Attendees 
- @dduportal (Damien Duportal)
- @lemeurherve (Hervé Le Meur)
- @jayfranco999 (Jay Reddy)
Announcements 
- Jenkins Weekly Releases
- Last Week: 2.564
- This Week: 2.565
- release.jenkins.io, packages.jenkins.io and docker image have been released
- Announcements:
- Team capacity:
- Jay off from this Friday (22nd May- 28th May 2026)
- 25th May 2026 is Banking holiday for Hervé and Damien
- Priorities:
- Infra Roadmap: Jenkins Roadmap
- MSI signing done (to update in the jenkins-infra roadmap)
- Current topics:
- Incoming “minor” topics:
- Terraform version bump (issue to create) => @dduportal
- Playwright - playwright browsers (issue to create) => @hervelemeur
- Helm v4 version bump (issue to create) => @dduportal
- jq 1.8 (issue to create) => @7JoquqrvQFu6FDlR14JVhg
- we want only one version of jq that comes from packer-images
- Infra Roadmap: Jenkins Roadmap
- Team capacity:
Upcoming Calendar 
- Next infra meeting: Tuesday May 26
- Next Weekly: 2.566 - Tuesday May 26
- Next LTS: Jenkins 2.555.3 (Wednesday, June 10)
- Next Security Release as per jenkinsci-advisories: N.A.
- Upcoming credentials expirations (~3 weeks):
- 2026-06-01: VPN CRL expires (issue to create => @dduportal)
- 2026-06-03:
- 3 Fastly tokens used by infra.ci, trusted.ci and release.ci expire (3 issues to create, one each => @dduportal )
- Cloudflare R2 tokens used by trusted.ci expire (issue to create => @hervelemeur )
- 2026-06-07:
- All Terraform “states” credentials expire (Azure Credentials for backend state of all TF projects, AWS token, etc.) (issue to create => @dduportal )
- 2026-06-08:
- [infra.ci] Azure Credential to deploy docs.jenkins.io expires (issue to create => @7JoquqrvQFu6FDlR14JVhg)
- 2026-06-09:
- [infra.ci] Azure AD Application password for updatecli expires (issue to create => @7JoquqrvQFu6FDlR14JVhg)
- [infra.ci] Azure Credential to write to reports.jenkins.io expires (issue to create => @7JoquqrvQFu6FDlR14JVhg)
- Next major event: N.A.
Cloud Budgets
-
Azure (CDF paid)
- February: $6.4k (invoice)
- March: $5.6k (invoice)
- April: $3.553 (invoice)
- May: $1789 (forecasted at $3.1k)
- We’re good but target threshold is to $2.5k
-
Azure Sponsored subscription (Microsoft Credits): ~$91338 credits on May 1st 2026 - until 20 Oct. 2027
- March: $1847 (invoice)
- April: $5902 (invoice)
- May: $3359.83 (forecasted at 6.3k)
- ~13.5 months left at current rate
-
DigitalOcean - Remaining $7,855 until January 02, 2027
- February: $565.03 (invoice)
- March: $423.63 (invoice)
- April: $775.30
- May: $622.62 (forecasted at ~$1k)
- ~8 months left at current rate (drastic increase in credit consuption)
-
AWS:
- Sponsored account, credits left: $13,880.67 until 05/31/2027, and $60k until 01/31/2028
- February: $11.1k (invoice)
- March: $14.0k (invoice)
- April: $15.4k
- May: $8.9k (forecasted at $15.1k)
- Still high and increasing (EC2 plugin bug, BOM, non spots, old instance family, bandwidth)
- Sponsored account, credits left: $13,880.67 until 05/31/2027, and $60k until 01/31/2028
-
JFrog Artifactory Usage
- Storage: 1.7 Tb
- Stable
- Bandwidth:
- February: 17.46 Tb
- March: 27.24 Tb
- April: 43.85 Tb
- May: 18.78 Tb (forecasted at ~30 Tb)
- Storage: 1.7 Tb
Notes 
-
Done:
-
keep-infra-sane-and-maintainable
-
support
- One CI/CD check consistently failing for all jenkins-infra/contributor-spotlight pull requests
- Caused by a
.tool-versionnot reverted.
- Caused by a
- GSoC 2026 - Plugin Modernizer stats visualization - New repo on jenkins-infra
plugin-modernizer-stats- Reopening as per Kris request until we add 2 other Gsoc mentors as repository maintainers
- Set up CI for
jenkins-enforcer-rules- Thanks Tim!
- One CI/CD check consistently failing for all jenkins-infra/contributor-spotlight pull requests
-
keep-infra-up-to-date
- JDK patch upgrade campaign (April 2026)
- LTS and JDK8 were the last steps
- @hervelemeur caught we still have a few Docker images using old JDK8. Might need to track them next time.
- [pkg.jenkins.io/release.jenkins.io] Certificate signing the MSI Jenkins package expires on 16 May 2026
- LTS 2.555.2 was released with signing
- Cleanup of old credentials (certificates from 2023, etc.)
