Attendees 
- @lemeurherve (Hervé Le Meur)
Announcements 
- Jenkins Weekly Releases
- Last Week: 2.552
- This Week: 2.553
- Announcements:
- AWS renewed their sponsoring \o/
- Jenkins Digicert Code Signing Certificate expires in May: [pkg.jenkins.io/release.jenkins.io] Certificate signing the MSI Jenkins package expires on 16 May 2026 · Issue #4923 · jenkins-infra/helpdesk · GitHub
- Team capacity:
- Damien is off until mid March 2026
- Priorities:
- Infra Roadmap: Jenkins Roadmap
- Current topics:
- Azure Sponsored Subscription 2026: utilizes the 100k$ credits for the Jenkins Infrastructure
- MSI signing renewal
- Windows 2025/2022/2019
- JDK25 as runtime for our controllers
- (add to roadmap + open helpdesk issue): Maven 4 RC/GA
- Maven 4 pre-release version preview in ci.jenkins.io mailing list thread
- (add to roadmap): weekly.ci.jenkins.io as public live demo
Upcoming Calendar 
- Next infra meeting: next week
- Next Weekly: 2.554
- Next LTS: 2.541.3
- Next Security Release as per jenkinsci-advisories: N/A
- Upcoming credentials expirations (~3 weeks):
- [trusted.ci] Renew Cloudflare R2 Bucket Credential: 2026-03-10
- [infra.ci] Fastly Automation token used by Terraform: 2026-03-12
- [release.ci] Fastly API token expires: 2026-03-15
- [trusted.ci] Fastly API token expires: 2026-03-15
- [infra.ci] Azure AD Application password for updatecli: 2026-03-19
- [infra.ci] Azure Credential to deploy docs.jenkins.io: 2026-03-19
- [infra.ci] Azure Credential to write to reports.jenkins.io: 2026-03-19
- Next major event: N/A
Cloud Budgets
-
Azure (CDF paid)
- October: $5.5k (invoice)
- November: $5.7k (invoice)
- December: $5.4k (invoice)
- January: $??k (previously forecasted at $5.8k, Hervé has no access to invoice)
- February: $??k (previously forecasted at $6.8k, Hervé has no access to invoice)
- March: $0.5k (forecasted at $5.4)
-
Azure Sponsorship (Microsoft Credits): available since the end of February \o/
- Epic: Azure Sponsored Subscription 2026: utilizes the 100k$ credits for the Jenkins Infrastructure
- Starting with cert.ci.jenkins.io (see epic and sub issues for more details)
- Epic: Azure Sponsored Subscription 2026: utilizes the 100k$ credits for the Jenkins Infrastructure
-
DigitalOcean - Remaining $10,411.25 (not updated) until January 02, 2027 (20 months left at current rate)
- October: $788.81 (invoice)
- November: $831.38 (invoice)
- December: $454.60 (invoice, previously forecasted at $585)
- January: $385.30 (invoice, previously forecasted at $407)
- February: $565.03 (invoice, previously forecasted at $609)
- March: $24.10 (no forecast yet)
-
AWS:
- Sponsored account
- AWS sponsoring renewed \o/
- $60k new credit line expiring on 2028-01-31
- $27,907.47 left on the existing $60k credit line (3rd March 2026) until 31 May 2027
- October: $6.9k
- November: $5.9k
- December: $10.7 (previously forecasted at $9.5k way higher than usual)
- Huge increase due to EC2 plugin bug
- January: $15.5k (invoice, previously forecasted at $15.3k)
- Still really high, ci.jenkins.io is once again at risk if we don’t decrease the consumption or if we don’t move it somewhere else before end of April 2026
- Need an issue ASAP for the EC2 agents GC (Damien)
- Need an issue for packer image various resources cleanup
- Mark opened an issue on the EC2 plugin: ci.jenkins.io EC2 agents sometimes hang and fail to connect with SSH key not found · Issue #1990 · jenkinsci/ec2-plugin · GitHub
- February: $11.1k (invoice, previously forecasted at $10.3)
- Forecast lowered but still quite high
- March: $0.4k (forecasted at $10.9)
- Sponsored account
-
Jfrog Artifactory Usage
- Storage: 1.56 Tb - (was 1.69 Tb last time)
- Bandwidth:
- October: 16.67 Tb
- November: 15.9 Tb
- December: 30.34Tb
- A single IP address consumed 12Tb in December
- JFrog didn’t block this address until this month (unless this consumer changed its IP?)
- January: 16.67 Tb (previously forecasted at 15.9 Tb)
- Sounds like the abuser stopped abusing
- February: 17.46 Tb (previously forecast at 18.3 Tb)
- March: 3.33 Tb (no forecast yet)
Notes 
-
Done (Milestone ID)
- Support
releasebotupdates publicmaven-metadata.xmlwhen staging core releases in private repo- Documentation for oracle-cloud-infrastructure-compute-plugin is not updating - 1.0.19
- Jira no longer sends emails to jenkinsci-cert@googlegroups.com
- Archive
jenkinsci/jx-pipelines-plugin - Unable to release new version of JFrog Plugin
- Keep infrastructure sane and maintainable
- Support
-
New items:
- Support
- Keep infrastructure up to date
- Credentials renewals (issues to be created)
-
Work in Progress (Milestone 196)
- Support
- Keep infrastructure sane and maintainable
- [Azure Sponsored Subscription 2026] Set up permissions
- [cert.ci.jenkins.io] Run ephemeral VM agents in the sponsored subscription
- Optimise cost and maintainance by merging Windows 2022 and Windows 2025 templates
- Pending bandwith
- Move docker controller images publication job from trusted.ci.jenkins.io to release.ci.jenkins.io
- [ci.jenkins.io] Require authentication for read access
- [(status|contributors|stats|docs|stories|cn|jenkins-io-components).jenkins.io, Websites PR previews] Netlify billing plan changed: evaluate and act
- [staging.pkg.origin.jenkins.io/staging.get.jenkins.io] Garbage collect the inactive branches
- [get.jenkins.io,mirrors.updates.jenkins.io] Resume GeoIP database weekly update
- Ensure the BOM cache filler runs successfully and is easier to use and monitor
- Setup a job/set of jobs to allow performing maintenance operations (cron, GCs of resources, etc.)
- [stats.jenkins.io/infra-statistics] Move “data for the usage stats site” generation (from anonymized data) out from Andrew machine
- Monitor builds on our private instances (trusted.ci.jenkins.io / infra.ci.jenkins.io / release.ci.jenkins.io)
- Keep infrastructure up to date
-
TODO (Next milestone: GitHub · Where software is built)