Each week, the CMS Cloud program provides a list of upcoming changes, maintenance windows, and updates to help customers build awareness and plan effectively and summarizes changes from the previous week.
This newsletter includes:
Completed change summary for the week of 5/15/2025
To learn details about previous changes please go to the News and Updates section on cloud.cms.gov. (Secure Access required)
For Patching and Gold Image release schedule please view :Patching and Gold Image Release Calendar - 2025
5/22/2025 - DevOps Services Maintenance
Summary:
CMS Hybrid Cloud will be performing maintenance updates on its DevOps tools.
Actions we are taking:
- Upgrade Gold Image AMIs from AL2 to AL2023 for CloudBees Jenkins CI and Jfrog
- Upgrade application versions for CloudBees Jenkins CI and managed controller
- Enable TLS for RabbitMQ in Jfrog and migrate Jfrog RDS to Graviton
- Renew Sonarqube license
- Upgrade EKS version (to 1.32), EKS add-ons and supporting components
When is this happening?
Start time: Thursday, 5/22/2025 at 9:00 p.m. ET End time: Friday, 5/23/2025 at 1:00 a.m. ET
Who will be impacted?
All AWS Commercial and GovCloud customers of CloudBees, JFrog, and SonarQube.
What is the impact?
Customers should expect a short downtime for each service as instances are restarted within the maintenance window.
5/23/2025 - BigFix AWS Environment Upgrade to Version 11
Summary:
The AWS BigFix Environment will be upgraded from Version 10.0.12 to Version 11.0.3.
Actions we are taking:
During this time, the CMS Hybrid Cloud TSAM team will upgrade the BigFix primary server, consoles, web reports, Web UI, relays, and clients to BigFix Version 11.0.3.
When is this happening?
Start Time: Friday, May 23, 2025, at 12:00 p.m. ET
End Time: Friday, May 23, 2025, at 10:00 p.m. ET
Who will be impacted?
Customers with the BigFix agent installed on their instances will be upgraded to Version 11.0.3.
What is the impact?
There is no impact expected to customers. The upgrade will perform a service restart, but there is no expected outage. No action required for users after the upgrade.
|
5/23/2025 - Reduce Indexed Data Retention in Cloud Splunk to 4 Years
Summary:
The CMS Hybrid Cloud team will be reducing indexed data retention to 4 years from 7 years as the first phase of bringing Cloud Splunk into M-21-31 compliance.
Actions we are taking:
- Reduce the retention policy to 4 years
- Monitor indexer fix-up tasks
When is this happening:
Start Time: Friday, 5/23/2025 at 8:00 p.m. ET
End Time: Saturday, 5/24/2025 at 4:00 p.m ET
Who will be impacted?
DRaaS ITSI, MITG MSI, EMM and CCIC search heads peered to the Splunk environment.
What is the Impact:
There is no expected impact to users. During the change window there can be latency in Splunk searches and dashboards rendering slowly.
5/24/2025 - Restart Production and Non-Prod HEC Servers
Summary:
In order to keep the environment performing well, the CMS Hybrid Cloud team will conduct maintenance on the Cloud instances of the Http Event Collector (HEC) infrastructure every Saturday, starting March 8th from 10 a.m. ET to 11:30 p.m. ET through May 31st.
Actions we are taking:
- Restart Production and Non-Prod HEC Services
When is this happening?
Start Time: Saturday, 5/24/2025 at 10:00 a.m. ET
End Time: Saturday, 5/24/2025 at 11:30 p.m. ET
Restarts will be every Saturday from 10:00 a.m. ET through 11:30 p.m. ET until the end date/time.
Who will be impacted?
There is no expected impact to users.
What is the impact?
Restart Production and Non-Prod HEC Services - There is no anticipated downtime or impacts to the logging ingest process.
