Attendees 
- @dduportal (Damien Duportal)
- @lemeurherve (Hervé Le Meur)
- @jayfranco999 (Jay Reddy)
Announcements 
- Jenkins Weekly Releases
- This Week: 2.567, packaging issue around MSI, since fixed
- Announcements:
- Team capacity:
- Hervé is off on Wednesday
- Priorities:
- Infra Roadmap: Jenkins Roadmap
- Current topics:
- Azure Sponsored Subscription 2026: utilizes the 100k$ credits for the Jenkins Infrastructure
- Puppet to Ansible
- ci.jenkins.io billing => issue to create @dduportal (1 epic)
- DigitalOcean billing (2 issues to create for rate limit / user agents + 1 epic) => @hervelemeur
- Team capacity:
Upcoming Calendar 
- Next infra meeting: next week, 2026-06-09
- Next Weekly: 2026-06-09 - 2.568
- Next LTS: 2026-06-10 - 2.555.3
- Next Security Release as per jenkinsci-advisories: N/A
- Upcoming credentials expirations (~3 weeks):
- 2026-06-07:
- 2026-06-08:
- [infra.ci] Azure Credential to deploy docs.jenkins.io expires - [infra.ci.jenkins.io] Azure Credential to deploy docs.jenkins.io expires on 2026-06-08 · Issue #5120 · jenkins-infra/helpdesk · GitHub
- 2026-06-09:
- [infra.ci] Azure AD Application password for updatecli expires (issue to create => @7JoquqrvQFu6FDlR14JVhg)
- [infra.ci] Azure Credential to write to reports.jenkins.io expires (issue to create => @7JoquqrvQFu6FDlR14JVhg)
- 2026-06-27:
- [release.ci.jenkins.io] Azure Credentials for Core Release (Vault access) expires (issue to create => @dduportal)
- Next major event: N.A.
Cloud Budgets
-
Azure (CDF paid)
- February: $6.4k (invoice)
- March: $5.6k (invoice)
- April: $3.553 (invoice)
- May: $2800 (invoice)
- Good decrease, final target threshold should be $2.5k
- privatek8s migrated to Sponsored subscription: 25 to 30 less daily!
-
Azure Sponsored subscription (Microsoft Credits): ~$86347 credits on June 2d 2026 - until 20 Oct. 2027
- March: $1847 (invoice)
- April: $5902 (invoice)
- May: $5734 (invoice)
- 15 months left at current rate
-
DigitalOcean - Remaining $7,246 until January 02, 2027
- February: $565.03 (invoice)
- March: $423.63 (invoice)
- April: $841,69 (invoice)
- May: $1186.97 (invoice, previously forecasted at ~$1k)
- ~6 months left at current rate (drastic increase in download bandwitdh in April and May [$850])
- Add rate limit (via a module of Apache) => issue to create @hervelemeur
- Blocking some common LLM/scrapper user agents => issue to create @hervelemeur
- ~6 months left at current rate (drastic increase in download bandwitdh in April and May [$850])
-
AWS:
- Sponsored account, credits left: $43.6k until 01/31/2028
- February: $11.1k (invoice)
- March: $14.0k (invoice)
- April: $15.4k
- May: $14.9k
- Decreased a bit but still high (EC2 plugin bug, BOM, non spots, old instance family, bandwidth)
- A bit less than 3 months left at current rate
- Sponsored account, credits left: $43.6k until 01/31/2028
-
JFrog Artifactory Usage
- Storage: 1.85 Tb (previously at 1.7 Tb)
- Bandwidth:
- February: 17.46 Tb
- March: 27.24 Tb
- April: 43.85 Tb
- May: 29.98 Tb
-
Algolia API usage
- Context: [plugins.jenkins.io] Watch Algolia search usage for June 2026
- plugins.jenkins.io:
- June: 7.4k search requests for the 1st June => it’s too much (200k monthly max)
- Before yesterday, the original 200 hits/day rate limit never restricted any IP
Notes 
-
Done:
-
support
- oracle-cloud-infrastructure-compute plugin doesnt show the latest version on https://plugins.jenkins.io page
- plugins.jenkins.io page 404 for new editor-search plugin
- Searching for a plugin by name no longer returns the plugin page
- [infra.ci.jenkins.io] less than 20% available inodes in the JENKINS_HOME
- [release.ci.jenkins.io] less than 20% available disk space in the
JENKINS_HOME - Renew leaked Datadog API key for ci.jenkins.io ephemeral agents
- Replace maintainer for ompass-2fa-plugin: add OMSecurity, remove dev-hanseob
- GSoC 2026 - User Guide Chatbot Project - New Plugin Repo Request
- GSoC 2026 - Retool jenkins.io website Success Stories and Contributor Spotlight
- GSoC 2026 - Plugin Modernizer stats visualization - New repo on jenkins-infra
plugin-modernizer-stats
-
keep-infra-up-to-date
- [private.vpn.jenkins.io] 2026-06-01 (June 2026) VPN CRL expires
- [trusted.ci.jenkins.io] Update Center credential for Cloudflare R2 expires on
2026-06-03 - [infra.ci.jenkins.io] Fastly API tokens used by the Fastly Terraform project expires on 03 June 2026
- [release.ci.jenkins.io] Fastly token used to decache pkg.jenkins.io expires on 03 June 2026
- [trusted.ci.jenkins.io] Fastly token used to decache www.jenkins.io expires on 03 June 2026
-
keep-infra-sane-and-maintainable
