Attendees 
- @dduportal (Damien Duportal)
- @lemeurherve (Hervé Le Meur)
- @MarkEWaite (Mark Waite)
Announcements 
- Jenkins Weekly Releases
- This Week: 2.547 - You're invited to talk on Matrix
- Docker image: Windows Server 2019 are back (along with Windows 2022)
- Minor issues on Docker image publication, fixed the same day.
- This Week: 2.547 - You're invited to talk on Matrix
- Announcements:
- LTS 2.541.1:
- Changelog
- Huge shoutout to everyone. It went very well (modulo a few minor hiccups as usual with a release that size).
- LTS 2.541.1 release
- Of course DockerHub and CloudFlare had issues during the image build
but no Docker publication issue on our own (2.547 showed all was fixed) - pkg.jenkins.io changes went very well! Only forgot to mention the
-legacyendpoints in changelog, since fixed.
- Infra team is now responsible to backport changes on the jenkinsci/packaging and jenkins-infra/release from weekly to stable branches now
- Team capacity:
- FOSDEM incoming: expect lower availability
- Jay is off starting tomorrow
- Herve and Mark will be travelling to/from FOSDEM
- Damien off for ~6 weeks on the first February, maybe earlier
- FOSDEM incoming: expect lower availability
- New priorities:
- Infra Roadmap: Jenkins Roadmap
- Current topics:
- (not in roadmap, no need to) CSP
- (not in roadmap, no need to) Credentials renewal
- (not in roadmap, no need to) ci.jenkins.io => cloud billing and stability
- Windows 2025/2022/2019
- JDK25 as runtime for our controllers
- Get rid of Puppet (in favor of Ansible)
- (add to roadmap + open helpdesk issue): Maven 4 RC/GA
- Maven 4 pre-release version preview in ci.jenkins.io mailing list thread
- (add to roadmap): weekly.ci.jenkins.io as public live demo
- LTS 2.541.1:
Upcoming Calendar 
- Next Weekly: 2026-01-27 - 2.548
- Next LTS:
- 2026-02-04 - 2.541.2 - RC
- 2026-02-18 - 2.541.2
- Next Security Release as per jenkinsci-advisories: N.A.
- Upcoming credentials expirations (~3 weeks):
- 2026-01-27: VPN CRL expires
- 2026-01-28: Expiration of the Digital Oceans PATs used by Terraform on infra.ci.jenkins.io
- [infra.ci.jenkins.io] Track Digital Ocean PAT expiration (2026-01-28) used by terraform with updatecli => Jay with Herve in pair
- Next major event:
- Contributor Summit + FOSDEM in Brussels, 30/31 Jan and 1st Feb
- We have a booth for Jenkins at FOSDEM
- Agenda for Summit is still WiP. Bring ideas (in community.jenkins.io)
- Jenkins Contributor Summit on Jan 30, 2026 - Call for topics and ideas
- Mark is confirming with people based on the prioritized list from the Jenkins Board
- Contributor Summit + FOSDEM in Brussels, 30/31 Jan and 1st Feb
Cloud Budgets
-
Azure CDF - Remaining: $24.000k on 1st January 2026 - monthly threshold set at $6.0k (good until May at the current rate)
- October: $5.5k (invoice)
- November: $5.7k (invoice)
- December: $5.4k (invoice, previously forecasted at $6k)
- January: $3.9k (forecast at $5.8k, previously at $5.4k)
-
DigitalOcean - Remaining $10,411.25 until January 02, 2027 (20 months left at current rate)
- October: $788.81 (invoice)
- November: $831.38 (invoice)
- December: $454.60 (invoice, previously forecasted at $585)
- January: $282.71 (forecast at ~$345)
-
AWS:
-
CloudBees account: does not host anything anymore, account deletion requested in Cloudbees (thanks for the sponsoring!)
-
Sponsored account - $54,613.14 left (31 December 2025) until 31 May 2027=>
5 months remaining at this rate- October: $6.9k
- November: $5.9k
- December: $10.7 (previously forecasted at $9.5k way higher than usual)
- Huge increase due to EC2 plugin bug
- January: $11.2k (forecast at $15.7k, previously at $11.5k)
- Still really high, ci.jenkins.io is once again at risk if we don’t decrease the consumption or if we don’t move it somewhere else before end of April 2026
- Need an issue ASAP for the EC2 agents GC (Damien)
- Mark opened an issue on the EC2 plugin: ci.jenkins.io EC2 agents sometimes hang and fail to connect with SSH key not found · Issue #1990 · jenkinsci/ec2-plugin · GitHub
- Also: we have requested sponsoring renewal
-
-
Jfrog Artifactory Usage
- Storage: 1.53 Tb - (was 1.53TB last time)
- Bandwidth:
- October: 16.67 Tb
- November: 15.9 Tb
- December: 30.34Tb
- A single IP address consumed 12Tb in December
- JFrog didn’t block this address until this month (unless this consumer changed its IP?)
- January: 11.25 TB Tb (forecast: 16.5 Tb)
- Sounds like the abuser stopped abusing
Notes 
-
Done:
- LTS 2.541.1 release
- [pkg.jenkins.io] Unify RPM Jenkins packages (RedHat/OpenSUSE)
- Forgot the
/*-legacyin changelog. Fixed. - Forgot the GHA in jenkinsci/jenkins which hads the RPM to the GH Release. Fixed by @timja thanks!
