Attendees 
- @dduportal (Damien Duportal)
- @lemeurherve (Hervé Le Meur)
- @jayfranco999 (Jay Reddy)
Announcements 
- Jenkins Weekly Releases
- Last Week: 2.562
- MSI is signed but will trigger a “blue screen of warning” until we gain enough reputation for Microsoft systems
- This Week: 2.563
- Docker images required replays due to rate limit (DockerHub)
- Last Week: 2.562
- Announcements:
- Team capacity: bank holiday on May 8th for Damien and Hervé
- Priorities:
- Infra Roadmap: Jenkins Roadmap
- Current topics:
- MSI signing renewal => top priority until LTS backport is performed
- Azure Sponsored Subscription 2026: utilizes the 100k$ credits for the Jenkins Infrastructure
- Jenkins Digicert Code Signing Certificate expires in May: [pkg.jenkins.io/release.jenkins.io] Certificate signing the MSI Jenkins package expires on 16 May 2026 · Issue #4923 · jenkins-infra/helpdesk · GitHub
Upcoming Calendar 
- Next infra meeting: next week on May 12th
- Next Weekly: 2.564
- Next LTS: 2.555.2 on May 13th
- Next Security Release as per jenkinsci-advisories: N.A.
- Upcoming credentials expirations (~3 weeks):
- 2026-05-13: NPM token used by infra.ci.jenkins.io (issue to be created) => Jay
- 2026-05-14: Netlify token used by infra.ci.jenkins.io (issue to be created) => Herve
- 2026-05-15: Azure File Share Credentials for (contributors|stats|plugins).jenkins.io websites used by infra.ci.jenkins.io (issue to be created) => Damien
- Next major event:
- cdCon May 18-20 in Minesota, Mark Waite will be controller of ceremonies!
Cloud Budgets
-
Azure (CDF paid)
- February: $6.4k (invoice)
- March: $5.6k (invoice)
- April: $3.553k (invoice)
- May: $408 (forecasted at $3.4k)
-
Azure Sponsored subscription (Microsoft Credits): ~$91338 credits left until 20 Oct. 2027
- March: $1847 (invoice)
- April: $5902 (invoice)
- May: $904 (forecasted at 6.2k)
- ~14 months left at current rate
-
DigitalOcean - Remaining $8,397 until January 02, 2027
- February: $565.03 (invoice)
- March: $423.63 (invoice)
- April: $775.30
- May: $32.65 (forecasted at ~$450)
- ~10 months left at current rate
-
AWS:
- Sponsored account, credits left: $13,880.67 until 05/31/2027, and $60k until 01/31/2028
- February: $11.1k (invoice)
- March: $14.0k (invoice)
- April: $15.4k
- May: $2.1k (forecasted at $16k)
- Still high and increasing (EC2 plugin bug, BOM, non spots, old instance family, bandwidth)
- Sponsored account, credits left: $13,880.67 until 05/31/2027, and $60k until 01/31/2028
-
JFrog Artifactory Usage
- Storage: 1.7 Tb
- Decreased (cleanup!)
- Bandwidth:
- February: 17.46 Tb
- March: 27.24 Tb
- April: 43.85 Tb
- May: 4.1 Tb (forecasted at ~26 Tb)
- Abuse, abuse and abuse
- Mark/Damien needs to warn JFrog about the heavy use in March and April
- Mark needs to review the recent log analysis
- Storage: 1.7 Tb
Notes 
-
Done:
- support
- keep-infra-up-to-date
- keep-infra-sane-and-maintainable
-
-
Top priorities:
- keep-infra-up-to-date
- Copy.fail
- [pkg.jenkins.io/release.jenkins.io] Certificate signing the MSI Jenkins package expires on 16 May 2026
- Backports to perform for incoming LTS 2.555.2
- support:
- [ci.jenkins.io,trusted.ci.jenkins.io] Windows VM agents:
buildxis not installed- Docker 29.x deprecated the plugin installation directory we used to install buildx on Windows.
