Attendees 
- @dduportal (Damien Duportal)
- @jayfranco999 (Jay Reddy)
- @biru-codeastreamer (Birajit)
Announcements 
- Jenkins Weekly Releases
- Last Week: 2.520 - success - You're invited to talk on Matrix
- This Week: 2.521 - started on time - You're invited to talk on Matrix
- Announcements:
- LTS 2.516.1 released last week with success
- New header!
- Stephane is off until end of August (modulo 2 days this week)
- Infra Roadmap
- Jenkins Roadmap
- Priority: finish Azure Sponsored subscription decommission
- LTS 2.516.1 released last week with success
Upcoming Calendar 
- Next Weekly: 2025-08-05 - 2.522
- Next LTS: 2025-08-20 - 2.516.2
- RC: 2025-08-06
- Next Security Release as per jenkinsci-advisories: N.A.
- Upcoming credentials expirations (~3 weeks):
- 2025-08-08:
- Digital Ocean PAT (Terraform on infra.ci) expires - [infra.ci.jenkins.io] 2025-08-08 Expiration of the Digital Oceans PATs used by Terraform · Issue #4740 · jenkins-infra/helpdesk · GitHub
- VPN CRL expires - [private.vpn.jenkins.io] 2025-08-08 (August 2025) VPN CRL expires · Issue #4742 · jenkins-infra/helpdesk · GitHub
- 2025-08-10:
- Azure Credential used by release.ci to access its Keyvault expires - [release.ci.jenkins.io] Azure Credentials for Core Release (Vault access) expires the `2025-08-10` · Issue #4741 · jenkins-infra/helpdesk · GitHub
- 2025-08-08:
Cloud Budgets
-
Azure CDF:
- April: $3.9k (invoice)
- May: $3.5k (invoice)
- June: $3,474 (invoice)
- July: $3,820 (forecast at ~4.2k)
- Increase due to workload migrated last week (ephemeral VM agents for trusted,cert and infra, packer builds)
- For info: current projection (without optimization) is ~5.8k in August
-
Azure Sponsorship (Microsoft Credits) - Remaining: $1153 until 31 August 2025
- April: $12.1k
- May: $14.6k
- June: $10.5k
- July: $4,972
- ~57$ daily in the past 5 days => 20 days left at this rate
-
DigitalOcean - Remaining $13,395.86 until January 02, 2026
- April: $349 (invoice)
- May: $310 (invoice)
- June: $252 (invoice)
- July: $196 (forecast at $210)
-
AWS:
-
CloudBees:
- April: $532
- May: $548
- June: $598
- July: $570 (forecast at $630)
- slight increase, haven’t check why
-
Sponsored account ($94,370 credits lefts until 2027)
- April: $1,977
- May: $2,96
- June: $367.25
- July: $4,276 (forecast at $4,7k)
- Projection at ~5.5k for August
-
-
Jfrog Artifactory Usage
- Storage: 1.23TB (slight increase of 10 Gb)
- Logs files and new dependencies
- Bandwidth:
- April: 26.34 TB (22.25 Tb for ‘releases’ repository)
- May: 23.93 TB (22.21 Tb for ‘releases’ repository)
- June: 22.94 TB (21.44 Tb for ‘releases’ repository)
- July: 22.84 Tb (21.54 Tb for ‘releases’ repository) - forecast at 25 Tb
- Storage: 1.23TB (slight increase of 10 Gb)
Notes 
-
Done:
- Decommission Azure Sponsored Subscription:
- [infra/cert(.ci.jenkins.io)] Move ACR (used to cache DockerHub) workload in Azure from the sponsored subscription to the CDF subscription
- [infra.ci.jenkins.io] Move packer-images workload in Azure from the sponsored subscription to the CDF subscription
- [trusted.ci.jenkins.io] migrate VM ephemeral agents from Azure (sponsored) subscription to Azure (CDF) subscription
- [cert.ci.jenkins.io] migrate VM ephemeral agents from Azure (sponsored) subscription to Azure (CDF) subscription
- [infra.ci.jenkins.io] migrate VM ephemeral agents from Azure (sponsored) subscription to Azure (CDF) subscription
