diff --git a/.gitignore b/.gitignore index 54ea20d..27cf303 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1 @@ -SOURCES/freeipa-4.10.0.tar.gz +SOURCES/freeipa-4.10.1.tar.gz diff --git a/.ipa.metadata b/.ipa.metadata index d02b700..8789124 100644 --- a/.ipa.metadata +++ b/.ipa.metadata @@ -1 +1 @@ -901ede9686abffef511c6477d90d5e6fd32d6fbc SOURCES/freeipa-4.10.0.tar.gz +6203cf7c2e003c35eb9ac40e4fd2954c6bea1856 SOURCES/freeipa-4.10.1.tar.gz diff --git a/README.debrand b/README.debrand deleted file mode 100644 index 01c46d2..0000000 --- a/README.debrand +++ /dev/null @@ -1,2 +0,0 @@ -Warning: This package was configured for automatic debranding, but the changes -failed to apply. diff --git a/SOURCES/0001-Only-calculate-LDAP-password-grace-when-the-password.patch b/SOURCES/0001-Only-calculate-LDAP-password-grace-when-the-password.patch deleted file mode 100644 index 528c6c1..0000000 --- a/SOURCES/0001-Only-calculate-LDAP-password-grace-when-the-password.patch +++ /dev/null @@ -1,56 +0,0 @@ -From 22d1392a8a0d2887c389dcd78be06104cff88d30 Mon Sep 17 00:00:00 2001 -From: Rob Crittenden -Date: Wed, 29 Jun 2022 13:25:55 +0000 -Subject: [PATCH] Only calculate LDAP password grace when the password is - expired - -The user's pwd expiration was retrieved but inadvertently was never -compared to current time. So any LDAP bind, including from the -IPA API, counted against the grace period. There is no need to go -through the graceperiod code for non-expired passwords. - -https://pagure.io/freeipa/issue/1539 - -Signed-off-by: Rob Crittenden -Reviewed-By: Florence Blanc-Renaud ---- - .../ipa-graceperiod/ipa_graceperiod.c | 12 +++++++++--- - 1 file changed, 9 insertions(+), 3 deletions(-) - -diff --git a/daemons/ipa-slapi-plugins/ipa-graceperiod/ipa_graceperiod.c b/daemons/ipa-slapi-plugins/ipa-graceperiod/ipa_graceperiod.c -index 0860b5c20fc86687f80ee6f2426e23c87123130f..a3f57cb4bd7a2a66d70fae98cca0f62a8f0c017f 100644 ---- a/daemons/ipa-slapi-plugins/ipa-graceperiod/ipa_graceperiod.c -+++ b/daemons/ipa-slapi-plugins/ipa-graceperiod/ipa_graceperiod.c -@@ -359,7 +359,8 @@ static int ipagraceperiod_preop(Slapi_PBlock *pb) - Slapi_ValueSet *values = NULL; - long grace_limit = 0; - int grace_user_time; -- char *pwd_expiration = NULL; -+ char *tmpstr = NULL; -+ time_t pwd_expiration; - int pwresponse_requested = 0; - Slapi_PBlock *pbtm = NULL; - Slapi_Mods *smods = NULL; -@@ -414,12 +415,17 @@ static int ipagraceperiod_preop(Slapi_PBlock *pb) - } - slapi_value_free(&objectclass); - -- pwd_expiration = slapi_entry_attr_get_charptr(target_entry, "krbPasswordExpiration"); -- if (pwd_expiration == NULL) { -+ tmpstr = slapi_entry_attr_get_charptr(target_entry, "krbPasswordExpiration"); -+ if (tmpstr == NULL) { - /* No expiration means nothing to do */ - LOG_TRACE("No krbPasswordExpiration for %s, nothing to do\n", dn); - goto done; - } -+ pwd_expiration = ipapwd_gentime_to_time_t(tmpstr); -+ if (pwd_expiration > time(NULL)) { -+ /* Not expired, nothing to see here */ -+ goto done; -+ } - - ldrc = ipagraceperiod_getpolicy(target_entry, &policy_entry, - &values, &actual_type_name, --- -2.36.1 - diff --git a/SOURCES/0001-updates-fix-memberManager-ACI-to-allow-managers-from.patch b/SOURCES/0001-updates-fix-memberManager-ACI-to-allow-managers-from.patch new file mode 100644 index 0000000..3c5dc68 --- /dev/null +++ b/SOURCES/0001-updates-fix-memberManager-ACI-to-allow-managers-from.patch @@ -0,0 +1,44 @@ +From 42be04fe4ff317efe599dcbc2637f94ecc6fa220 Mon Sep 17 00:00:00 2001 +From: Alexander Bokovoy +Date: Mon, 21 Nov 2022 16:12:46 +0200 +Subject: [PATCH] updates: fix memberManager ACI to allow managers from a + specified group + +The original implementation of the member manager added support for both +user and group managers but left out upgrade scenario. This means when +upgrading existing installation a manager whose rights defined by the +group membership would not be able to