Attendees 
- @lemeurherve (Hervé Le Meur)
- @jayfranco999 (Jay Reddy)
Announcements 
- Jenkins Weekly Releases
- Last Week: 2.553
- This Week: 2.554
- Announcements:
- Jenkins Digicert Code Signing Certificate expires in May: [pkg.jenkins.io/release.jenkins.io] Certificate signing the MSI Jenkins package expires on 16 May 2026 · Issue #4923 · jenkins-infra/helpdesk · GitHub
- Team capacity:
- Damien is off until mid March 2026
- Priorities:
- Infra Roadmap: Jenkins Roadmap
- Current topics:
- Azure Sponsored Subscription 2026: utilizes the 100k$ credits for the Jenkins Infrastructure
- MSI signing renewal
- Windows 2025/2022/2019
- JDK25 as runtime for our controllers
- (add to roadmap + open helpdesk issue): Maven 4 RC/GA
- Maven 4 pre-release version preview in ci.jenkins.io mailing list thread
- (add to roadmap): weekly.ci.jenkins.io as public live demo
Upcoming Calendar 
- Next infra meeting: next week
- Next Weekly: 2.555
- Next LTS: 2.541.3
- Next Security Release as per jenkinsci-advisories: N/A
- Upcoming credentials expirations (~3 weeks):
- [infra.ci] Azure AD Application password for updatecli: 2026-03-19
- [infra.ci] Azure Credential to deploy docs.jenkins.io: 2026-03-19
- [infra.ci] Azure Credential to write to reports.jenkins.io: 2026-03-19
- Next major event: N/A
Cloud Budgets
-
Azure (CDF paid)
- October: $5.5k (invoice)
- November: $5.7k (invoice)
- December: $5.4k (invoice)
- January: $??k (previously forecasted at $5.8k, Hervé has no access to invoice)
- February: $??k (previously forecasted at $6.8k, Hervé has no access to invoice)
- March: $2.0k (forecasted at $6.6)
-
Azure Sponsored subscription (Microsoft Credits): available since the end of February \o/
- Epic: Azure Sponsored Subscription 2026: utilizes the 100k$ credits for the Jenkins Infrastructure
- March: $180.46 (forecasted at $431.90)
-
DigitalOcean - Remaining $9,635.07 (March 2026) until January 02, 2027 (19 months left at current rate)
- October: $788.81 (invoice)
- November: $831.38 (invoice)
- December: $454.60 (invoice, previously forecasted at $585)
- January: $385.30 (invoice, previously forecasted at $407)
- February: $565.03 (invoice, previously forecasted at $609)
- March: $108.56 (forecasted at $337)
-
AWS:
- Sponsored account
- AWS sponsoring renewed \o/
- $60k new credit line expiring on 2028-01-31
- $27,907.47 left on the existing $60k credit line (3rd March 2026) until 31 May 2027
- October: $6.9k
- November: $5.9k
- December: $10.7 (previously forecasted at $9.5k way higher than usual)
- Huge increase due to EC2 plugin bug
- January: $15.5k (invoice, previously forecasted at $15.3k)
- Still really high, ci.jenkins.io is once again at risk if we don’t decrease the consumption or if we don’t move it somewhere else before end of April 2026
- Need an issue ASAP for the EC2 agents GC (Damien)
- Need an issue for packer image various resources cleanup
- Mark opened an issue on the EC2 plugin: ci.jenkins.io EC2 agents sometimes hang and fail to connect with SSH key not found · Issue #1990 · jenkinsci/ec2-plugin · GitHub
- February: $11.1k (invoice, previously forecasted at $10.3)
- Forecast lowered but still quite high
- March: $3.9k (forecasted at $13.0)
- We need to resume the work on the cleanups
- Sponsored account
-
Jfrog Artifactory Usage
- Storage: 1.56 Tb - (same as last week)
- Bandwidth:
- October: 16.67 Tb
- November: 15.9 Tb
- December: 30.34Tb
- A single IP address consumed 12Tb in December
- JFrog didn’t block this address until this month (unless this consumer changed its IP?)
- January: 16.67 Tb (previously forecasted at 15.9 Tb)
- Sounds like the abuser stopped abusing
- February: 17.46 Tb (previously forecast at 18.3 Tb)
- March: 7.35 Tb (forecasted at 22.8 Tb)
- There was already 3.3 Tb on the 3rd of March
Notes 
-
Done
- Support
- Keep infrastructure sane and maintainable
- Keep infrastructure up to date
-
Work in Progress
- Keep infrastructure sane and maintainable
- [cert.ci.jenkins.io] Run ephemeral VM agents in the sponsored subscription
- [trusted.ci.jenkins.io] Run ephemeral VM agents in the sponsored subscription
- Monitor builds on our private instances (trusted.ci.jenkins.io / infra.ci.jenkins.io / release.ci.jenkins.io)
- Pending bandwith
- Move docker controller images publication job from trusted.ci.jenkins.io to release.ci.jenkins.io
- [ci.jenkins.io] Require authentication for read access
- [(status|contributors|stats|docs|stories|cn|jenkins-io-components).jenkins.io, Websites PR previews] Netlify billing plan changed: evaluate and act
- Optimise cost and maintainance by merging Windows 2022 and Windows 2025 templates
- [staging.pkg.origin.jenkins.io/staging.get.jenkins.io] Garbage collect the inactive branches
- [get.jenkins.io,mirrors.updates.jenkins.io] Resume GeoIP database weekly update
- Ensure the BOM cache filler runs successfully and is easier to use and monitor
- Setup a job/set of jobs to allow performing maintenance operations (cron, GCs of resources, etc.)
- [stats.jenkins.io/infra-statistics] Move “data for the usage stats site” generation (from anonymized data) out from Andrew machine
- Support
- Bunch of bad links on https://updates.jenkins.io/ and https://get.jenkins.io
- Clarification for Dockerhub publishing of controller containers
- Intellij Plugin build failures and optimization
- Stop mirroring
incrementalsfrom ACP - Tests stuck for new contributors of Contributor Spotlight repo
- Plugins RSS feed no longer updating
- Keep infrastructure up to date
- Keep infrastructure sane and maintainable
-
New items:
- Keep infrastructure up to date