Attendees 
- @dduportal (Damien Duportal)
- @MarkEWaite (Mark Waite)
- @lemeurherve (Hervé Le Meur)
Announcements 
- Jenkins Weekly Releases
- This Week: 2.548 - You're invited to talk on Matrix
- Windows 2022 images failing due to Microsoft registry timeout, replayed job on only 2022 images
- This Week: 2.548 - You're invited to talk on Matrix
- Announcements:
- Team capacity:
- FOSDEM incoming: expect lower availability
- Jay is off starting tomorrow
- Herve and Mark will be travelling to/from FOSDEM
- Damien off for ~6 weeks on the first February, maybe earlier
- FOSDEM incoming: expect lower availability
- Priorities:
- Infra Roadmap: Jenkins Roadmap
- Current topics:
- (not in roadmap, no need to) ci.jenkins.io => cloud billing and stability
- Windows 2025/2022/2019
- JDK25 as runtime for our controllers
- Get rid of Puppet (in favor of Ansible)
- (add to roadmap + open helpdesk issue): Maven 4 RC/GA
- Maven 4 pre-release version preview in ci.jenkins.io mailing list thread
- (add to roadmap): weekly.ci.jenkins.io as public live demo
- Team meeting: cancelling 2026-02-03. Next one will be on 2026-02-10.
- Team capacity:
Upcoming Calendar 
- Next infra meeting in two weeks
- Next Weekly: 2026-02-03 - 2.549
- Next LTS:
- 2026-02-04 - 2.541.2 - RC
- 2026-02-18 - 2.541.2
- Next Security Release as per jenkinsci-advisories: N.A.
- Upcoming credentials expirations (~3 weeks):
- 202-02-16:
- [Issue to create] Netlify token on infra.ci.jenkins.io expires (Previous renewal: [infra.ci.jenkins.io] Netlify token expires the 2025-11-27 · Issue #4860 · jenkins-infra/helpdesk · GitHub) => Check if doable by Hervé
- [Issue to create] NPM token on infra.ci.jenkins.io expires (Previous renewal: [infra.ci.jenkins.io] NPM token expires the 25 November 2025 · Issue #4859 · jenkins-infra/helpdesk · GitHub) => Check if doable by Hervé
- 202-02-16:
- Next major event:
- Contributor Summit + FOSDEM in Brussels, 30/31 Jan and 1st Feb
- We have a booth for Jenkins at FOSDEM
- Agenda for Summit is still WiP. Bring ideas (in community.jenkins.io)
- Jenkins Contributor Summit on Jan 30, 2026 - Call for topics and ideas
- Mark is confirming with people based on the prioritized list from the Jenkins Board
- Contributor Summit + FOSDEM in Brussels, 30/31 Jan and 1st Feb
Cloud Budgets
-
Azure (CDF paid)
- October: $5.5k (invoice)
- November: $5.7k (invoice)
- December: $5.4k (invoice)
- January: $4.8k (forecast at $5.8k)
-
Azure Sponsorship (Microsoft Credits): still stuck.
- We see the $100k credits in the account but can’t use them
- Alex Brandes (NotMyFault) is on it (dealing with Microsoft Support and Partner program). Send him hugs.
-
DigitalOcean - Remaining $10,411.25 until January 02, 2027 (20 months left at current rate)
- October: $788.81 (invoice)
- November: $831.38 (invoice)
- December: $454.60 (invoice, previously forecasted at $585)
- January: $354.80 (forecast at $407, previously at $345)
-
AWS:
- Sponsored account - $54,613.14 left (31 December 2025) until 31 May 2027=>
5 months remaining at this rate
- October: $6.9k
- November: $5.9k
- December: $10.7 (previously forecasted at $9.5k way higher than usual)
- Huge increase due to EC2 plugin bug
- January: $13.4k (forecast at $15.3k, previously at $15.7k)
- Still really high, ci.jenkins.io is once again at risk if we don’t decrease the consumption or if we don’t move it somewhere else before end of April 2026
- Need an issue ASAP for the EC2 agents GC (Damien)
- Need an issue for packer image various resources cleanup
- Mark opened an issue on the EC2 plugin: ci.jenkins.io EC2 agents sometimes hang and fail to connect with SSH key not found · Issue #1990 · jenkinsci/ec2-plugin · GitHub
- Request for sponsoring renewal sent
- Sponsored account - $54,613.14 left (31 December 2025) until 31 May 2027=>
-
Jfrog Artifactory Usage
- Storage: 1.54 Tb - (was 1.53TB last time)
- Bandwidth:
- October: 16.67 Tb
- November: 15.9 Tb
- December: 30.34Tb
- A single IP address consumed 12Tb in December
- JFrog didn’t block this address until this month (unless this consumer changed its IP?)