- [Terraform/pipeline-library] Terraform
mainbranch jobs are not running once per day - [trusted.ci] Monitor jobs not already monitored
- [trusted.ci] Increase threshold of
update_centerbuild monitoring alert - Use npm ci instead of npm install in CI/CD pipelines
- [privatek8s/infra.ci.jenkins.io/release.ci.jenkins.io] Run AKS cluster in the sponsored subscription
- [release.ci.jenkins.io] Avoid filling the JENKINS_HOME
- [Fastly Credentials] Switch to Automation token with expiration
- [Terraform/pipeline-library] Terraform
-
-
-
keep-infra-up-to-date
- [infra.ci.jenkins.io] Azure Credential to allow writing to reports.jenkins.io expires on 2026-06-09
- [infra.ci.jenkins.io] Azure AD Application password for updatecli expires on 2026-06-09
- Drop Windows 2019 support
- SIG platform meeting later today to discuss deprecation
- Upgrade to Kubernetes 1.34
- ci.jenkins.io agents 2 done yesterday. 2 minor issues but went well
- privatek8s-sponsored migrated to, no issues
- TODO: infra.ci.jenkins.io agents later today => @dduportal
- TODO: publick8s tomorrow (=> @7JoquqrvQFu6FDlR14JVhg and @dduportal)
-
support
- Request for an Entra Application & Exchange Online Mailbox Access for OAuth2 SMTP Testing - Gsoc2026
- Most probably no go, as we won’t setup a full subscription only for this. Let’s double check with Tim
- Spot instance failure not retried - ci.jenkins.io - core build
- EC2 plugin bug
(related to high EC2 costs)
- EC2 plugin bug
- Request for an Entra Application & Exchange Online Mailbox Access for OAuth2 SMTP Testing - Gsoc2026
-
keep-infra-sane-and-maintainable
- [infra.ci] Monitor all “Report” jobs
- Remove ASDF from website repositories and rely on packer-image NodeJS
- [updates.jenkins.io] provide a mirror for Jenkins Russian users
- On hold, need to reproduce the “tool mtd error” with a local container pointing at yandex error (looks like URI issue)
- Azure Sponsored Subscription 2026: utilizes the 100k$ credits for the Jenkins Infrastructure
- Tombstone Puppet (and replace it by something else)
-
-
Issues to triage (section to be deleted after triage)::
-
For next milestone
- Prepare release, packaging and docker backports for LTS 2.555.3
- [plugins.jenkins.io] Watch Algolia search usage for June 2026
- Migrate to new Microsoft Marketplace Windows Server 2022 images by 9 June 202
- Install
mcp-serverplugin on ci.jenkins.io- Need runbook entry to know how to monitor usage and how to stop it
- [infra.ci.jenkins.io] Website production deployment jobs not already monitored
- Make update-center2 generation more resilient against GH instability
- [infra.ci.jenkins.io] Azure Credential to deploy docs.jenkins.io expires on 2026-06-08
- [Terraform Credentials] Expirations of multiple credentials (backends, API) in jenkins-infra/terraform-states on 2026-06-07
- Decommission
rss2twitterservice
-
uncategorized
- Upgrade jq to 1.8 on packer-images and ensure compatibility across all jenkins-infra projects
- Debian upgrade campaign:
bookworm(12.x) totrixie(13.x) - Bump Helm from
3.xto4.x - Bump Terraform from 1.12.x to 1.15.x
- Ubuntu 26.04 (Resolute Racoon) upgrade campaign
- [cert.ci.jenkins.io] Monitor the
acceptance-tests-check-agent-availabilityjob and alert us when failing 3 consecutive times - Tombstone
plugin-site-apiservice (in favor of a static report file) - [cert.ci.jenkins.io] migrate controller VM from Azure CDF to Azure sponsored subscription
- [Terraform azure/aws/shared-tools] Migrate Kubernetes provider resources (
kubernetes_*) to versioned resources (kubernetes_*_v1) - See if we can get OIDC enabled on our artifactory
- main branch Jenkins build status is in progress but not build was triggered
- msbuild not available on ci.jenkins.io Windows agent for winp build process
- Sporadic HTTP 503 First byte timeout errors on jenkins.io
- Provide Maven 4 pre-release templates on ci.jenkins.io
- Enable Jenkins CLI
- Prepare for post-Jira account management
- Inform of Ingress NGINX Retirement in March 2026
- [Azure Deprecation] Convert your OS disks to Standard SSD or Premium SSD before 8 September 2028
- [Azure] Merge webservices data storage accounts into a single one with NFS v4.1
- private docker image registry for staging core security releases
- [ci.jenkins.io] diagnose and eventually fix the EC2 Windows VM performances and build failures/retries
- Chinese jenkins site incorrect site redirection
- Add a real-world job to weekly.ci.jenkins.io
- [ci.jenkins.io] Monitor and Garbage collect data volume of the DockerHub registry mirror and EC pull through cache
- Move collection of stats out from Kohsuke’s home
- Support [skip ci] on default branch
-