Attendees 
- @dduportal (Damien Duportal)
- @lemeurherve (Hervé Le Meur)
- Mohammed Faheem
Announcements 
- Jenkins Weekly Releases
- Last Week: 2.565
- This Week: 2.566, no issues
- Announcements:
- Team capacity:
- Jay is off until Friday this week
- Priorities:
- Infra Roadmap: Jenkins Roadmap
- Updated \o/
- Current topics:
- Infra Roadmap: Jenkins Roadmap
- Team capacity:
Upcoming Calendar 
- Next infra meeting: next week, 2026-06-02
- Next Weekly: 2026-06-02 - 2.567
- Next LTS: 2026-06-10 - 2.555.3
- RC: 2026-06-03
- Next Security Release as per jenkinsci-advisories: tomorrow (2026-05-27) - https://groups.google.com/g/jenkinsci-advisories/c/87rdJzH1F1E
- Upcoming credentials expirations (~3 weeks):
- 2026-06-01: VPN CRL expires
- 2026-06-03:
- Fastly tokens:
- infra.ci: [infra.ci.jenkins.io] Fastly API tokens used by the Fastly Terraform project expires on 03 June 2026 · Issue #5121 · jenkins-infra/helpdesk · GitHub
- release.ci: [release.ci.jenkins.io] Fastly token used to decache www.jenkins.io and pkg.jenkins.io expires on 03 June 2026 · Issue #5118 · jenkins-infra/helpdesk · GitHub
- trusted.ci: [trusted.ci.jenkins.io] Fastly token used to decache www.jenkins.io expires on 03 June 2026 · Issue #5116 · jenkins-infra/helpdesk · GitHub
- Cloudflare R2 tokens used by trusted.ci expire (issue to create => @hervelemeur)
- Fastly tokens:
- 2026-06-07:
- 2026-06-08:
- [infra.ci] Azure Credential to deploy docs.jenkins.io expires - [infra.ci.jenkins.io] Azure Credential to deploy docs.jenkins.io expires on 2026-06-08 · Issue #5120 · jenkins-infra/helpdesk · GitHub
- 2026-06-09:
- [infra.ci] Azure AD Application password for updatecli expires (issue to create => @7JoquqrvQFu6FDlR14JVhg)
- [infra.ci] Azure Credential to write to reports.jenkins.io expires (issue to create => @7JoquqrvQFu6FDlR14JVhg)
- Next major event: N.A.
Cloud Budgets
-
Azure (CDF paid)
- February: $6.4k (invoice)
- March: $5.6k (invoice)
- April: $3.553 (invoice)
- May: $2396 (forecasted at $2.9k)
- Good forecast decrease, but final target threshold should be $2.5k
- WiP on privatek8s to meet this goal
-
Azure Sponsored subscription (Microsoft Credits): ~$91338 credits on May 1st 2026 - until 20 Oct. 2027
- March: $1847 (invoice)
- April: $5902 (invoice)
- May: $4514 (forecasted at 5.7k)
- ~14 months left at current rate
-
DigitalOcean - Remaining $7,512 until January 02, 2027
- February: $565.03 (invoice)
- March: $423.63 (invoice)
- April: $841,69 (invoice)
- May: $967 (forecasted at ~$1k)
- ~7.5 months left at current rate (drastic increase in download bandwitdh in April which continues now)
-
AWS:
- Sponsored account, credits left: $13,880.67 until 05/31/2027, and $60k until 01/31/2028
- February: $11.1k (invoice)
- March: $14.0k (invoice)
- April: $15.4k
- May: $12.4k (forecasted at $15.2k)
- Still high and increasing (EC2 plugin bug, BOM, non spots, old instance family, bandwidth)
- Sponsored account, credits left: $13,880.67 until 05/31/2027, and $60k until 01/31/2028
-
JFrog Artifactory Usage
- Storage: 1.7 Tb
- Still stable
- Bandwidth:
- February: 17.46 Tb
- March: 27.24 Tb
- April: 43.85 Tb
- May: 24.76 Tb (forecasted at ~30.5 Tb)
- Storage: 1.7 Tb
Notes 
-
Done:
-
keep-infra-up-to-date
-
keep-infra-sane-and-maintainable
-
-
-
keep-infra-sane-and-maintainable
- [privatek8s/infra.ci.jenkins.io/release.ci.jenkins.io] Run AKS cluster in the sponsored subscription
- From EPIC: Azure Sponsored Subscription 2026: utilizes the 100k$ credits for the Jenkins Infrastructure
- Herve + Damien
- Currently working on empty controller to verify all network setups have been transplanted
- Next step: plan migration
- Use npm ci instead of npm install in CI/CD pipelines
- Wip, waiting for Jay
- [updates.jenkins.io] provide a mirror for Jenkins Russian users
- Update Center now works in Russia
- But issue with tool installer: to be reproduced
- [Fastly Credentials] Switch to Automation token with expiration
- Reopened due to Terraform failing (production only, not staging) + other website requiring tokens
- Tombstone Puppet (and replace it by something else)