- January: 13.83 Tb (forecast at 15.9 Tb, previously at 16.5 Tb)
- Sounds like the abuser stopped abusing
Notes 
-
Done (Milestone 193)
- Support
- Keep infrastructure sane and maintainable
- Set up resource root URL on all Jenkins instances
- Set up 2.539+ CSP protection on LTS controllers, remove
cspplugin and associated configuration - Set up 2.539+ CSP protection on Weekly controllers, remove
cspplugin and associated configuration - Grant SSH access for
hlemeurto the (Puppet managed) VMs
- Keep infrastructure up to date
- [infra.ci.jenkins.io] Track Digital Ocean PAT expiration (2026-01-28) used by terraform with updatecli
- [private.vpn.jenkins.io] VPN CRL expires on 2026-06-01
- We learnt that revoking an user, it extends CRL expiration date
- Was initially expiring on 2026-01-28
- An updatecli manifest will now open an informative PR before expiration
-
Work in Progress (Milestone ID)
- Support
- [ci.jenkins.io] Windows build with JDK25 fails with unexpected errors (out of memory, etc.)
- Closeable (not seen again at first sight) => yes.
- Is the Windows 2025 working better?
- Maybe the new Oracle patch fixes it (not delivered yet, waiting for Temurin)
- Creating new key set fails on Windows agents - Error 5: Access is denied
- Main issue solved, fix in progress in the Docker test harness (due to no more administrator)
- decommission (or rename) docs.jenkins.io?
- Wip on the new hostname /service “alpha.docs.jenkins.io”
- Next step: migrate production to it and decommision the old Fastly docs.jenkins.io
- Note: “docs.jenkins.io” will still exist and redirect to alpha.docs after the migration
- Spot reclamation caused build failures in core build
- Delayed to stabilize ci.jenkins.io and its spending
qualys-csplugin bundles closed-source library- Still waiting for Daniel. No infra action requested.
- Moving out of milestone (+ ping Daniel privately as reminder)
- Bunch of bad links on https://updates.jenkins.io/ and https://get.jenkins.io
- Delayed, we can resume work on it.
- WiP: understanding the root cause in the HTML/JS in the way jenkins components are setup.
- Maybe require manual update, and if so, a corresponding runbook entry
- [incrementals.jenkins.io/ci.jenkins.io] Outage of incrementals due to
releasebotuser’s API token reset- Damien still need to reproduce
- Operation to perform when deploying enforced auth. on ci.jenkins.io: remove all users one time (no more failed migration on startup) but require re-creating API tokens
- Operation to describe (potential incremental service interruption, could put ci.jenkins.io in shutdown)
github-jenkinsci-permissions-report.jsonhasn’t been updated since Sep 12- Delayed: no major issue,we want to use (in infra.ci) a VM agent for this job (non spot) instead of container agent.
- [ci.jenkins.io] Windows build with JDK25 fails with unexpected errors (out of memory, etc.)
- Keep infrastructure sane and maintainable
- [(status|contributors|stats|docs|stories|cn|jenkins-io-components).jenkins.io, Websites PR previews] Netlify billing plan changed: evaluate and act
- No more emergency: their support said we don’t need credit card but they need info from us (Damien to send it from Jenkins board answer he receieved earlier today)
- Next step: move status.jenkins.io production out of Netlify to GH pages.
- [docker-openvpn] Track OpenVPN User Certificate Expiration with
updatecli- Jay is off, Damien and herve takes over the last step.
- [staging.pkg.origin.jenkins.io/staging.get.jenkins.io] Garbage collect the inactive branches
- On pause
- [get.jenkins.io,mirrors.updates.jenkins.io] Resume GeoIP database weekly update
- On pause
- Ensure the BOM cache filler runs successfully and is easier to use and monitor
- On pause
- Setup a job/set of jobs to allow performing maintenance operations (cron, GCs of resources, etc.)
- On pause
- [stats.jenkins.io/infra-statistics] Move “data for the usage stats site” generation (from anonymized data) out from Andrew machine
- On pause
- [(status|contributors|stats|docs|stories|cn|jenkins-io-components).jenkins.io, Websites PR previews] Netlify billing plan changed: evaluate and act
- Keep infrastructure up to date
- Switch controllers to use Windows 2025 agents by default
- One last step: infra acceptance tests change to check the Windows version, PR open, wip.
- [pkg.jenkins.io/release.jenkins.io] Certificate signing the MSI Jenkins package expires on 16 May 2026
- On pause
- Switch controllers to use Windows 2025 agents by default
- Support
-
TODO (next milestone: GitHub · Where software is built)