Attendees 
- @dduportal (Damien Duportal)
- @MarkEWaite (Mark Waite)
- @hlemeur (Hervé Le Meur)
Announcements 
- Weekly (2.457)
- Code signing certificate request denied due to expired credential
- Fixed by @dduportal, set reminder to rotate credential
- Credential will expire end of Aug 2024
- May have a way to open pull requests to notify us
- Release (WAR in Artifactory): File uploaded to repo.jenkins-ci.org
- Packages: in progress
- Docker Image: 2.457 tag created, build started
- Changelog: merged to jenkins.io
- Code signing certificate request denied due to expired credential
- Security Advisory (plugins only) went well on Thursday 2 May (https://groups.google.com/g/jenkinsci-advisories/c/7u4u0lHbDEc)
- Reminder: it is “banking day chaos” in Europe (at least) in May: low bandwidth from the team
- Stephane off this week
- Herve off next 2 weeks
- 8, 9 May banking days
- Mark is at “Disneyland” last week of May
Upcoming Calendar 
- Next Weekly: 2.458 (Tuesday 14 May)
- Next LTS: 2.452.1 - (15 May 2024) - Alex Brandes is release lead
- Interactive testing looks good, tested for two weeks
- Next Security Release as per jenkinsci-advisories: N.A.
- Next major event:
- Open Source Summit Europe in September, some CDF content
Cloud Budgets
- Azure (CDF paid)
- February: $4,147.76 (invoice)
- March: $4,398 (invoice)
- April:
$4,400 (snapshot from costs explorer)
- Culprits:
- New update center file storage (turned to premium May 2nd, $17 daily to $4,60 daily now)
- A few leftovers (moved to sponsored subscription)
- Next to check:
- publick8s/privatek8s (the 2 biggest consumers). Is arm really cost-efficient for us?
- Managed Redis for get.jio and updates.jio
- Culprits:
- May (current): $896 consumed (Forecast at ~4.2k)
- Azure Sponsorship (Microsoft Credits)
- Global Status:
- Credits used (since the beginning): $9,844
- Credits left: $30,156 until 31 August 2024
- February: $1,992
- March: $2,375
- April: $2,041
- May (current): $460.99 (Forecast at ~2k)
- Global Status:
- DigitalOcean
- Global Status:
- Credits left: $16,980.35
- February: $650
- March: $938
- April: $840
- May (current): $187 (Forecast at ~$830)
- Global Status:
- AWS (CloudBees)
- February: $8,556.73
- March: $9,567.65
- April: N.A.
- May: N.A.
- AWS (Sponsored by AWS)
- Global Status:
- Credits left: $60,000
- Global Status:
- Request submitted for 2025 donation from AWS
- Mark Waite submitted, answer expected in June 2024
Notes 
-
Done:
- [release.ci.jenkins.io] Azure Credentials for Core Release (Vault access) are expired
- The anti-spam system was triggered
- Can’t sign up to Jenkins Jira for reporting issue about a plugin.
- BOM testing build is stuck
- Delete my account
- Git tag
2.457
created by error in the jenkinsci/docker controller image repository - [infra.ci.jenkins.io] Builds of Kubernetes Management randomly failing
- Discrepancy in Plugin Release Date
- Packer images failed to build due to
(429) Too Many Requests
errors from Chocolatey registry - JDK patch upgrade campaign (April 2024)
- Plugin health JSON sometimes missing
-
-
To host versioned jenkins.io docs on docs.jenkins.io
- docs.jenkins.io is live :party:
- PR have preview on Netlify
- Production on Nginx in our cluster, cached by Fastly CDN (same architecture as contributors.jenkins.io)
- Next (and last step): runbook to be written (last mile, easy one)
- Note: we want, in the near future, to split in multiple jobs to separate CD from preview deployments
-
[INFRA-3100] Migrate updates.jenkins.io to another Cloud
- Migrated to a new file storage (premium)
- Validated functionnaly that redirects are now working as expected (with all traffic to Apache, then redirects to either get.jio, or the mirrors.updates.jio, then another redirect to a mirror (cloudflare))
- Wip: PR in review/test on update_center2 to generate distinct content for the 2 services
- Herve is working on testing the PR on trusted.ci without impacting the current job
-
[ci.jenkins.io] Migrate ci.jenkins.io EKS clusters out from CloudBees AWS account
- Specified the network/naming and sizing, validated in pair with Herve
- Bigger machines \o/
- We’ll use private API and better outbound network performances (gateway)
- Network (at least inital) has been created
- WiP: initial cluster creation
- Specified the network/naming and sizing, validated in pair with Herve
-
[ci.jio/infra.ci.jio] datadog plugin destroyed the build data. Can we stop using it?
- Rollbacked to 6.02 on ci.jio
- Lets keep datadog on ci.jio and try 7.0.1 => we’ll keep observing but need runbook to ensure we have backup if it fails again
- Removed from infra.ci/weekly.ci as not used
-
Enable 2FA on jenkinsci npm account
- We can use
oathtool
for this (like AWS sponsored or Digital Ocean) => runbook shows everything so ready to go - Let’s try this milestone, otherwise we’ll delay until Herve’s back (end of May)
- We can use
-
Add
.war.asc
to get.jenkins.io- WiP: PR by Mark with reviews from Basil.
- Refactor of the current shell tooling. Working on duplicated code between jenkinsci/packaging and jenkins-infra/release.
- Consider permissions of both repositories for Jenkins Infra
- Path to removing the
jv
golang tool (almost unmainted) as part of the process
- WiP: PR by Mark with reviews from Basil.
-
[infra.ci.jenkins.io] Abort and remove (immediately) orphaned builds
- Todo
-
[infra.ci.jenkins.io / accountapp] Build stuck waiting for
jdk17
label- Todo
-
migrate storage from premium to standard for jenkins-infra, jenkins-weekly and jenkins-release
- On hold until 15 May
-
- Todo
-
New Jenkins mirror in Romania by RCS&RDS
- Todo (Herve)
-
New Jenkins mirror in Romania by Hostico
- Todo (Damien)
-
-
New issues:
- Support CD workflow on Windows
- Holding until next meeting (missing bandwidth)
- Support CD workflow on Windows
-
ToDo (next milestone) (infra-team-sync-2024-05-14 Milestone · GitHub)