Attendees 
- @dduportal (Damien Duportal)
- @lemeurherve (Hervé Le Meur)
- @jayfranco999 (Jay Reddy)
- @MarkEWaite (Mark Waite)
Announcements 
- Jenkins Weekly Releases
- Last Week: 2.567, packaging issue around MSI, since fixed
- This Week: 2.568 (security release)
- Announcements:
- Team capacity: Full capacity this week
- Priorities:
- Infra Roadmap: Jenkins Roadmap
- Current EPICs (by priority): GitHub · Where software is built
Upcoming Calendar 
- Next infra meeting: next week, 2026-06-16
- Next Weekly:
- Tomorrow (2026-06-09) - 2.568 (security advisory)
- 2026-06-16 - 2.569 (most porbably will have Spring Framework update)
- Next LTS: 2026-06-10 - 2.555.3 (security advisory)
- Next Security Release as per jenkinsci-advisories: new Jenkins releases (weekly and LTS 2.555.3) on Wednesday, June 10.
- Upcoming credentials expirations (~3 weeks):
- 2026-06-27:
- [release.ci.jenkins.io] Azure Credentials for Core Release (Vault access) expires (issue to create => @dduportal)
- 2026-06-27:
- Next major event: N.A.
Cloud Budgets
-
Azure (CDF paid)
- February: $6.4k (invoice)
- March: $5.6k (invoice)
- April: $3.553 (invoice)
- May: $2800 (invoice)
- June: $501.65 (invoice, forecasted at $2,320.13)
- Good decrease, we should meet our threshold of $2.5k
-
Azure Sponsored subscription (Microsoft Credits): ~$86347 credits on June 2d 2026 - until 20 Oct. 2027
- March: $1847 (invoice)
- April: $5902 (invoice)
- May: $5734 (invoice)
- June: $1,187.38 (invoice, forecasted at $5,238.75 )
- 15 months left at current rate
-
DigitalOcean - Remaining $6,991.33 until January 02, 2027
- February: $565.03 (invoice)
- March: $423.63 (invoice)
- April: $841,69 (invoice)
- May: $1186.97 (invoice, previously forecasted at ~$1k)
- June: $300.01 (invoice, forecasted at ~$1.1k)
- Bandwidth limit applied on archives.jenkins.io (40 Mbits → 10) with immediate effect
-
AWS:
- Sponsored account, credits left: $43.6k until 01/31/2028
- February: $11.1k (invoice)
- March: $14.0k (invoice)
- April: $15.4k
- May: $14.9k
- June: $2.8k (invoice, forecasted at ~12.1k)
- We started on cleaning up and tracking wasted costs, already visible decrease (on daily view)
- Sponsored account, credits left: $43.6k until 01/31/2028
-
JFrog Artifactory Usage
- Storage: 1.85 Tb (same as last week)
- Bandwidth:
- February: 17.46 Tb
- March: 27.24 Tb
- April: 43.85 Tb
- May: 29.98 Tb
- June: 6.13 Tb (forecasted at 20.43 Tb)
-
Algolia API usage
- Context: [plugins.jenkins.io] Watch Algolia search usage for June 2026
- plugins.jenkins.io:
- June: 56k search requests for the period 1st June => 8 June (max. 200K monthly).
Notes 
-
Done:
-
keep-infra-sane-and-maintainable
- [AWS] Remove resources using
io2EBS volumes- Immediate effect (decrease) on AWS credits consumption
- [Terraform Backends] Switch from “secret file” to “secret environment variable only holding the backend secret”
- No more clear text setup on our admin machines
- [agent-2.trusted.ci.jenkins.io] less than 20% disk space available
- Increasing disk as the content cannot be cleaned up (UC cache)
- Implement rate limiting on archives.jenkins.io to decrease DigitalOcean costs
- Immediate effect (decrease) on DO credits consumption
- Decommission
rss2twitterservice- Not used anymore
- Migrate to new Microsoft Marketplace Windows Server 2022 images by 9 June 2026
- Switched 2022 base images to the new offer
- [AWS] Remove resources using
-
keep-infra-up-to-date
- [infra.ci.jenkins.io] Add Terraform output reference to credential rotation PR templates
- Prepare release, packaging and docker backports for LTS 2.555.3
- [infra.ci.jenkins.io] Azure Credential to allow writing to reports.jenkins.io expires on 2026-06-09
- [infra.ci.jenkins.io] Azure AD Application password for updatecli expires on 2026-06-09
- [Terraform Credentials] Expirations of multiple credentials (backends, API) in jenkins-infra/terraform-states on 2026-06-07
- [infra.ci.jenkins.io] Azure Credential to deploy docs.jenkins.io expires on 2026-06-08
- Upgrade to Kubernetes 1.34
-
support
-
-
-
keep-infra-sane-and-maintainable
- [plugins.jenkins.io] Watch Algolia search usage for June 2026
- Waiting for Aloglia support and effect of API rate limit + robots.txt
- Otherwise we’ll need to find another solution (see issue)
- Todo: report weekly (@dduportal)
- [infra.ci.jenkins.io] Website production deployment jobs not already monitored
- docs.jenkins.io is now monitored. It underlined the “many duplicated locations” when adding a single jobs.