- Keep platform sane and maintainable:
- Support:
- Keep platform up to date:
- Decommission Azure Sponsored Subscription:
-
-
2025 Cloud Usage: ensure that we can run until end of year
- Decommission Azure Sponsored Subscription:
-
Keep platform sane and maintainable:
- Monitor builds on our private instances (trusted.ci.jenkins.io / infra.ci.jenkins.io / release.ci.jenkins.io)
- Blocker: infra.ci is down + there is an unexpected file instead of a directory
- Started Datadog research for monitoring
- Tombstone Puppet (and replace it by something else)
- Jack did start to gather and write down informations, more back and forth happening in the issue
- Monitor builds on our private instances (trusted.ci.jenkins.io / infra.ci.jenkins.io / release.ci.jenkins.io)
-
Keep platform up to date:
- JDK patch upgrade campaign (July 2025)
- Almost finished: waiting for today’s weekly release
- Update Jira LTS from 9.12.x to 10.3.x
- LF OPS people have question unanswered + we need to reset the JIRA LDAP binding password
- JDK patch upgrade campaign (July 2025)
-
Support:
- Admin access for Jenkins GSoC org admins to GSoC SiG Gitter channel
- Damien requested to Gitter support to get access again
- [ci.jenkins.io] diagnose and eventually fix the EC2 Windows VM performances and build failures/retries
- Github Copilot organisation space
- [stats.jenkins.io/infra-statistics] Move “data for the usage stats site” generation (from anonymized data) out from Andrew machine
- OSUOSL: decrease mirror dependency
- Admin access for Jenkins GSoC org admins to GSoC SiG Gitter channel
-
-
Issues staying in backlog/triage:
- private docker image registry for staging core security releases
- [Azure]: credentials less Service Principal
- Tracking Issue for Groovy Script Conversion in RPU
- Artifactory Not Caching Google’s Maven Repository
- Migrate
census.jenkins.ioVM from AWS CloudBees to DigitalOcean - Chinese jenkins site incorrect site redirection
- [Azure] Migrate (e.g. re-create) AKS clusters
publick8sandprivatek8swith modern settings (private API, Azure Linux, NAT outbound) - [cert.ci/trusted.ci/private.vpn] Default outbound access for VMs in Azure will be retired
- [private.vpn.jenkins.io] Azure deprecates Public IPs of type “Basic” the 30 September 2025
- Add a real-world job to weekly.ci.jenkins.io
- [ci.jenkins.io] Monitor and Garbage collect data volume of the DockerHub registry mirror and EC pull through cache
- Move collection of stats out from Kohsuke’s home
- Support [skip ci] on default branch
- Create build for jenkinsci/winp on release ci server
- [Update Center] HTTP/404 on
/current/updates/*.json*links - dnf5 update fails with gpgcheck=1
- Add monitoring for CD secrets updates
- [INFRA-3046] Monitor Jenkins mirrors Age
-
Issues added to the next milestone:
- Reduce artifactory bandwidth used by ci.jenkins.io
- Most probably ACP does not cache well the (old) WAR files
- Reduce artifactory bandwidth used by infra.ci.jenkins.io
- We know it is from VM ephemeral agents. Docker jobs?
- [private.vpn.jenkins.io] 2025-08-08 (August 2025) VPN CRL expires
- [release.ci.jenkins.io] Azure Credentials for Core Release (Vault access) expires the
2025-08-10 - [infra.ci.jenkins.io] 2025-08-08 Expiration of the Digital Oceans PATs used by Terraform
- GSoC 2025 - Plugin Modernizer improvement - New repo for
metadata-plugin-modernizer
- Reduce artifactory bandwidth used by ci.jenkins.io