5/28/2025 - Non-Marketplace SSM patching - PROD
Summary:
- Non-Marketplace PROD
- SSM Linux & Windows Vulnerability Patching
Actions we are taking:
As part of our normal patching, the CMS Hybrid Cloud team will apply the latest Windows and Linux patches on Wednesday, 05/28/2025 at 9:00 p.m. ET. The week's patches will impact the PROD environment for the affected Non-Marketplace applications noted below.
When is this happening?
Start Time: Wednesday, 5/28/2025 at 9:00 p.m. ET
End Time: Thursday, 5/29/2025 at 2:00 a.m ET
Who will be impacted?
Reboot - CEDAR, FFSDCS, RASS, OC Base- eLDAP, SC CLIA, NTP LMS, Spott MACBIS, MDP, OC Base- WNMG, NEIL/HRES, OC Base- EWST, MacFin, eAPD Hi-C, OC Base- CMS Cloud Legacy, OC Base- DevSecOps SecDevOps, iServ, MDP, PECOS2.0, SEI, OC Base- PWSS, TRA, CMS ARTS, MCIM, RAD Analysis Tools, MCIM, Perm, CMS Cloud - CRE, CMS Cloud - Enterprise Agile Tools, CMS Cloud tamer, CMS Cloud - CARD, CMS Cloud - ECS Fargate, CMS Cloud - Direct Connect, CMS Cloud - Jfrog SonarCube, CMS Cloud - DNS Prod, CMS Cloud - SRE, CMS Cloud - Governance 2.0, MEOWx, CMS Cloud - CloudBees Jenkins, CMS Cloud - CET, CMS Cloud - DevSecOps, CMS Cloud - Utilities, CMS Cloud - Testrail, CMS Cloud - CircleCI, CMS Cloud - Sam GSS Security GovCloud, SWIFT, AWS HEIDI
No reboot - MEPBS, EACMS, MacPro, PS&R, RDS, OC Base- APIM GEO, 1115 PMDA, CMS Cloud - Governance 2.0, CMS Cloud - QuickDNS, CMS Cloud - CMSNet, CMS Cloud - CCG Web Content, CMS Cloud - Network Arch, CMS Cloud - VPC Automation, CMS Cloud - Security Team, CMS Cloud - CCG Web Content, CMS Cloud Temporal, CMS Cloud - Splunk, CMS Cloud - CET, AWS GSS Security GC, CMS Cloud - Splunk GovCloud Dev, occonfluence, ocjira, miniorange, ocsonarqube, MTF-PM, NDW
What is the impact?
Patches will be transmitted to the affected areas. For some customers, reboots may occur depending upon the tags applied.
5/28/2025 - Marketplace SSM patching - IMPL
Summary:
- Marketplace IMPL
- SSM Linux & Windows Vulnerability Patching
Actions we are taking:
As part of our normal patching, the CMS Hybrid Cloud team will apply the latest Windows and Linux patches on Wednesday, 05/28/2025 at 9:00 p.m. ET. The week's patches will impact the IMPL environment for the affected Marketplace applications noted below.
When is this happening?
Start Time: Wednesday, 5/28/2025 at 9:00 p.m. ET
End Time: Thursday, 5/29/2025 at 2:00 a.m ET
Who will be impacted?
FFM_Opera, XES - CyberArk, OCEAN, VAMS, TWS, XES - XOC Tools, SERVIS, FFM_Shared_Services, FFM MLMS, XES - MSI Tech Lab, FFM_FM, FFM_TWS, FFM_PM, XES - Service Virtualization
DSRS, FFM, FFM DSH, FFM EDI, FFM EFT, FFM ESDCU, MCR, FLH, OC Base- FLH, OC Base PET
What is the impact?
Patches will be transmitted to the affected areas. For some customers, reboots may occur depending upon the tags applied.
Need help? We are here to support you.
If you have any questions, don't hesitate to reach out to your assigned Hosting Coordinator. CMS IT Support can be reached via cloudsupport@cms.hhs.gov, or call (800) 562-1963, and is documented here at Support Page on cloud.cms.gov.
|