- WiP: sync. between all duplicated location. Requires rework of some items (datadog probe)n being handled
- Make update-center2 generation more resilient against GH instability
- NEw EPIC, at least for Infra, to discuss and act on what area, at least of jenkins-infra, can be moved away froml Github to decrease dependency
- [infra.ci] Monitor all “Report” jobs
- On hold: back to triage
- Remove ASDF from website repositories and rely on packer-image NodeJS
- New NodeJS binary installation instead of ASDF
- Still need to track and update the many ‘.tool-versions’ => minor task for @7JoquqrvQFu6FDlR14JVhg
- Example of manifest updating .tool-versions in contributor-spotlight: contributor-spotlight/updatecli/updatecli.d/nodejs.yaml at bbae7f63ee0040cc5bf0710e3762845fbb243cd4 · jenkins-infra/contributor-spotlight · GitHub
- [updates.jenkins.io] provide a mirror for Jenkins Russian users
- Still need to investigate the tool error
- Long term => contact Yandex for sponsoring
- [plugins.jenkins.io] Watch Algolia search usage for June 2026
-
support
- spot builds are not reliable for long builds
- Removed Linux spot on Jenkins Core
- For Windows, see Spot instance failure not retried - ci.jenkins.io - core build
- Spot instance failure not retried - ci.jenkins.io - core build
- Build can’t be resumed on Windows when controller restart
- Misleading “spot” labels: Windows don’t use spot. We should remove the windows spot labels.
- Need to investigate solution, tedious bug in EC2?
- Request for an Entra Application & Exchange Online Mailbox Access for OAuth2 SMTP Testing - Gsoc2026
- Need to close as we won’t be able to handle the mail part
- spot builds are not reliable for long builds
-
keep-infra-up-to-date
- Drop Windows 2019 support
- SIG meeting
- Drop Windows 2019 support
-
-
Issues added to the next milestone:
- Fix Playwright JS and Java Browser Cache (issue to be created by @dduportal)
- Move publick8s to Azure Sponsored subscription (issue to be created by @hervelemeur)
- Block common LLM/scraper user agents on archives.jenkins.io to decrease DigitalOcean costs
- [Uplink,Rating,PHS,Keycloak] Postgres version
13will lose standard Azure support on March 31, 2026. Upgrade now to avoid extended support charges starting August 1, 2026.
-
Issues staying in backlog/triage:
- Bump Terraform from 1.12.x to 1.15.x
- [cert.ci.jenkins.io] migrate controller VM from Azure CDF to Azure sponsored subscription
- Upgrade jq to 1.8 on packer-images and ensure compatibility across all jenkins-infra projects
- Upgrade to Kubernetes 1.35
- Move docker controller images publication job from trusted.ci.jenkins.io to release.ci.jenkins.io
- [(status|contributors|stats|docs|stories|cn|jenkins-io-components).jenkins.io, Websites PR previews] Netlify billing plan changed: evaluate and act
- Debian upgrade campaign:
bookworm(12.x) totrixie(13.x) - Bump Helm from
3.xto4.x - Ubuntu 26.04 (Resolute Racoon) upgrade campaign
- [cert.ci.jenkins.io] Monitor the
acceptance-tests-check-agent-availabilityjob and alert us when failing 3 consecutive times - Tombstone
plugin-site-apiservice (in favor of a static report file) - [Terraform azure/aws/shared-tools] Migrate Kubernetes provider resources (
kubernetes_*) to versioned resources (kubernetes_*_v1) - See if we can get OIDC enabled on our artifactory
- main branch Jenkins build status is in progress but not build was triggered
- msbuild not available on ci.jenkins.io Windows agent for winp build process
- Sporadic HTTP 503 First byte timeout errors on jenkins.io
- Provide Maven 4 pre-release templates on ci.jenkins.io
- Enable Jenkins CLI
- Prepare for post-Jira account management
- Inform of Ingress NGINX Retirement in March 2026
- [Azure Deprecation] Convert your OS disks to Standard SSD or Premium SSD before 8 September 2028
- [Azure] Merge webservices data storage accounts into a single one with NFS v4.1
- private docker image registry for staging core security releases
- [ci.jenkins.io] diagnose and eventually fix the EC2 Windows VM performances and build failures/retries
- [PHS/Datadog] improve monitoring using application logs
- Chinese jenkins site incorrect site redirection
- Add a real-world job to weekly.ci.jenkins.io
- [ci.jenkins.io] Monitor and Garbage collect data volume of the DockerHub registry mirror and EC pull through cache
- Move collection of stats out from Kohsuke’s home
- Support [skip ci] on default branch
- Create build for jenkinsci/winp on release ci server
- [Update Center] HTTP/404 on
/current/updates/*.json*links - Add monitoring for CD secrets updates
- Nobody noticed that the last successful extension-indexer run was in August 2023
- [INFRA-3046] Monitor Jenkins mirrors Age
- [INFRA-2352] Add monitoring for age of crawler files