerle => create an issue
- repo.jenkins-ci.org TLS certificate: SSL certificate for repo.jenkins-ci.org expires 2 Feb 2025 · Issue #4477 · jenkins-infra/helpdesk · GitHub
- KK to be sent an email
- LE as fallback
- Can we do it with Cloudflare? Or Digicert?
- need Mark (has he did it for the code signing) and Damien (as infra officer) to pair and see if an autonomous solution is possible
- cert.ci Azure SP for agents: Azure AD Application password for Azure VM agents in `cert.ci.jenkins.io` expires on `2025-02-02T00:00:00Z` by jenkins-infra-updatecli[bot] · Pull Request #920 · jenkins-infra/azure · GitHub
- 2 Feb. 2025:
- Next major event:
- Contributor Summit and FOSDEM, in Brussels, 31 Jan. and 1/2 Feb. 2025
- Need to work on the Infra presentation and breakout session
- accounts.jio
- JDK21/25
- etc.
- Need to work on the Infra presentation and breakout session
- Contributor Summit and FOSDEM, in Brussels, 31 Jan. and 1/2 Feb. 2025
Cloud Budgets
- Azure CDF:
- October: $4,0k (invoice)
- November: $4,3k (invoice)
- December: $4,4k
- January: $1,863 (forecast at $4.4k)
- Azure Sponsorship (Microsoft Credits) - Remaining: $27,937 ($92,063 consumed) until May 2025
- October: $12,9k consumed
- November: $13k
- December: $9,5k
- January: $4,4k (forecast at $9,8k)
- DigitalOcean - Remaining $15,162 until January 02, 2026
- October: $195.67 (invoice)
- November: $146 (invoice)
- December: $192 (invoice)
- January: $95 (forecast at $211)
- AWS:
- CloudBees:
- October: $6,4k
- November: $3,9k
- December: $540
- January: $225 (forecast at $533)
- Sponsored account (~$58k credits lefts)
- October: $178
- November: $482
- December: $595
- January: $366 (forecast at $792)
- CloudBees:
Notes 
-
Done:
- Support
- Keep platform up to date
- Update ci.jenkins.io, trusted.ci, cert.ci and release.ci to latest LTS version 2.479.3
- [ci.jenkins.io] Service Principal used by ci.jenkins.io to spawn Azure agents expires on
2025-01-13
- [publicK8s/geoipfileshare] the service principal for geoip fileshare expired on 2024-12-23
- [trusted.ci.jenkins.io] Credential rotation of Azure Files for www.jenkins.io and javadoc.jenkins.io
- [infra.ci.jenkins.io] Azure Client credential for deploying docs.jenkins.io expires on 2025-01-12
- [Update Center]
mirrors.updates.jenkins.io
TLS certificate expires on2025-01-27
- jenkins/infra.ci.jenkins.io/website-jobs/jenkins.io/pr-merge appears to be failing consistently
- AzureEdge.net CDN shuts down 15 Jan 2025 8 Jan 2025
- Aayan wanted to help, but due to the “surprise” shutdown we had to take over in emergency
-
-
Support
- [Incident] Windows build of plugins don’t start on
ci.jenkins.io
- Still an ACI outage
- If still the case tomorrow (Wed. 15), then => emergency Kubernetes Windows setup!
- Right now: let’s communicate outage is still there to users
- Still an ACI outage
- Artifactory outdated
maven-metadata.xml
forpublic/com/github/jnr/jnr-posix/
- email to send for developer, and then set up a timeline
- Create build for jenkinsci/winp on release ci server
- Shall we go in the GH Actions CD way (as per Enable CD · Issue #117 · jenkinsci/winp · GitHub by Basil) or switch the deployment method to release.ci.jenkins.io
- Proposal: Jenkins Contributor Summit would be a good place to discuss and decide. Breakout sessions?
- Issues with Gatsby deployment after dependency upgrades via PR for jenkins-infra/stories
- Stale, go back to the backlog
- Foreign releases in public repository
- Infra stats missing since October 2024 data for stats.jenkins.io Plugin Installation Trend feature
- No news from KK
- [Incident] Windows build of plugins don’t start on
-
Keep platform up to date
- ci.jenkins.io: upgrade datadog plugin from 8.x to 9.x
- Delaying of 1 week (as we have ACI outages) - at least
- [terraform-aws-sponsorship] updatecli manifest for
ami_release_version
used byeks_managed_node_groups
- Need work from @dduportal and @smerle before handing over to Jay
- [terraform-aws-sponsorship] updatecli manifest for cluster addon versions
- [terraform-aws-sponsorship] updatecli manifest for
isra_role
module versions - SSL certificate for repo.jenkins-ci.org expires 2 Feb 2025
- ci.jenkins.io: upgrade datadog plugin from 8.x to 9.x
-
Update Center
-
[ci.jenkins.io] Move controller (VM) to AWS
- [ci.jenkins.io] Create private EKS cluster with “side” services (datadog, ACP, etc.)
- [ci.jenkins.io] Move ephemeral VM agents to AWS
- Still on Windows, prevents us to try the v2 SDK plugin
- [AWS] Move ci.jenkins.io from Azure (sponsorship) to AWS (sponsorship)
-
Monitoring
- Monitor builds on our private instances (trusted.ci.jenkins.io / infra.ci.jenkins.io / release.ci.jenkins.io)
- Jay did started a prototype for “reportBuild() {}”
- Monitor builds on our private instances (trusted.ci.jenkins.io / infra.ci.jenkins.io / release.ci.jenkins.io)
-
-
New Issues (to triage):
- Add Jeremie Playout as a Jenkins LTS release lead
- todo
- External user struggling to submit story to stories.jenkins.io
- Stale
- Maven Central artifacts are being downloaded from repo.jenkins-ci.org
- [ci.jenkins.io] Set up an ECR pull through cache
- [ci.jenkins.io] Move ACI agents to ephemeral Windows containers to AWS
- Maybe will be done partially (in Azure) if ACI outage continues
- [ci.jenkins.io] Move ephemeral Linux containers to AWS
- @smerle started to work on it
- Switch agent (java home) to JDK21 default
- Switch default JDK to 21 for pipeline libraries
- Switch default JDK to 21 for build tools
- Move controllers to JDK21 (runtime)
- Move agents to JDK21 (runtime)
- [INFRA-2651] Replace accountapp with (keycloak? Go-authentik? Something Else?)
- Add Jeremie Playout as a Jenkins LTS release lead
-
ToDo (next milestone) (infra-team-sync-2025-01-21 Milestone · GitHub)