Attendees 
- @dduportal (Damien Duportal)
- @lemeurherve (Hervé Le Meur)
- @jayfranco999 (Jay Reddy)
Announcements 
- Jenkins Weekly Releases
- Last Week: 2.583, completed
- Same metadata issue, same fix as last week.
- Following up on the issue Artifactory responds HTTP/403 to requests for metadata recalculation
- This Week: 2.584, almost completed (missing changelog)
- Release, package and Docker image are ready
- Let’s roll for weekly.ci and infra.ci
- Mark mentioned an issue which might impact the BOM update for this weekly
- Last Week: 2.583, completed
- Announcements:
- New infra SIUG meeting times!
- Once every 2 weeks at 08:30AM UTC (like this week) to cover for Asia/EU => same event as before
- Once every 2 weeks at 01:00pm UTC (starting next week) to cover for USA/EU => new event, susbcribe or ask to be invited
- Team capacity:
- Jay is off this Friday 25
- Priorities:
- Infra Roadmap: Jenkins Roadmap
- Current EPICs (by priority): GitHub · Where software is built
- Topic worth mentioning (timeframe of the upcoming 2 months)
- Nginx ingress retirement - Inform of Ingress NGINX Retirement in March 2026 · Issue #4869 · jenkins-infra/helpdesk · GitHub
- Kubernetes 1.35 upgrade - Upgrade to Kubernetes 1.35 · Issue #5168 · jenkins-infra/helpdesk · GitHub
- Blocked by publick8s migration to Sponsored Subscription
- Sponsoring: NodeOPS
- Their plugin has been released, we can start full evaluation
- GitHub - jenkinsci/createos-sandbox-plugin · GitHub
- New infra SIUG meeting times!
Upcoming Calendar 
- Next infra meeting: 2026-10-06 at 01:00pm UTC (USA/EU)
- Next Weekly: 2026-10-06 - 2.585
- Next LTS: 2026-09-30 - 2.580.1 (release lead: Mark Waite)
- Backports helpdesk: (Backport docker, packaging, and release changes for LTS 2.580.1 · Issue #5284 · jenkins-infra/helpdesk · GitHub)
- Backport after Weekly 2.584 release (Windows 2025 + inbound-agent bump in packaging pod template): Backport of `master` into `stable-2.580` for LTS 2.580.1 release by lemeurherve · Pull Request #973 · jenkins-infra/release · GitHub
- @dduportal will trigger the release build on EU morning
- Backports helpdesk: (Backport docker, packaging, and release changes for LTS 2.580.1 · Issue #5284 · jenkins-infra/helpdesk · GitHub)
- Next Security Release as per jenkinsci-advisories: N.A.
- Upcoming credentials expirations (~3 weeks):
- 2026-10-07: Renew ci.jenkins.io API token for incremental-publisher - Renew `ci.jenkins.io` API token for incremental-publisher service before 2026-10-07 · Issue #5302 · jenkins-infra/helpdesk · GitHub
- 2026-10-14: Azure Credential used by Packer Image builds expires - [infra.ci.jenkins.io] Azure Credential used by Packer Image builds expires on 2026-10-14 · Issue #5300 · jenkins-infra/helpdesk · GitHub
- 2026-10-19: Expiration of the Digital Oceans PATs (=> issue to create - @7JoquqrvQFu6FDlR14JVhg )
- 2026-10-22: Algolia write key expires (=> issue to create - @hervelemeur )
- Next major event: N.A.