- On hold, Ansible PoC still WiP on packer-images
- [privatek8s/infra.ci.jenkins.io/release.ci.jenkins.io] Run AKS cluster in the sponsored subscription
-
support
- Renovate seems to be wedged on BOM repo
- No action expected: closeable
- GSoC 2026 - Retool jenkins.io website Success Stories and Contributor Spotlight
- Waiting from Kris
- GSoC 2026 - Plugin Modernizer stats visualization - New repo on jenkins-infra
plugin-modernizer-stats- Waiting from Kris
- Spot instance failure not retried - ci.jenkins.io - core build
- On hold
- Renovate seems to be wedged on BOM repo
-
keep-infra-up-to-date
- Drop Windows 2019 support
- Damien to attend next SIG meeting (2nd June)
- Upgrade to Kubernetes 1.34
- kubectl done
- Next step: changelog review
- Operation “on hold” until privatek8s migrtaed to sponsored subscription
- Drop Windows 2019 support
-
-
Issues added to the next milestone:
- Replace maintainer for ompass-2fa-plugin: add OMSecurity, remove dev-hanseob
- Searching for a plugin by name no longer returns the plugin page
- [private.vpn.jenkins.io] VPN CRL expires on 2026-06-01
- [infra.ci.jenkins.io] Fastly API tokens used by the Fastly Terraform project expires on 03 June 2026
- [release.ci.jenkins.io] Fastly token used to decache www.jenkins.io and pkg.jenkins.io expires on 03 June 2026
- [trusted.ci.jenkins.io] Fastly token used to decache www.jenkins.io expires on 03 June 2026
-
Issues staying in backlog/triage:
- [Terraform Credentials] Expirations of multiple credentials (backends, API) in jenkins-infra/terraform-states on 2026-06-07
- [infra.ci.jenkins.io] Azure Credential to deploy docs.jenkins.io expires on 2026-06-08
- Bump Terraform from 1.12.x to 1.15.x
- Debian upgrade campaign:
bookworm(12.x) totrixie(13.x) - Bump Helm from
3.xto4.x - Ubuntu 26.04 (Resolute Racoon) upgrade campaign
- [cert.ci.jenkins.io] Monitor the
acceptance-tests-check-agent-availabilityjob and alert us when failing 3 consecutive times - Upgrade jq to 1.8 on packer-images and ensure compatibility across all jenkins-infra projects
- Tombstone
plugin-site-apiservice (in favor of a static report file) - [cert.ci.jenkins.io] migrate controller VM from Azure CDF to Azure sponsored subscription
- [Terraform azure/aws/shared-tools] Migrate Kubernetes provider resources (
kubernetes_*) to versioned resources (kubernetes_*_v1) - See if we can get OIDC enabled on our artifactory
- main branch Jenkins build status is in progress but not build was triggered
- msbuild not available on ci.jenkins.io Windows agent for winp build process
- Sporadic HTTP 503 First byte timeout errors on jenkins.io
- Provide Maven 4 pre-release templates on ci.jenkins.io
- Enable Jenkins CLI
- Prepare for post-Jira account management
- Inform of Ingress NGINX Retirement in March 2026
- [Azure Deprecation] Convert your OS disks to Standard SSD or Premium SSD before 8 September 2028
- [Azure] Merge webservices data storage accounts into a single one with NFS v4.1
- private docker image registry for staging core security releases
- Chinese jenkins site incorrect site redirection
- Add a real-world job to weekly.ci.jenkins.io
- [ci.jenkins.io] Monitor and Garbage collect data volume of the DockerHub registry mirror and EC pull through cache
- Move collection of stats out from Kohsuke’s home
- Support [skip ci] on default branch
- Create build for jenkinsci/winp on release ci server
- [Update Center] HTTP/404 on
/current/updates/*.json*links - Add monitoring for CD secrets updates
- [INFRA-3046] Monitor Jenkins mirrors Age
- [INFRA-2352] Add monitoring for age of crawler files
- [release.ci.jenkins.io] Avoid filling the JENKINS_HOME
- [Uplink,Rating,PHS,Keycloak] Postgres version
13will lose standard Azure support on March 31, 2026. Upgrade now to avoid extended support charges starting August 1, 2026. - Move docker controller images publication job from trusted.ci.jenkins.io to release.ci.jenkins.io
- [(status|contributors|stats|docs|stories|cn|jenkins-io-components).jenkins.io, Websites PR previews] Netlify billing plan changed: evaluate and act