Attendees 
- @dduportal (Damien Duportal)
- @smerle33 (Stéphane Merle)
- @poddingue (Bruno Verachten)
- @krisstern (Kris Stern)
- Chirag (guest)
- @jayfranco999 (Jay Reddy)
Announcements 
- Jenkins Weekly Releases
- Last Week: 2.511, succesfully released, no “maven-metadata” issue (like in 2.510) - You're invited to talk on Matrix
- This Week: 2.512 started on time - You're invited to talk on Matrix
- Announcements:
- Most of the infra team is off this week (Mark yesterday, Jay today, Stephane and Damien Thursday and Friday)
- Low bandwidth for upcoming milestone
- We have guests (GSoC LLM project): welcome
- Are there pain point in the day to day in infra which could be studied by the PoC (and eventually solved by the LLM GSoC project)?
- Let’s focus on the public data, which lacks “easy entry” documentation and visualization.
- Most of our data is private and sensitive
- Maybe helping around the move Puppet → Ansible?
- Need to measure and specify the resources requirements so we can evaluate prices
- Azure CDF subscription issues: billing ownership transferred to CDF
- Microsoft did loose the costs data since the 21 of may, and again since the 26 of may (each billing ownershipt transfer)
- LF/CDF did ask for May data, which should be available after the 10 June
- We should still be able to see data starting today
- Most of the infra team is off this week (Mark yesterday, Jay today, Stephane and Damien Thursday and Friday)
Upcoming Calendar 
- Next Weekly: 2025-06-03, 2.513
- Next LTS: 2025-05-28 (tomorrow), 2.504.2, Kris Stern is release lead
- Next Security Release as per jenkinsci-advisories: N.A.
- Upcoming credentials expirations (~3 weeks):
- 2025-06-04: Netlify token expires
- (Issue to be done) - previous issue was [INFRA-599] Update infra_update_center_v3 from JDK7 to 8 · Issue #458 · jenkins-infra/helpdesk · GitHub
- @dduportal
- 2025-06-07: NPM token expires
- (Issue to be done) - previous issue was [infra.ci.jenkins.io] NPM token expires the 7 March 2025 · Issue #4579 · jenkins-infra/helpdesk · GitHub
- @smerle
- 2025-06-14:
- (Issue to be done) Azure SP used by infra.ci to spin up Azure VM agents: Azure AD Application password for Azure VM agents in `infra.ci.jenkins.io` expires on `2025-06-14T00:00:00Z` by jenkins-infra-updatecli[bot] · Pull Request #1049 · jenkins-infra/azure · GitHub
- Should be converted to credential-less workload identity (ref. Jenkins Controllers in Azure Kubernetes: use workload identity management to allow managing Azure VM agents without credentials · Issue #4651 · jenkins-infra/helpdesk · GitHub)
- @smerle + @dduportal
- (Issue to be done) Azure SP used by infra.ci to spin up Azure VM agents: Azure AD Application password for Azure VM agents in `infra.ci.jenkins.io` expires on `2025-06-14T00:00:00Z` by jenkins-infra-updatecli[bot] · Pull Request #1049 · jenkins-infra/azure · GitHub
- 2025-06-15: Azure SP used to deploy websites to production in infra.ci (into file shares):
- contributors: New end date for `contributors.jenkins.io` File Share service principal writer on `infra.ci.jenkins.io` (current: 2025-06-15T00:00:00Z) by jenkins-infra-updatecli[bot] · Pull Request #1050 · jenkins-infra/azure · GitHub
- plugins: New end date for `plugins.jenkins.io` File Share service principal writer on `infra.ci.jenkins.io` (current: 2025-06-15T00:00:00Z) by jenkins-infra-updatecli[bot] · Pull Request #1051 · jenkins-infra/azure · GitHub
- stats: New end date for `stats.jenkins.io` File Share service principal writer on `infra.ci.jenkins.io` (current: 2025-06-15T00:00:00Z) by jenkins-infra-updatecli[bot] · Pull Request #1052 · jenkins-infra/azure · GitHub
- 2025-06-04: Netlify token expires
- Next major event: N.A.
Cloud Budgets
-
Azure CDF:
- February: $3.9k (invoice)
- March: $4,3k (invoice)
- April: $3,9k (invoice)
- May: cost data hidden by Microsoft until billing issues are settled
- 2025-05-20: Was $2,071 with forecast at $3.2k
- 2025-05-26: ~$2,540 (raw evaluation with CDF) with forecast at $3.1k. We’re good
-
Azure Sponsorship (Microsoft Credits) - Remaining: $19,195 until 31 August 2025
- February: $11.2k
- March: $4,276
- April: $12.1k
- May: $12,076 (forecast at $13.9k). Slight increase, but we’ll cover the whole month of June.
