Attendees 
- @dduportal (Damien Duportal)
- Jack Zhang
- @smerle33 (Stéphane Merle)
- @poddingue (Bruno Verachten)
- @kmartens27 (Kevin Martens)
Announcements 
- Jenkins Weekly Releases
- Last Week: 2.515 - successful but did have a packaging issue caused by Artifactory metadata issue: You're invited to talk on Matrix
- This Week: 2.516 - started in time - You're invited to talk on Matrix
- Announcements:
- We have a new contributor attending here: welcome Jack Zhang
- Seeking “newcomer” tasks to help => team to point them one or many issues
- Team recommends to start with Updatecli tasks
- Infra roadmap to be updated:
- We have a new contributor attending here: welcome Jack Zhang
Upcoming Calendar 
-
Next Weekly: 2025-07-01 - 2.517
-
Next LTS: 2025-06-25 (tomorrow!), 2.504.3, Philipp Glanz is the release lead, ref. Events
-
Next Security Release as per jenkinsci-advisories: N.A.
-
Upcoming credentials expirations (~3 weeks):
- 2025-07-06:
- Azure SP used for
updatecli
jobs in infra.ci: Azure AD Application password for updatecli in `infra.ci.jenkins.io` expires on `2025-07-06T00:00:00Z` by jenkins-infra-updatecli[bot] · Pull Request #1063 · jenkins-infra/azure · GitHub - Azure SP used to deploy websites to production from trusted.ci (into file shares)
- www.jenkins.io: Azure File Share Principal `www.jenkins.io` on `trusted.ci.jenkins.io` expires on `2025-07-06T00:00:00Z` by jenkins-infra-updatecli[bot] · Pull Request #1062 · jenkins-infra/azure · GitHub
- javadoc.jenkins.io: Azure File Share Principal `javadoc.jenkins.io` on `trusted.ci.jenkins.io` expires on `2025-07-06T00:00:00Z` by jenkins-infra-updatecli[bot] · Pull Request #1061 · jenkins-infra/azure · GitHub
good candidate for moving to a credential-less by using ephemeral VM agent assigned identity (trusted.ci is NOT multi tenant)
- [azure] renewal of differents Service Principal Passwords · Issue #4713 · jenkins-infra/helpdesk · GitHub
- Azure SP used to deploy websites to production from infra.ci (into file shares):
- docs.jenkins.io: New end date for `docs.jenkins.io` File Share service principal writer on `infra.ci.jenkins.io` (current: "2025-07-06T00:00:00Z") by jenkins-infra-updatecli[bot] · Pull Request #1059 · jenkins-infra/azure · GitHub
- [azure] renewal of differents Service Principal Passwords · Issue #4713 · jenkins-infra/helpdesk · GitHub
- Azure SP used by
geoip
Jobs in clusterpublick8s
to update geolocation DB for mirrorbits: Azure File Share Principal `geoip` on `publick8s` expires on `2025-07-06T00:00:00Z` by jenkins-infra-updatecli[bot] · Pull Request #1060 · jenkins-infra/azure · GitHubgood candidate for moving to a credential-less workload identity. Jenkins Azure plugin do not support it (yet) as per Jenkins Controllers in Azure Kubernetes: use workload identity management to allow managing Azure VM agents without credentials · Issue #4651 · jenkins-infra/helpdesk · GitHub BUT this one is a direct pod → Azure File Storage thing so it should work well.
- [azure] renewal of differents Service Principal Passwords · Issue #4713 · jenkins-infra/helpdesk · GitHub
- Azure SP used for
- 2025-07-06:
-
Next major event: N.A.