- WiP on using the new directory, but initial patch in packer-image was wrong. Patch by Herve is
but we are blocked by build issues (canonical) - Rollbacked all templates to 2.99.0 (NodeJS 24 but Docker 28.x)
- Fixed once we’ll have a full new packer-image released rolled everywhere
- [ci.jenkins.io,trusted.ci.jenkins.io] Windows VM agents:
- keep-infra-sane-and-maintainable
- Azure Sponsored Subscription 2026: utilizes the 100k$ credits for the Jenkins Infrastructure
- Monitor builds on our private instances (trusted.ci.jenkins.io / infra.ci.jenkins.io / release.ci.jenkins.io / cert.ci.jenkins.io)
- Datadog monitors are available in the dashboard
- Removed the “build status” property/monitors in favor of stalled
- Need review from other team members before moving forward
- cert.ci.jenkins.io is unable to publish builds report => need a bit of Azure magic
- keep-infra-up-to-date
-
keep-infra-up-to-date
- Update Jira LTS from 10.3.x to 11.3.x
- status.is up to date
- Expect build failures on trusted.ci.
- Bump NodeJS from 22 to 24 (most recent LTS)
- 4 webservices are using NodeJS 24.x (www, stories, stats and contributors)
- Next steps is to drop ASDF on these => moving to a new issue
- Damien is covering GHAs and other websites (plugin-site)
- Drop Windows 2019 support
- Need to bring the topic to Platform SIG
- Back to backlog until then
- Update Jira LTS from 10.3.x to 11.3.x
-
support
- Spot instance failure not retried - ci.jenkins.io - core build
- No work done, need to check!
- Tests stuck for new contributors of Contributor Spotlight repo
- Draft PR opened, WiP on splitting jobs
- Spot instance failure not retried - ci.jenkins.io - core build
-
keep-infra-sane-and-maintainable
- [release.ci.jenkins.io] Avoid filling the JENKINS_HOME
- Back to backlog
- [Uplink,Rating,PHS,Keycloak] Postgres version
13will lose standard Azure support on March 31, 2026. Upgrade now to avoid extended support charges starting August 1, 2026.- Back to backlog
- Move docker controller images publication job from trusted.ci.jenkins.io to release.ci.jenkins.io
- Back to backlog
- [(status|contributors|stats|docs|stories|cn|jenkins-io-components).jenkins.io, Websites PR previews] Netlify billing plan changed: evaluate and act
- Back to backlog
- [release.ci.jenkins.io] Avoid filling the JENKINS_HOME
-
-
Issues staying in backlog/triage:
- Inform of Ingress NGINX Retirement in March 2026
- msbuild not available on ci.jenkins.io Windows agent for winp build process
- [cert.ci.jenkins.io] migrate controller VM from Azure CDF to Azure sponsored subscription
- [Terraform azure/aws/shared-tools] Migrate Kubernetes provider resources (
kubernetes_*) to versioned resources (kubernetes_*_v1) - Prepare for post-Jira account management
- See if we can get OIDC enabled on our artifactory
- main branch Jenkins build status is in progress but not build was triggered
- Sporadic HTTP 503 First byte timeout errors on jenkins.io
- Provide Maven 4 pre-release templates on ci.jenkins.io
- [Azure Deprecation] Convert your OS disks to Standard SSD or Premium SSD before 8 September 2028
- Enable Jenkins CLI
- [Azure] Merge webservices data storage accounts into a single one with NFS v4.1
- [updates.jenkins.io] set up mirrorbits to keep serving update-center from mirrors even if outdated
- private docker image registry for staging core security releases
- Tombstone Puppet (and replace it by something else)
- Chinese jenkins site incorrect site redirection
- Add a real-world job to weekly.ci.jenkins.io
- [ci.jenkins.io] Monitor and Garbage collect data volume of the DockerHub registry mirror and EC pull through cache
- Move collection of stats out from Kohsuke’s home
- Support [skip ci] on default branch
- Create build for jenkinsci/winp on release ci server
- [Update Center] HTTP/404 on
/current/updates/*.json*links - Add monitoring for CD secrets updates
- [INFRA-3046] Monitor Jenkins mirrors Age
-
Issues added to the next milestone:
- [privatek8s/infra.ci.jenkins.io/release.ci.jenkins.io] Run AKS cluster in the sponsored subscription
- Damien => plan. Then we’ll operate next milestone
- Upgrade to Kubernetes 1.34
- Jay (drive)
- Don’t download Maven as Jenkins tools
- Herve trusted.ci (then we’ll see)
- JDK patch upgrade campaign (April 2026)
- Damien drives it, Herve to add links (already done) from jenkinsci/docker* changes
- [updates.jenkins.io] provide a mirror for Jenkins Russian users
- Damien
- [privatek8s/infra.ci.jenkins.io/release.ci.jenkins.io] Run AKS cluster in the sponsored subscription