-
DigitalOcean - Remaining $14,300 until January 02, 2026
- February: $237 (invoice)
- March: $272 (invoice)
- April: $349 (invoice)
- May: $310 (forecast at $356)
-
AWS:
-
CloudBees:
- February: $550
- March: $551
- April: $532
- May: $453 (forecast at $543)
-
Sponsored account (~$36,727 credits lefts until 01/31/2027)
- February: $8.5k
- March: $14,649
- April: $1,977
- May: $2,45 (forecast at $3,6)
-
-
Jfrog Artifactory Usage
- Storage: 1.32TB
- Bandwidth:
- March: 35.25 TB (better than expected)
- April: 26.34 TB (good! Mostly ‘releases’ repo: 22.25Tb, then 1.21 Tb on jcenter and 1 Tb on incrementals)
- May: 19.27 Tb (17.25 Tb is ‘releases’, forecast at ~22.12 TB)
Notes 
-
Done:
- JDK21 runtime for Jenkins controllers and agents
- Keep jenkins-infra up to date:
- [infra.ci.jenkins.io/packer-images] Azure Credential used by Packer Image builds expire 2025-05-22T00:00:00Z
- [puppet.jenkins.io] Migrate to DigitalOcean
- Azure announced depreciation of Ubuntu 20.04 machines. No stopping existing ones, we can re-create machine from disk snapshot, but not from empty OS installation image. Let’s take one today
- Azure announced depreciation of Ubuntu 20.04 machines. No stopping existing ones, we can re-create machine from disk snapshot, but not from empty OS installation image. Let’s take one today
- Support:
-
-
Support:
- Restore jenkinsci/jenkins build stability
- Update Jira LTS from 9.12.x to 10.3.x
- No news from LF, Mark tracks this one. (EOL is in September)
-
Keep jenkins-infra up to date:
- OSUOSL: decrease mirror dependency
- archives.jenkins.io is the reference for get.jenkins.io content mirrors
- It has public rsync, at least for upcoming 7 days. Then we’ll restrict by IP.
- Next week: switch sync scripts (pkg ↔ archives ↔ OSUOSL)
- archives.jenkins.io is the reference for get.jenkins.io content mirrors
- OSUOSL: decrease mirror dependency
-
packer-images: use api.adoptium.net for updatecli and installation of JDKs
- WiP: install adoptium binaries (all in one image) with checksum using official API. Linux is good and Windows in progress.
- WiP: track URL and checksum with updatecli (which effectively uses the API)
- Reminder: requirement to allow adding JDK25 in the platform
- Monitor builds on our private instances (trusted.ci.jenkins.io / infra.ci.jenkins.io / release.ci.jenkins.io)
- WiP: pipeline library required to generate JSON and report. Working in wrapping logic in a shell script andonly use pipeline wrapping.
- [Upgrade Campaign] Bump Cloudflare Terraform provider to 5.x
- Migration scripts/doc is broken or break things.
- Token management is also broken.
- WiP: public project using the “import” technique in terraform: no more terraform state for current resources until finished.
- Next step: find a way to manage token from scratch.
-
2025 Cloud Usage: ensure that we can run until end of year
- Paused due to the Azure billing issues.
- Next (issues to be created): trusted.ci and cert.ci controllers. Let’s move to lower instance quality
- arm64? Lower size? Lower quality (burstable instance)?
- Mark follows up with AWS sponsorship
-
- 3 remaining issues:
- 1 closed (as not needed anymore)
- 1 to be closed with links (pipeline library) => @dduportal
- 1 remaining: default build java (JAVA_HOME and PATH) from JDK17 to JDK21 => @smerle
- might impact a few infra builds
- should be ok for BOM (modulo an issue)
- Important: can we switch the Jenkins Core build (docker-packaging) to use JDK21? Need mailing list thread
- 3 remaining issues:
-
-
Issues staying in backlog/triage:
- Chinese jenkins site incorrect site redirection
- [Azure] Migrate (e.g. re-create) AKS clusters
publick8s
andprivatek8s
with modern settings (private API, Azure Linux, NAT outbound) - [cert.ci/trusted.ci/private.vpn] Default outbound access for VMs in Azure will be retired
- [private.vpn.jenkins.io] Azure deprecates Public IPs of type “Basic” the 30 September 2025
- Add a real-world job to weekly.ci.jenkins.io
- Move collection of stats out from Kohsuke’s home
- Support [skip ci] on default branch
- Create build for jenkinsci/winp on release ci server
- [Update Center] HTTP/404 on
/current/updates/*.json*
links - dnf5 update fails with gpgcheck=1
- Add monitoring for CD secrets updates
-
Issues added to the next milestone:
jgit
in Artifactory proxies all of Eclipse andjgit-cache
contains 200GB
* Need Darin, Mark and Adrien’s help here
* Worth doing- JDK25 integration
- Switch agent (java home/Path) to JDK21 default
- Switch default JDK to 21 for pipeline libraries
- To be closed