Attendees 
- @dduportal (Damien Duportal)
- @lemeurherve (Hervé Le Meur)
- @MarkEWaite (Mark Waite)
- Pratik Mane
Announcements 
- Jenkins Weekly Releases
- Last Week: 2.563
- Docker images required replays due to rate limit (DockerHub)
- This Week: 2.564
- Required a replay for the Docker image (Windows 2022 only) - Docker Engine stuck
- Last Week: 2.563
- Announcements:
- Team capacity:
- Bank holiday for Hervé and Damien on 14th May
- Hervé is off on 15th
- Damien is low availability on 15th
- Jay is off (ill)
- GSoC 2026 - Plugin Modernizer stats visualization - New repo on jenkins-infra
plugin-modernizer-stats- Need a GH repo as per the issue
- Need a distinct website: will be a GH page for no (autonomy, short feedback loop)
- CD will be a GH action (deploying to GHA)
- CI: same (GHA).
- Eventually, ci.jenkins.io (no push, no deployment as no credential). Second iteration to “learn” Jenkins pipeline.
- Need an “ETL” pipeline which collect data from GitHub - jenkins-infra/metadata-plugin-modernizer: GSoC 2025 - Plugin Modernizer Improvement - https://github.com/jenkins-infra/helpdesk/issues/4728 · GitHub, aggregate it and publish the JSON
- Publication destination: can’t be reports.jenkins.io (at least not now) due to safety reasons
- Proposal from infra team: also use GitHub - jenkins-infra/metadata-plugin-modernizer: GSoC 2025 - Plugin Modernizer Improvement - https://github.com/jenkins-infra/helpdesk/issues/4728 · GitHub to store the aggregated data
- Could be blocked by GitHub storage limit
- Could GH Pages enabled in this one (instead of reports.jenkins.io)
- Priorities:
- Infra Roadmap: Jenkins Roadmap
- Up to date (finally!)
- Current top-level topics:
- MSI signing renewal => Waiting for LTS tomorrow + release.ci credential cleanup right after
- Azure Sponsored Subscription 2026: utilizes the 100k$ credits for the Jenkins Infrastructure
- Puppet to Ansible
- Incoming “minor” topics:
- Terraform version bump (issue to create)
- Playwright
- We recently learned that the CLI and Maven artifacts are not in sync (Playwright test of `workflow-editor.js` by jglick · Pull Request #1775 · jenkinsci/workflow-cps-plugin · GitHub for context)
- We should only deliver a version more recent than the latest Maven artifact (to avoid drift in agents and re-downloading everything)
- Also, we want to install it on Windows templates (to avoid re-downloading playwright AND web-browser)
- Helm v4 version bump
- Infra Roadmap: Jenkins Roadmap
- Team capacity:
Upcoming Calendar 
- Next infra meeting: Tuesday May 19
- Next Weekly: 2.565 - Tuesday May
- Next LTS: 2.555.2 - tomorrow (Wednesday May 13)
- Mark is release lead - starting at ~10:00am UTC
- Next Security Release as per jenkinsci-advisories: N.A.
- Upcoming credentials expirations (~3 weeks):
- 2026-06-01: VPN CRL expires (issue to create)
- 2026-06-03:
- 3 Fastly tokens used by infra.ci, trusted.ci and release.ci expire (3 issues to create, one each)
- Cloudflare R2 tokens used by trusted.ci expire (issue to create)
- 2026-06-07:
- All Terraform “states” credentials expire (Azure Credentials for backend state of all TF projects, AWS token, etc.) (issue to create)
- Next major event:
- cdCon May 18-20 in Minesota, Mark Waite will be controller of ceremonies!