- Forgot the
- [pkg.jenkins.io/release.ci.jenkins.io] Jenkins Packaging GPG key expires on the 26 March 2026
- Add
.war.ascto get.jenkins.io - Update ci.jenkins.io, trusted.ci, cert.ci and release.ci to latest LTS version 2.541.1
- [pkg.jenkins.io] Unify RPM Jenkins packages (RedHat/OpenSUSE)
- [pkg.jenkins.io] migrate the pkg.origin.jenkins.io service from AWS VM to Azure
publick8s - Support:
- Seeing slowness and increased test failures in kubernetes-plugin PR build tests
- [Update Center] Cloudflare Outage since
2026-01-20at07:30 UTC - Tool installation crawler returns empty data for allure and sbt plugins
- Add Zbynek Konecny to the Copy Editors team
- Permission for jenkins.io
hlemeurto manage cert.ci.jenkins.io - Add Rajiv Singh to Copy Editors and Infra Stats teams
- Artifact caching proxy fails with ‘No route to host’ on Jenkins core build: DNS errors from AWS
- Hosting of CSP compatibility “microsite” repo
- Issue tracker redirector service
- checksum of config map in the nginx helm-charts
- Discuss about that to auto reload nginx config (only) in a new issue in jenkins-infra/helm-charts
- Migrate core issues to GitHub
- Github Copilot organisation space
- Keep infrastructure up to date
- LTS 2.541.1 release
-
- CSP:
- Set up resource root URL on all Jenkins instances
- DNS are done
- Herve works on the Kubernetes management part
- Waiting for release of the fix on the official helm chart
- Damien on the Puppet
- Incoming Puppet PR to apply what is done on ci.jio to trusted/cert
- Set up 2.539+ CSP protection on LTS controllers, remove
cspplugin and associated configuration - Set up 2.539+ CSP protection on weekly.ci.jenkins.io, remove
cspplugin and associated configuration - For confirmation and closure, ask Daniel if only enabling it is sufficient (csp plugin v1 had various values saved as casc on ci.jenkins.io)
- Set up resource root URL on all Jenkins instances
- Keep infrastructure sane and maintainable
- [(status|contributors|stats|docs|stories|cn|jenkins-io-components).jenkins.io, Websites PR previews] Netlify billing plan changed: evaluate and act
- Support finally told us we should stay free (despite their billing notifications) and not need a credit card
- However, we saw that both status.jenkins.io and another of our websites are consuming a lot of bandwidth and web requests
- Idea: do not host production (even behind Fastly) on netlify to decrease usage but keep using their nice “Preview websites” feature
- decommission (or rename) docs.jenkins.io?
- [docker-openvpn] Track OpenVPN User Certificate Expiration with
updatecli- Waiting for review from Herve and Damien
- [(status|contributors|stats|docs|stories|cn|jenkins-io-components).jenkins.io, Websites PR previews] Netlify billing plan changed: evaluate and act
- Support
- Windows
- Creating new key set fails on Windows agents - Error 5: Access is denied
- First PR to be delivered on agent
- Still need to find a fix around the default agent ‘jenkins’
- [ci.jenkins.io] Windows build with JDK25 fails with unexpected errors (out of memory, etc.)
- need to check again after deploying the incoming quarterly JDK patches (Feb/March 2026)
- Creating new key set fails on Windows agents - Error 5: Access is denied
- Make Kris Stern an admin for all docs-related Jenkins repos
- Waiting for Kris to close, no action expcted as for today
- Automated process for a plugin maintainer to request migration from Jira to GitHub issues
- Removing from milestone
- Windows
- Keep infrastructure up to date
- [pkg.jenkins.io/release.jenkins.io] Certificate signing the MSI Jenkins package expires on 16 May 2026
- Resuming PoC on Azure
- Switch controllers to use Windows 2025 agents by default
- PRs have been prepared in Draft. One last one to be finalized, announce and we can deploy them!
- Expecting better I/O performances
- [private.vpn.jenkins.io] VPN CRL expires on 2026-01-27
- [infra.ci.jenkins.io] Track Digital Ocean PAT expiration (2026-01-28) used by terraform with updatecli
- [pkg.jenkins.io/release.jenkins.io] Certificate signing the MSI Jenkins package expires on 16 May 2026
- Delayed until 2.541.1:
- ci.jenkins.io is responding slowly
qualys-csplugin bundles closed-source library- Spot reclamation caused build failures in core build
- [staging.pkg.origin.jenkins.io/staging.get.jenkins.io] Garbage collect the inactive branches
- Bunch of bad links on https://updates.jenkins.io/ and https://get.jenkins.io
- [get.jenkins.io,mirrors.updates.jenkins.io] Resume GeoIP database weekly update
- Ensure the BOM cache filler runs successfully and is easier to use and monitor
- Setup a job/set of jobs to allow performing maintenance operations (cron, GCs of resources, etc.)
- [incrementals.jenkins.io/ci.jenkins.io] Outage of incrementals due to
releasebotuser’s API token reset github-jenkinsci-permissions-report.jsonhasn’t been updated since Sep 12- [stats.jenkins.io/infra-statistics] Move “data for the usage stats site” generation (from anonymized data) out from Andrew machine
- CSP: