Attendees 
- @dduportal (Damien Duportal)
- @MarkEWaite (Mark Waite)
- @poddingue (Bruno Verachten)
- @jayredy999 (Jay Reddy)
- @hlemeur (Hervé Lemeur)
Announcements 
- Weekly 2.465/2.466 (02 July 2024)
- Weekly 2.467 (09 July 2024)
- Started on time
- Still using the Maven 3.0.1 Release plugin (won’t fail)
- Jenkins Infra SIG meeting cancelled the 16th of July 2024. Next one the 23rd of July.
- CVE-2024-6387 (OpenSSH)
- We (still) have to check our SSH restrictions on VMs
. Draft PR (WiP) feat: restrict SSH access to VMs by dduportal · Pull Request #556 · jenkins-infra/aws · GitHub
- We (still) have to check our SSH restrictions on VMs
Upcoming Calendar 
- Next Weekly: 2.468 (16 July 2024)
- Next LTS: 2.452.3, tomorrow (10 July 2024)
- This LTS still uses Maven 3.8.x and JDK11 as expected (Docker jenkinsciinfra/packaging 4.x line)
- Let’s watch the Controller Docker image build with JDK11 (should be good but better to check)
- Next Security Release as per jenkinsci-advisories: N.A.
- Upcoming credentials expirations (~3 weeks):
- Terraform States Azure SP expires the 16/17 July - [Terraform] Azure Client passwords of terraform states expire 16 July 2024 · Issue #4166 · jenkins-infra/helpdesk · GitHub
- Azure File Share credentials - (issue TODO)
- 23 July: New end date for `jenkins.io` File Share service principal writer on `trusted.ci.jenkins.io` (current: "2024-07-23T00:00:00Z") by jenkins-infra-updatecli[bot] · Pull Request #770 · jenkins-infra/azure · GitHub
- 27 July: https://github.com/jenkins-infra/azure/pull/778
- 28 July: New end date for `javadoc.jenkins.io` File Share service principal writer on `trusted.ci.jenkins.io` (current: "2024-07-28T00:00:00Z") by jenkins-infra-updatecli[bot] · Pull Request #779 · jenkins-infra/azure · GitHub
- ci.jenkins.io Azure SP (for Azure VM agents) expires the 22 July - Issue TODO
Cloud Budgets
- Azure (CDF paid)
- April: $4,550 (invoice)
- May: $4,339 (invoice)
- June: $4,287 (estimated, $4187 of billing + $100 support)
- July (current): $1172 consumed (Forecast at ~4.3k)
- Azure Sponsorship (Microsoft Credits)
- April: $2k
- May: $5k consumed
- June: $7.3k consumed
- July (current): $2142 consumed (Forecast at ~7k)
- DigitalOcean
- April: $840
- May: $648
- June: $165.32
- July (current): $45 consumed (Forecast at $155)
- AWS:
- CloudBees:
- April: $9,782
- May: $8,281
- June: $5,862
- July (current): $1875 consumed (Forecast at $6k)
- Sponsored account
- Global Status:
- Credits left: $60,000 until 31 January 2025
- Untouched
- Global Status:
- CloudBees:
Notes 
-
Done:
-
Work in progress (Milestone 119):
- [Post Mortem] Jenkins Core release
2.465failed and was replaced by2.466- Need to provide more informations to the Maven Release plugin maintainers
- We have to track (to completion) the bump of this Maven plugin in jenkins core
- Ask OSSPlanet for a Jenkins mirror
- back to backlog, waiting for an answer from them until end of August
- [Plugin Health Score] Scores not computed - Getting logs from plugin-health.jenkins.io
- Kept open until Adrien has availability
- Should we rollback to the last known version (at the cost of loosing feature)? Would it solve the issue or not?
- Let’s move this to backlog until he’s available
- Add JDK21 agents (build)
- @jay started to work on providing maven21 and maven17 Azure Linux VM templates on ci.jenkins.io. Next candidate will be trusted.ci (but SSH launcher instead of inbound)
- Need an issue for tooling JDK17 and JDK21 on trustec and cert => @dduportal
- Migration left over from publicK8s to arm64
- Reproduce LDAP issue on a local arm64 machine
- Check if we can build and run mirrorbits ourselves on intel + arm64 (0.5.2 version)
- [INFRA-3100] Migrate updates.jenkins.io to another Cloud
- Update Herve PR on update-center2 to introduce the new Azure “redirect” HTTP fileshare
- Introduce the 2nd cloudflare bucket (in US as the 1st in EU)
- crawler: update delivery (and add the 2 above)
- Then we will be able to resume load testing
- [Post Mortem] Jenkins Core release
-
Triage/ to add:
- To host stats.jenkins.io GSoC 2024 project in jenkins-infra
- Status:
- New stats website is up and running
- Issue kept open for the end of the project to manage URL transitions
- Let’s remove from milestones until we have to change URLs to final one (or if issue requiring jenkins-infra is reported)
- Status:
- Terraform (new milestone)
- Terraform 1.9: [Terraform Projects] Bump to Terraform 1.9.x · Issue #4164 · jenkins-infra/helpdesk · GitHub
- Terraform state credential rotation: [Terraform] Azure Client passwords of terraform states expire 16 July 2024 · Issue #4166 · jenkins-infra/helpdesk · GitHub
- Terraform datadog state as code: [Terraform `datadog`] Move Terraform state to a managed Azure bucket · Issue #4167 · jenkins-infra/helpdesk · GitHub
- Kube 1.29: Upgrade to Kubernetes 1.29 · Issue #4161 · jenkins-infra/helpdesk · GitHub
- infra.ci.jenkins.io - GH rate limit: [infra.ci.jenkins.io] Builds stucks due to GH API rate limit · Issue #4165 · jenkins-infra/helpdesk · GitHub
- Additional setting mentioned by Mark: we could tune the “approach rate limit” on admin
- infra.ci.jenkins.io and updatecli jobs: Updatecli: Use separated pipelines + organization scanning for all updatecli processes in jenkins-infra · Issue #2778 · jenkins-infra/helpdesk · GitHub
- To host stats.jenkins.io GSoC 2024 project in jenkins-infra
-
ToDo (next milestone) (infra-team-sync-2024-07-23 Milestone · GitHub)