Cloud Budgets
-
Azure (CDF paid)
- February: $6.4k (invoice)
- March: $5.6k (invoice)
- April: $3.553 (invoice)
- May: $1.093 (forecasted at $3.2k)
-
Azure Sponsored subscription (Microsoft Credits): ~$91338 credits on May 1st 2026 - until 20 Oct. 2027
- March: $1847 (invoice)
- April: $5902 (invoice)
- May: $2015 (forecasted at 6.6k)
- ~13.5 months left at current rate
-
DigitalOcean - Remaining $8,196 until January 02, 2027
- February: $565.03 (invoice)
- March: $423.63 (invoice)
- April: $775.30
- May: $282 (forecasted at ~$586)
- ~14 months left at current rate
-
AWS:
- Sponsored account, credits left: $13,880.67 until 05/31/2027, and $60k until 01/31/2028
- February: $11.1k (invoice)
- March: $14.0k (invoice)
- April: $15.4k
- May: $5.7k (forecasted at $14.7k)
- Still high and increasing (EC2 plugin bug, BOM, non spots, old instance family, bandwidth)
- Sponsored account, credits left: $13,880.67 until 05/31/2027, and $60k until 01/31/2028
-
JFrog Artifactory Usage
- Storage: 1.7 Tb
- Stable
- Bandwidth:
- February: 17.46 Tb
- March: 27.24 Tb
- April: 43.85 Tb
- May: 11.14 Tb (forecasted at ~28 Tb)
- Storage: 1.7 Tb
Notes 
-
Done:
-
keep-infra-up-to-date
- [infra.ci.jenkins.io] Azure Credentials for stats.jenkins.io, plugins.jenkins.io, and contributors.jenkins.io expires on 2026-05-12
- Prepare release, packaging and docker backports for LTS 2.555.2
- [infra.ci.jenkins.io] NPM token expires the 13 May 2026
- [infra.ci.jenkins.io] Netlify token expires the 2026-05-14
- Bump NodeJS from 22 to 24 (most recent LTS)
- Update Jira LTS from 10.3.x to 11.3.x
-
keep-infra-sane-and-maintainable
-
support
-
-
- uncategorized
-
- keep-infra-sane-and-maintainable
- [privatek8s/infra.ci.jenkins.io/release.ci.jenkins.io] Run AKS cluster in the sponsored subscription
- [updates.jenkins.io] provide a mirror for Jenkins Russian users
- Waiting for feedback from user
- Let’s inform the board
- Monitor builds on our private instances (trusted.ci.jenkins.io / infra.ci.jenkins.io / release.ci.jenkins.io / cert.ci.jenkins.io)
- We got our first alerts for update_center failing 3 times in a row
- We have to pay attention now

- We might need to write down runbooks
- We have to pay attention now
- A bit of work is still needed (adding other critical jobs, letting cert.ci to be monitored, etc.)
- We got our first alerts for update_center failing 3 times in a row
- keep-infra-up-to-date
- JDK patch upgrade campaign (April 2026)
- Almost done: waiting for LTS
- JDK8 for us: Waiting for Windows installer to be available
- (new): plugin-site-api is still using JDK8

- [pkg.jenkins.io/release.jenkins.io] Certificate signing the MSI Jenkins package expires on 16 May 2026
- Waiting for LTS
- Upgrade to Kubernetes 1.34
- Jay is ill: delaying
- JDK patch upgrade campaign (April 2026)
- support
- Spot instance failure not retried - ci.jenkins.io - core build
- Delayed, missing time to spend on it
- Spot instance failure not retried - ci.jenkins.io - core build
- keep-infra-sane-and-maintainable
-
Issues staying in backlog/triage:
- [release.ci.jenkins.io] Avoid filling the JENKINS_HOME
- [Uplink,Rating,PHS,Keycloak] Postgres version
13will lose standard Azure support on March 31, 2026. Upgrade now to avoid extended support charges starting August 1, 2026. - Move docker controller images publication job from trusted.ci.jenkins.io to release.ci.jenkins.io
- [(status|contributors|stats|docs|stories|cn|jenkins-io-components).jenkins.io, Websites PR previews] Netlify billing plan changed: evaluate and act
- [cert.ci.jenkins.io] migrate controller VM from Azure CDF to Azure sponsored subscription
- [Terraform azure/aws/shared-tools] Migrate Kubernetes provider resources (
kubernetes_*) to versioned resources (kubernetes_*_v1) - See if we can get OIDC enabled on our artifactory
- main branch Jenkins build status is in progress but not build was triggered
- msbuild not available on ci.jenkins.io Windows agent for winp build process
- Sporadic HTTP 503 First byte timeout errors on jenkins.io
- Provide Maven 4 pre-release templates on ci.jenkins.io
- Enable Jenkins CLI
- Prepare for post-Jira account management
- Inform of Ingress NGINX Retirement in March 2026
- [Azure Deprecation] Convert your OS disks to Standard SSD or Premium SSD before 8 September 2028
- [Azure] Merge webservices data storage accounts into a single one with NFS v4.1
- private docker image registry for staging core security releases
- Chinese jenkins site incorrect site redirection
- Add a real-world job to weekly.ci.jenkins.io
- [ci.jenkins.io] Monitor and Garbage collect data volume of the DockerHub registry mirror and EC pull through cache
- Move collection of stats out from Kohsuke’s home
- Support [skip ci] on default branch
- Create build for jenkinsci/winp on release ci server
- [Update Center] HTTP/404 on
/current/updates/*.json*links - Add monitoring for CD secrets updates
- [INFRA-3046] Monitor Jenkins mirrors Age
-
Issues added to the next milestone:
- GSoC 2026 - Plugin Modernizer stats visualization - New repo on jenkins-infra
plugin-modernizer-stats - Sync package-lock.json across website repositories after NodeJS upgrade
- Remove ASDF from website repositories and rely on packer-image NodeJS
- Archive jenkins-infra/unused-code-detector
- Tombstone Puppet (and replace it by something else)
- Herve and Damien to create sub issues for their current expriments
- Drop Windows 2019 support
- Platform SIG => Damien
- GSoC 2026 - Plugin Modernizer stats visualization - New repo on jenkins-infra