Cloud Budgets
-
Azure CDF:
- March: $4.3k (invoice)
- April: $3.9k (invoice)
- May: $3.5k (invoice)
- June: $2,659 (forecast at ~$3.6k)
-
Azure Sponsorship (Microsoft Credits) - Remaining: $8692 until 31 August 2025
- March: $4,276
- April: $12.1k
- May: $14.6k
- June: $7,936 => (forecast at ~$10k)
- We shall have ~5k to consume after ci.jio migration (for the other services) => no rush for the migration (can be 1st week of July)
-
DigitalOcean - Remaining $13,638.41 until January 02, 2026
- March: $272 (invoice)
- April: $349 (invoice)
- May: $310 (invoice)
- June: $205 (forecast at $257)
-
AWS:
-
CloudBees:
- March: $551
- April: $532
- May: $548
- June: $451 (forecast at $586)
-
Sponsored account ($94,747 credits lefts until 2027)
- March: $14,649
- April: $1,977
- May: $2,96
- June: $191 (forecast at $303)
- We’ve started creating resources to support ci.jio migration in ~2 weeks (hence the slight increase)
-
-
Jfrog Artifactory Usage
- Storage: 1.34TB (stable)
- Bandwidth:
- March: 35.25 TB (better than expected)
- April: 26.34 TB (22.25 Tb for ‘releases’ repository)
- May: 23.93 TB (22.21 Tb for ‘releases’ repository)
- June: 16.7TB (15.6TB Tb for ‘releases’ repository, forecast at ~20.8 TB)
Notes 
-
Done:
- Support:
- Uplink access for
basil
- [ci.jenkins.io] Docker (*) images builds are all failing for Windows
- Make sure typos checks run on ci.jenkins.io
- Open the door to decommission the Docker image “webbuilder” in favor of the “all in one”
- [jira-plugin] Crowd setup
- [INFRA-2951] Merge Wall Display Plugin Jira components
- Uplink access for
- Keep platform up to date:
- Keep platform sane and maintainable:
- Support:
-
-
2025 Cloud Usage: ensure that we can run until end of year
- [infra.ci.jenkins.io] migrate container agents (cluster
infracijenkinsio-agents-1
) from Azure (sponsored) subscription to Azure (CDF) subscription- New cluster (in Azure CDF) is online and used by infra.ci
- We had an (expected) hiccup: arm64 Linux spot node pools cannot scale to zero. We always 1 VM up and running as such => spot instance so low cost
- Old cluster is not used anymore and being suppressed. Should be finished later today
- New cluster (in Azure CDF) is online and used by infra.ci
- [ci.jenkins.io] migrate from Azure (sponsored) subscription to AWS (sponsored) account
- Was delayed: we just started to resume work on this one today:
- WiP:
- packer images
- EKS cluster creation (1. infra, 2. kubernetes management)
- Controller VM
- Next:
- Ephemeral agents (need controller VM and packer images)
- [infra.ci.jenkins.io] migrate container agents (cluster
-
- Create a “private report” web service for monitoring
- builds.reports.jenkins.io is up and running
- Everything done for VM agents or permanent agents (trusted, cert and infra)
- Stephane and Damien are working on the container agents ability to write file in this service
- Create a “private report” web service for monitoring
-
Support:
-
Keep platform up to date:
-
Keep platform sane and maintainable:
jgit
in Artifactory proxies all of Eclipse andjgit-cache
contains 200GB- Darin is checking with Daniel and Mark around the mirror patterns
- [stats.jenkins.io/infra-statistics] Move “data for the usage stats site” generation (from anonymized data) out from Andrew machine
- Delayed, but we have the knowledge from Andrew
- @dduportal needs to publish May stats
- July: @smerle will take the action of June stats
- Then we automate
- OSUOSL: decrease mirror dependency
- No more mirror storage issue: we can resume work
- Waiting for after the 2.504.3 LTS release
-
-
Issues staying in backlog/triage:
- [infra.ci.jenkins.io] Move packer-images workload in Azure from the sponsored subscription to the CDF subscription
- Requires infra.ci ephemeral agents migrated to Azure CDF first (can be done at the same time though)
- Artifactory Not Caching Google’s Maven Repository
- Migrate
census.jenkins.io
VM from AWS CloudBees to DigitalOcean - [trusted.ci.jenkins.io] migrate VM ephemeral agents from Azure (sponsored) subscription to Azure (CDF) subscription
- [cert.ci.jenkins.io] migrate VM ephemeral agents from Azure (sponsored) subscription to Azure (CDF) subscription
- [infra.ci.jenkins.io] migrate VM ephemeral agents from Azure (sponsored) subscription to Azure (CDF) subscription
- [privatek8s] migrate cluster
privatek8s
from Azure (sponsored) subscription to Azure (CDF) subscription - Chinese jenkins site incorrect site redirection
- [Azure] Migrate (e.g. re-create) AKS clusters
publick8s
andprivatek8s
with modern settings (private API, Azure Linux, NAT outbound) - [cert.ci/trusted.ci/private.vpn] Default outbound access for VMs in Azure will be retired
- [private.vpn.jenkins.io] Azure deprecates Public IPs of type “Basic” the 30 September 2025
- Add a real-world job to weekly.ci.jenkins.io
- Move collection of stats out from Kohsuke’s home
- Support [skip ci] on default branch
- Create build for jenkinsci/winp on release ci server
- [Update Center] HTTP/404 on
/current/updates/*.json*
links - dnf5 update fails with gpgcheck=1
- Add monitoring for CD secrets updates
- [INFRA-3046] Monitor Jenkins mirrors Age
- [infra.ci.jenkins.io] Move packer-images workload in Azure from the sponsored subscription to the CDF subscription
-
Issues added to the next milestone:
- Admin access for Jenkins GSoC org admins to GSoC SiG Gitter channel
- Damien and Bruno to work on it. Contacting JMM
- Admin access for Jenkins GSoC org admins to GSoC SiG Gitter channel