- Update ci.jenkins.io, trusted.ci, cert.ci and release.ci to latest LTS version 2.555.2
- JDK patch upgrade campaign (April 2026)
-
-
-
support
- GSoC 2026 - Retool jenkins.io website Success Stories and Contributor Spotlight
- Waiting for Kris feedback
- Spot instance failure not retried - ci.jenkins.io - core build
- No work done. Still on hold. Not a blocker.
- GSoC 2026 - Retool jenkins.io website Success Stories and Contributor Spotlight
-
keep-infra-up-to-date
- Sync package-lock.json across website repositories after NodeJS upgrade
- Last project should be www.jenkins.io (@dduportal)
- Goal: requirement to use
npm ciinstead ofnpm installon pipelines. issue to create => @7JoquqrvQFu6FDlR14JVhg .- (implies Dockerfile and some docs along with our pipelines)
- Drop Windows 2019 support
- Damien to go to SIG platform to voice ourselves
- Upgrade to Kubernetes 1.34
kubectlbumped to 1.34- Next step is check changelog before proceeding.
- Handing over to Herve/Damien due to Jay holidays
- Sync package-lock.json across website repositories after NodeJS upgrade
-
keep-infra-sane-and-maintainable
- Remove ASDF from website repositories and rely on packer-image NodeJS
- Last ASDF for NodeJS/NPM is www.jenkins.io => @dduportal
- [privatek8s/infra.ci.jenkins.io/release.ci.jenkins.io] Run AKS cluster in the sponsored subscription
- vnet done
- Next steps:
- Create new cluster
- Write down the migration plan
- [updates.jenkins.io] provide a mirror for Jenkins Russian users
- Yandex mirror added to Update Center
- Updated not often enough => enabled serving stale files from mirrors until they reach 3 hours mod mismatch
- Caused peak of usage on DigitalOcean (archives fallback)
- Long term: get a VM ourselves on Yandex (sponsoring request?)
- Short term: requester contacts Yandex to get sync more often
- Yandex mirror added to Update Center
- Azure Sponsored Subscription 2026: utilizes the 100k$ credits for the Jenkins Infrastructure
- EPIC (see privatek8s)
- Tombstone Puppet (and replace it by something else)
- PoC on packer-images:
- Herve is experimenting on replacing goss tests by ansible tests
- Damien is experimenting by replacing shell install_* functions by ansible roles
- PoC on packer-images:
- Monitor builds on our private instances (trusted.ci.jenkins.io / infra.ci.jenkins.io / release.ci.jenkins.io / cert.ci.jenkins.io)
- @dduportal to close the issue, foundation for this topic are working well, we need to open issues “per case” now for follow ups
- Remove ASDF from website repositories and rely on packer-image NodeJS
-
-
Issues added to the next milestone:
- Issues to open:
- Increase threshold of update_center build monitor alert => @hervelemeur
- Add to build monitoring => @hervelemeur
- Reports jobs on infra.ci
- trusted.ci jobs not already monitored
- Add private endpoints to reports.jenkins.io (US East 2 region) from cert.ci.jenkins.io (Sweden region) => @dduportal
- Renovate seems to be wedged on BOM repo
- Issues to open:
-
Issues staying in backlog/triage:
-
uncategorized
- [cert.ci.jenkins.io] migrate controller VM from Azure CDF to Azure sponsored subscription
- Tombstone
plugin-site-apiservice (in favor of a static report file) - [Terraform azure/aws/shared-tools] Migrate Kubernetes provider resources (
kubernetes_*) to versioned resources (kubernetes_*_v1) - See if we can get OIDC enabled on our artifactory
- main branch Jenkins build status is in progress but not build was triggered
- msbuild not available on ci.jenkins.io Windows agent for winp build process
- Sporadic HTTP 503 First byte timeout errors on jenkins.io
- Provide Maven 4 pre-release templates on ci.jenkins.io
- Enable Jenkins CLI
- Prepare for post-Jira account management
- Inform of Ingress NGINX Retirement in March 2026
- [Azure Deprecation] Convert your OS disks to Standard SSD or Premium SSD before 8 September 2028
- [Azure] Merge webservices data storage accounts into a single one with NFS v4.1
- private docker image registry for staging core security releases
- Chinese jenkins site incorrect site redirection
- Add a real-world job to weekly.ci.jenkins.io
- [ci.jenkins.io] Monitor and Garbage collect data volume of the DockerHub registry mirror and EC pull through cache
- Move collection of stats out from Kohsuke’s home
- Support [skip ci] on default branch
- Create build for jenkinsci/winp on release ci server
- [Update Center] HTTP/404 on
/current/updates/*.json*links - Add monitoring for CD secrets updates
- [INFRA-3046] Monitor Jenkins mirrors Age
-
keep-infra-sane-and-maintainable
- [release.ci.jenkins.io] Avoid filling the JENKINS_HOME
- [Uplink,Rating,PHS,Keycloak] Postgres version
13will lose standard Azure support on March 31, 2026. Upgrade now to avoid extended support charges starting August 1, 2026. - Move docker controller images publication job from trusted.ci.jenkins.io to release.ci.jenkins.io
- [(status|contributors|stats|docs|stories|cn|jenkins-io-components).jenkins.io, Websites PR previews] Netlify billing plan changed: evaluate and act
-