Infrastructure Team Meeting - June 13, 2023

[dduportal (Damien Duportal)]

2023 06 13 Jenkins Infra Meeting

• @dduportal (Damien Duportal)
• @MarkEWaite (Mark Waite)
• @smerle33 (Stéphane Merle)
• @poddingue (Bruno Verachten)
• @kmartens27 (Kevin Martens)

Announcements

1. Weekly 2.410:
   • Release done (artefacts, packages and Docker image)
   • Changelog bits
   • When tagging jenkinsci/docker, either
     • Create a new annotated tag and publish a release associated with this tag
     • Or create the release, which creates the (non-annotated) tag and then check on trusted.ci if the build triggers automatically, otherwise start it.

Upcoming Calendar

• Next Weekly: 2.411, 20th June 2023
• Next LTS: 2.401.2 releasing 28 June, release candidate tomorrow
• Next Security Release as per jenkinsci-advisories: N.C.
• Next major event:

Notes

• Done:

  • Documentation updates not rendering on jenkins.io
  • Please add Jitpack to repositories available when useArtifactCachingProxy=true
  • Install renovate on @jenkins-infra repositories
  • Package availability dashboard is empty
  • [puppet.jenkins.io] Webhook notifications from jenkins-infra repository fails to reach the controller
  • Migrate trusted.ci.jenkins.io from AWS to Azure
    • Cleanup of AWS resources todo
    • Access to bounce requires an allowed public IP: should we continue or VPN? => the first choice
    • Runbook updated with the new setup for SSH
  • Making public the Plugin Health Scoring project for GSoC 2023
  • Expiration of the Digital Oceans PATs [June 2023]

• Work In Progress:

  • Remote repository for repo.karuslabs.com
    • Looks like mirroring is not allowed on the remote Nexus (HTTP/404 when using Jfrog while ok with Maven)
    • Gotta check with the persons who raised the issue and the repo maintainers
  • node tolerations and taint for nodepool arm
    • Backlog (or bonus)
  • AKS: add cluster publick8s and migrate prodpublick8s public services on it
    • All services are now migrated
    • Only cleanup task left
    • We can start working on IPv6
  • Install and configure Datadog plugin on ci.jenkins.io
    • Rollbacked setup and plugin
    • Gotta handover with Hervé or postpone
  • Assess Artifactory bandwidth reduction options
    • Brownout with jgit done
      • Summary to be written and shared
      • Result is not positive: we cannot set as private a remote repo such as jgit while keeping it under a public virtual repo (such as public)
    • We’ll need help from Jfrog or ideas to help us
    • Let’s work again on the LDAP HA
    • Settings.xml with password from UI => Mark
  • Ubuntu 22.04 upgrade campaign
    • 2 remaining VMs in AWS
    • ci.jenkins.io done in [ci.jenkins.io] Use a new VM instance type · Issue #3535 · jenkins-infra/helpdesk · GitHub
  • Matomo github/docker repos
    • Haven’t done anything yet, let’s get started!
    • Main task is MySQL
    • We have all required information
  • Upgrade to Kubernetes 1.25
    • DigitalOcean clusters friday morning
  • Jenkins CI failing for jenkins plugin after changes in jenkinsfile to update jenkins.version
  • [ci.jenkins.io] Use a new VM instance type
    • Inbound agents first
  • Artifact caching proxy is unreliable
    • Inbound agents first

• New issues:

  • Proposal for application in publick8s to migrate to arm64 · Issue #3619 · jenkins-infra/helpdesk · GitHub

• ToDo (next milestone) (infra-team-sync-2023-06-20 Milestone · GitHub)