Cloud Budgets
-
Azure (CDF paid)
- May: ~$2,800
- June: ~$2,108
- July: $2,182.84
- August: $2,179,52
- September: $1,945.56 (forecast at $2,094)
Max. threshold of $2.5k monthly met- Note: publick8s should move to sponsored subscription (~$990 monthly)
-
Azure Sponsored subscription (Microsoft Credits): $68,797 credits on September 01 2026 (expires on Nov. 2027)
- June: ~$5,542
- July: $5,518.05
- August: $6,652.23
- Septemper: ~$5,133 (forecasted at $5,463)
At current rate, we shall have a bit more than 12 months (at 5.5k/monthly), depleting credits on October 2027 (unless we have to move ci.jenkins.io here)
-
DigitalOcean - Remaining $5,186.81 until January 02, 2027 (on September 15)
- May: $1186.97
- June: $740.32
- July: $496.88
- August: $382.55
- September: $484.88 (forecast at ~$530)
- Increase monthly fee due to census.jenkins.io (bigger VM/disk)
At current rate, we have ~9.5 months left (at 550$ monthly)
-
AWS:
- Sponsored account, credits left: $24,424.79 until 01/31/2028 (on 22nd September)
- May: $14.9k
- June: ~$7,893
- July: $5,891.74
- August: $5,398.51 -19% compared to last month
- September: $4,441.48 (-13% than same period last month) (forecasted at $4,730.82)
At current rate ($4.3k monthly), we shall deplete credits on January 2027- No more cost reduction effort: from now we focus on either getting more credits or moving to Azure (or somewhere else) - [Autumn/2026] Determine and set up the future Cloud location of `ci.jenkins.io` before EoY 2026 · Issue #5283 · jenkins-infra/helpdesk · GitHub
- Sponsored account, credits left: $24,424.79 until 01/31/2028 (on 22nd September)
-
JFrog Artifactory Usage
- Storage: 1.99 TB (was 1.94TB last week)
- No more Darin Pope’s cron GC on incrementals
- Bandwidth:
- May: 29.98 TB
- June: 23.24 TB
- July: 31.3 TB
- August: 36.53 TB
- September: 39.22 TB (forecast: 42 TB)
- Storage: 1.99 TB (was 1.94TB last week)
Notes 
-
Done:
-
support
-
keep-infra-sane-and-maintainable
- [packer-images] Migrate install_jq from shell to an Ansible role
- Use a common
buildWebsitepipeline library function for websites- We had a bad surprise on plugins.jenkins.io which we fixed with a workaround. The NODE_ENV variable wasn’t used properly by our website builds.
- The new library surfaced bad practises in some websites: new issue incoming with improvement description and plan specific to NODE_ENV.
- Proposal is to follow official Node.js practise: NODE_ENV set to
productioneverywhere => @dduportal
- Proposal is to follow official Node.js practise: NODE_ENV set to
-
keep-infra-up-to-date
- [Plugin Health Score] Monitor outcomes of the scores computation routines and alert us when failing for too long
- We will now be alerted when PHS engines are failing (but the webservice will still be up!)
- [Plugin Health Score] Monitor outcomes of the scores computation routines and alert us when failing for too long
-
-
-
keep-infra-sane-and-maintainable
- [packer-images] Migrate the self-contained install functions of ubuntu-provision.sh to Ansible roles
- Sub tasks created for waves of migration by complexity (single binary, single package vs. complex installations sur as playwright)
- WiP on defining the right Ansible roles abstraction
- Optimise costs and maintainance by merging Windows 2022 and Windows 2025 templates
- release.ci used 2025 node pool for 2.584 today
- Next step: cleanup all 2022 node pool and remainings
- [stats.jenkins.io/infra-statistics] Move “data for the usage stats site” generation (from anonymized data) out from Andrew machine
- All 2025 stats have been pushed
- Started 2026 but we only have 2 month (March is incomplete)
- Next steps: recovering KK works (key/script) and continue the anonymization of existing logs
- [packer-images] Migrate the self-contained install functions of ubuntu-provision.sh to Ansible roles
-
keep-infra-up-to-date
- Backport docker, packaging, and release changes for LTS 2.580.1
- Backport after Weekly 2.584 release (Windows 2025 + inbound-agent bump in packaging pod template): Backport of `master` into `stable-2.580` for LTS 2.580.1 release by lemeurherve · Pull Request #973 · jenkins-infra/release · GitHub
- Migrate
publick8sAKS cluster to the Azure 2026 Sponsored subscription- WiP on reporting: constant public IP need more work than anticipated.
- Changing location is not working as expected (IP changed) but changing subscription (billing) was OK
- Reminder: we must change both subscription AND location (US East 2 → Sweden)
- Preparing next migration plan
- WiP on reporting: constant public IP need more work than anticipated.
- [infra.ci.jenkins.io] Azure Credential used by Packer Image builds expires on 2026-10-14
- Issue closable
- Prepare update-center root CA rotation
- On hold, new CA release. Last step for now it create a team calendar event
- [get.jenkins.io,mirrors.updates.jenkins.io] Resume GeoIP database weekly update
- Delayed, resuming work on it
- Backport docker, packaging, and release changes for LTS 2.580.1
-
support
- Create sonarcloud-token
- Token created and delivered on ci.jenkins.io
- Waiting for contributor for feedback or need for permissions
- Need to create calendar event for token renewal => @dduportal for the issue
- [get.jenkins.io] Ensure TUNA (China-based) mirror is reliable for Chinese users (original title: Support Mirror Selection in Update Center)
- No news from TUNA, no user complaint
- Let’s remove the TUNA mirror and be done
- Create sonarcloud-token
-
-
Issues added to the next milestone: