Attendees 
- @dduportal (Damien Duportal)
- @jayfranco999 (Jay Reddy)
- @poddingue (Bruno Verachten)
- @hlemeur (Hervé Le Meur)
Announcements 
- Jenkins Weekly Releases
- Last Week: 2.534 - successful: You're invited to talk on Matrix
- This Week: 2.535 - started on time: You're invited to talk on Matrix
- Announcements:
- 2025-10-29 - Security Advisory (plugins only)
- Proposal: can we move next meeting from 11 Nov. to 12 Nov. same time?
- Accepted: let’s move on the Wed. 12 then
- Slow team:
- Mark is off until the 10 November 2025
- Incoming long week end in France (11 Nov. is banking day)
- Infra Roadmap: Jenkins Roadmap
- Current Priority: pkg.origin migrations
- Jenkins Elections started. Check your emails for a voting link (only for Documentation officer)
- 13 November 2025: JIRA maintenance starting at 16:00UTC, for 6 hours
Upcoming Calendar 
- Next Weekly: 2025-11-11 - 2.536
- Next LTS: 2025-11-12 - 2.528.2 - Herve Le Meur release lead
- Next Security Release as per jenkinsci-advisories: N.A.
- Upcoming credentials expirations (~3 weeks):
- 5 tokens, see issues in triage
- Next major event:
- FOSDEM: 31 Jan. and 1st Feb. in Brussels with Contributor Summit the 30
Cloud Budgets
-
Azure CDF - Remaining: ~$20k (30 Sept.) for 2025 - max Monthly threshold is $6.0k
- September: $5.8k (invoice)
- October: $5.5k (waiting for final invoice)
- November: $615 (forecast at 5.2k)
-
DigitalOcean - Remaining $12,105 until January 02, 2026
- September: $365 (invoice)
- October: $788.81 (invoice)
- Increased costs dues to usages.jenkins.io fully migrated (expected)
- November: $72 (forecast at $720)
-
AWS:
-
CloudBees:
- September: $709,17
- October: $580,07
- November: $52 (forecast at ~$580)
-
Sponsored account - $78,051 left (30 September 2025) until 2027 ($18,051.23 until 31 Jan. 2027 and $60,000 until 31 May 2027)=> ~10 months remaining at this rate
- September: $5.4k
- October: $6.9k
- November: $523 (forecast at $5.5k)
- No more capacity issues (no more spot for agents) => daily average decreased (positive effect)
- Still an EC2 plugin bug (to open) which makes agents to stale
-
-
Jfrog Artifactory Usage
- Storage: 1.47TB - slight increase
- Bandwidth:
- September: 19.31 Tb
- October: 16,67 Tb

- November: ~2.06 Tb - (forecast at 16.0 Tb)
Notes 
-
Done:
- Keep infrastructure up to date:
- Keep infrastructure sane and maintainable:
- [ci.jenkins.io,cert.ci.jenkins.io, trusted.ci.jenkins.io] Jenkins JDK tools: rationalize
- Reduce permissions of jenkins-release-bot in jenkinsci-cert organization
- [agent.trusted.ci.jenkins.io] Adapt disks to current usage and Azure recommandations
- Migrate
census.jenkins.ioVM from AWS CloudBees to DigitalOcean
-
- Keep infrastructure sane and maintainable:
- [pkg.jenkins.io] migrate the pkg.origin.jenkins.io service from AWS VM to Azure
publick8s- Time spent on poC and issue below
- SAML plugin is not yet available on get.jenkins.io
- Waiting for JenSec for review/merging the proposed fix (and documentation in runbooks)
- Enforce at least TLS 1.2 in our webservices
- All services mentionned in the report where treated except JIRA. Will be finished when migrating JIRA (13 Nov.)
