Each week, the CMS Cloud program provides a list of upcoming changes, maintenance windows, and updates to help customers build awareness and plan effectively and summarizes changes from the previous week.
This newsletter includes:
Completed change summary for the week of 6/12/2025
To learn details about previous changes please go to the News and Updates section on cloud.cms.gov. (Secure Access required)
For Patching and Gold Image release schedule please view :Patching and Gold Image Release Calendar - 2025
6/21/2025 - Splunk MAG OS Migration
Summary:
The CMS Hybrid Cloud Splunk team will be performing a migration of Splunk MAG Cloud servers from RHEL-7 TO AL-2023.
Actions we are taking:
- Updating DNS
- Copying Data
- Verify new environment
When is this happening?
Start Time: Saturday, 6/21/2025 at 8:00 a.m. ET
End Time: Sunday, 6/22/2025 at 11:30 p.m. ET
Who will be impacted?
MITG MSI, EMM.
What is the impact?
Migrating the environment will have a short impact on service availability of the MAG environment due to the cutover. Some users will be impacted and will need to rerun queries or refresh dashboards.
6/21/2025 - Migrate Splunk Cluster Manager in AWS Commercial from RHEL 7 to AL2023
Summary:
The CMS Hybrid Cloud Splunk team will be performing a migration of Splunk Cluster Manager in AWS Commercial from RHEL-7 TO AL-2023.
Actions we are taking:
- Copying Splunk Configs
- Update Cluster Manager IP on all dependent servers
- Enable new Cluster Manager Server
- Verify change
When is this happening?
Start Time: Saturday, 6/21/2025 at 12:00 p.m. ET
End Time: Saturday, 6/21/2025 at 11:00 p.m. ET
Who will be impacted?
MITG MSI, EMM, XOC, CCIC
What is the impact?
During the change window there can be latency with Splunk searches and dashboards rendering slowly.
6/21/2025 - DevOps Services Maintenance
Summary:
The CMS Hybrid Cloud team will be performing maintenance updates on its DevOps tools.
Actions we are taking:
- Update Gold Image AMIs for CloudBees and Jfrog
- Upgrade application versions for CloudBees Jenkins CI and managed controller
- Upgrade Jfrog application versions
- Migrate Xray DBsync to V3
When is this happening?
Start time: Saturday, 6/21/2025 at 09:00 p.m. ET
End time: Sunday, 6/22/2025 at 1:00 a.m. ET
Who will be impacted?
All AWS Commercial and GovCloud customers of CloudBees, JFrog.
What is the impact?
Customers should expect a short downtime for each service as instances are restarted within the maintenance window.
6/22/2025 - Restart Production and Non-Prod HEC Servers
Summary:
The CMS Hybrid Cloud Splunk team will perform a rolling restart of the HEC Splunk Services. Splunk professional services identified some new token configuration that will need to be remediated to ensure the stability of the Splunk HEC Forwarders. They recommended that we restart the HEC Forwarders weekly until all the newly identified token configurations are corrected.
Actions we are taking:
- Restarting the Prod and Non-Prod HEC Forwarders
When is this happening?
Start Time: Sunday, 6/22/2025 at 12:00 p.m. ET
End Time: Sunday, 6/22/2025 at 3:00 p.m. ET
Who will be impacted?
MITG and MSI
What is the impact?
There is no expected impact. We have 45 prod HEC services and 18 Non-Prod and we are only restarting 5 at a time. The majority of load balanced HEC servers will be available as the restarts progress and they have sufficient capacity to handle all ingest streams.
6/25/2025 - Marketplace SSM patching - IMPL
Summary:
- Marketplace IMPL
- SSM Linux & Windows Vulnerability Patching
Actions we are taking:
As part of our normal patching, the CMS Hybrid Cloud team will apply the latest Windows and Linux patches on Wednesday, 6/25/2025 at 9:00 p.m. ET. The week's patches will impact the IMPL environment for the affected Marketplace applications noted below.
When is this happening?
Start Time: Wednesday, 6/25/2025 at 9:00 p.m. ET
End Time: Thursday, 6/26/2025 at 2:00 a.m. ET
Who will be impacted?
FFM_Opera, XES - CyberArk, OCEAN, VAMS, TWS, XES - XOC Tools, SERVIS, FFM_Shared_Services, FFM MLMS, XES - MSI Tech Lab, FFM_FM, FFM_TWS, FFM_PM, XES - Service Virtualization
DSRS, FFM, FFM DSH, FFM EDI, FFM EFT, FFM ESDCU, MCR, FLH, OC Base- FLH, OC Base PET
What is the impact?
Patches will be transmitted to the affected areas. For some customers, reboots may occur depending upon the tags applied.
6/25/2025 - Non-Marketplace SSM patching - PROD
Summary:
- Non-Marketplace PROD
- SSM Linux & Windows Vulnerability Patching
Actions we are taking:
As part of our normal patching, the CMS Hybrid Cloud team will apply the latest Windows and Linux patches on Wednesday, 6/25/2025 at 9:00 p.m. ET. The week's patches will impact the PROD environment for the affected Non-Marketplace applications noted below.
When is this happening?
Start Time: Wednesday, 6/25/2025 at 9:00 p.m. ET
End Time: Thursday, 6/26/2025 at 2:00 a.m. ET
Who will be impacted?
Reboot - CEDAR, FFSDCS, RASS, OC Base- eLDAP, SC CLIA, NTP LMS, Spott MACBIS, MDP, OC Base- WNMG, NEIL/HRES, OC Base- EWST, MacFin, eAPD Hi-C, OC Base- CMS Cloud Legacy, OC Base- DevSecOps SecDevOps, iServ, MDP, PECOS2.0, SEI, OC Base- PWSS, TRA, CMS ARTS, MCIM, RAD Analysis Tools, MCIM, Perm, CMS Cloud - CRE, CMS Cloud - Enterprise Agile Tools, CMS Cloud tamer, CMS Cloud - CARD, CMS Cloud - ECS Fargate, CMS Cloud - Direct Connect, CMS Cloud - Jfrog SonarCube, CMS Cloud - DNS Prod, CMS Cloud - SRE, CMS Cloud - Governance 2.0, MEOWx, CMS Cloud - CloudBees Jenkins, CMS Cloud - CET, CMS Cloud - DevSecOps, CMS Cloud - Utilities, CMS Cloud - Testrail, CMS Cloud - CircleCI, CMS Cloud - Sam GSS Security GovCloud, SWIFT, AWS HEIDI
No reboot - MEPBS, EACMS, MacPro, PS&R, RDS, OC Base- APIM GEO, 1115 PMDA, CMS Cloud - Governance 2.0, CMS Cloud - QuickDNS, CMS Cloud - CMSNet, CMS Cloud - CCG Web Content, CMS Cloud - Network Arch, CMS Cloud - VPC Automation, CMS Cloud - Security Team, CMS Cloud - CCG Web Content, CMS Cloud Temporal, CMS Cloud - Splunk, CMS Cloud - CET, AWS GSS Security GC, CMS Cloud - Splunk GovCloud Dev, occonfluence, ocjira, miniorange, ocsonarqube, MTF-PM, NDW,
What is the impact?
Patches will be transmitted to the affected areas. For some customers, reboots may occur depending upon the tags applied.
Need help? We are here to support you.
If you have any questions, don't hesitate to reach out to your assigned Hosting Coordinator. CMS IT Support can be reached via cloudsupport@cms.hhs.gov, or call (800) 562-1963, and is documented here at Support Page on cloud.cms.gov.
|