github-jenkinsci-permissions-report.jsonhasn’t been updated since Sep 12- On hold, still need to define VM non spot
- [stats.jenkins.io/infra-statistics] Move “data for the usage stats site” generation (from anonymized data) out from Andrew machine
- census is now on DO: next step is to set up the required tools as per Andrew feedbacks (PgSQL, Golang, trusted.ci agent, SSH connection with usage)
- [pkg.jenkins.io] migrate the pkg.origin.jenkins.io service from AWS VM to Azure
- Keep infrastructure up to date:
- Update Jira LTS from 9.12.x to 10.3.x
- status.jenkins.io is already up to date (and CDF status page as well)
- (Q: pin the issue in helpdesk)
- Need to announce by email
- Upgrade to Kubernetes 1.33
- First step is to upgrade
kubectlin packer-images using updatecli (and follow the issue bullet list) to 1.33.x- Jay is familiar with the process and will work on it, guided by Herve
- Next step: changelog review
- First step is to upgrade
- Add support for Windows 2025 agents
- Experiment in progress on a Windows 2025 Server Machine focused on running 2022/2019 Docker containers from it, and eventually Linux containers
- Update Jira LTS from 9.12.x to 10.3.x
- Support:
- [increments.jenkins.io/ci.jenkins.io] Outage of incrementals due to
releasebotuser’s API token reset- Still need to reproduce the issue and change the user to a new one to avoid reptition of the outage
- Cause still not understood
- Admin access for Jenkins GSoC org admins to GSoC SiG Gitter channel
- On hold, waiting for new Jenkins board to be elected and taking over
- [increments.jenkins.io/ci.jenkins.io] Outage of incrementals due to
- ci.jenkins.io:
- Keep infrastructure sane and maintainable:
-
Issues staying in backlog/triage:
- https://get.jenkins.io/war-stable/latest/ does not point to latest stable release
- [Azure Deprecation] Convert your OS disks to Standard SSD or Premium SSD before 8 September 2028
- [Azure] Merge webservices data storage accounts into a single one with NFS v4.1
- [updates.jenkins.io] set up mirrorbits to keep serving update-center from mirrors even if outdated
- private docker image registry for staging core security releases
- [Azure]: credentials less Service Principal
- Tracking Issue for Groovy Script Conversion in RPU
- Tombstone Puppet (and replace it by something else)
- Chinese jenkins site incorrect site redirection
- Add a real-world job to weekly.ci.jenkins.io
- [ci.jenkins.io] Monitor and Garbage collect data volume of the DockerHub registry mirror and EC pull through cache
- Move collection of stats out from Kohsuke’s home
- Support [skip ci] on default branch
- Create build for jenkinsci/winp on release ci server
- [Update Center] HTTP/404 on
/current/updates/*.json*links - dnf5 update fails with gpgcheck=1
- Add monitoring for CD secrets updates
- Monitor builds on our private instances (trusted.ci.jenkins.io / infra.ci.jenkins.io / release.ci.jenkins.io)
- [INFRA-3046] Monitor Jenkins mirrors Age
-
Issues added to the next milestone:
- [infra.ci.jenkins.io] Azure Service Principal Credential used to deploy
plugins.jenkins.ioexpires the 2025-11-25 - JDK patch upgrade campaign (October 2025)
- [infra.ci.jenkins.io] Netlify token expires the 2025-11-27
- [infra.ci.jenkins.io] NPM token expires the 25 November 2025
- [infra.ci.jenkins.io] Azure Service Principal Credential used to deploy
contributors.jenkins.ioexpires the 2025-11-25 - [infra.ci.jenkins.io] Azure Service Principal Credential used to deploy
stats.jenkins.ioexpires the 2025-11-24 - Request to Create New Repository for GSoC 2025 Project: Jenkins Domain Specific LLM
- [release.ci.jenkins.io/trusted.ci.jenkins.io] Ensure Core Package build only copy package indexes/websites to
pkg.origin.jenkins.ioVM
- [infra.ci.jenkins.io] Azure Service Principal Credential used to deploy