add group members until the ACI is +fixed. + +Remove old ACI and add a full one during upgrade step. + +Fixes: https://pagure.io/freeipa/issue/9286 +Signed-off-by: Alexander Bokovoy +Reviewed-By: Florence Blanc-Renaud +--- + install/updates/20-aci.update | 6 ++++-- + 1 file changed, 4 insertions(+), 2 deletions(-) + +diff --git a/install/updates/20-aci.update b/install/updates/20-aci.update +index a168bb9573a9fbb9ff15f0b19bb8ec75b48d82a9..4a7ba137c4711aa3f8b064fdd482ffee76c59949 100644 +--- a/install/updates/20-aci.update ++++ b/install/updates/20-aci.update +@@ -141,11 +141,13 @@ add:aci:(targetattr = "usercertificate")(version 3.0;acl "selfservice:Users can + + # Allow member managers to modify members of user groups + dn: cn=groups,cn=accounts,$SUFFIX +-add:aci: (targetattr = "member")(targetfilter = "(objectclass=ipaUserGroup)")(version 3.0; acl "Allow member managers to modify members of user groups"; allow (write) userattr = "memberManager#USERDN";) ++remove:aci: (targetattr = "member")(targetfilter = "(objectclass=ipaUserGroup)")(version 3.0; acl "Allow member managers to modify members of user groups"; allow (write) userattr = "memberManager#USERDN";) ++add:aci: (targetattr = "member")(targetfilter = "(objectclass=ipaUserGroup)")(version 3.0; acl "Allow member managers to modify members of user groups"; allow (write) userattr = "memberManager#USERDN" or userattr = "memberManager#GROUPDN";) + + # Allow member managers to modify members of host groups + dn: cn=hostgroups,cn=accounts,$SUFFIX +-add:aci: (targetattr = "member")(targetfilter = "(objectclass=ipaHostGroup)")(version 3.0; acl "Allow member managers to modify members of host groups"; allow (write) userattr = "memberManager#USERDN";) ++remove:aci: (targetattr = "member")(targetfilter = "(objectclass=ipaHostGroup)")(version 3.0; acl "Allow member managers to modify members of host groups"; allow (write) userattr = "memberManager#USERDN";) ++add:aci: (targetattr = "member")(targetfilter = "(objectclass=ipaHostGroup)")(version 3.0; acl "Allow member managers to modify members of host groups"; allow (write) userattr = "memberManager#USERDN" or userattr = "memberManager#GROUPDN";) + + # Hosts can add and delete their own services + dn: cn=services,cn=accounts,$SUFFIX +-- +2.38.1 + diff --git a/SOURCES/0002-Spec-file-ipa-client-depends-on-krb5-pkinit-openssl.patch b/SOURCES/0002-Spec-file-ipa-client-depends-on-krb5-pkinit-openssl.patch new file mode 100644 index 0000000..3d6e689 --- /dev/null +++ b/SOURCES/0002-Spec-file-ipa-client-depends-on-krb5-pkinit-openssl.patch @@ -0,0 +1,42 @@ +From 2d0a0cc40fb8674f30ba62980b1953cef840009e Mon Sep 17 00:00:00 2001 +From: Florence Blanc-Renaud +Date: Thu, 1 Dec 2022 13:58:58 +0100 +Subject: [PATCH] Spec file: ipa-client depends on krb5-pkinit-openssl + +Now that ipa-client-installs supports pkinit, the package +depends on krb5-pkinit-openssl. +Update the spec file, move the dependency from ipa-server +to ipa-client subpackage. + +Fixes: https://pagure.io/freeipa/issue/9290 + +Signed-off-by: Florence Blanc-Renaud +Reviewed-By: Alexander Bokovoy +--- + freeipa.spec.in | 3 ++- + 1 file changed, 2 insertions(+), 1 deletion(-) + +diff --git a/freeipa.spec.in b/freeipa.spec.in +index f09741d7ad6c09e52c4bd24fcc9300584f83a49d..7dcf2e66abe40e6bde3491268b9c012f7578a8b6 100755 +--- a/freeipa.spec.in ++++ b/freeipa.spec.in +@@ -449,7 +449,6 @@ Requires: nss-tools >= %{nss_version} + Requires(post): krb5-server >= %{krb5_version} + Requires(post): krb5-server >= %{krb5_base_version} + Requires: krb5-kdb-version = %{krb5_kdb_version} +-Requires: krb5-pkinit-openssl >= %{krb5_version} + Requires: cyrus-sasl-gssapi%{?_isa} + Requires: chrony + Requires: httpd >= %{httpd_version} +@@ -675,6 +674,8 @@ Requires: python3-sssdconfig >= %{sssd_version} + Requires: cyrus-sasl-gssapi%{?_isa} + Requires: chrony + Requires: krb5-workstation >= %{krb5_version} ++# support pkinit with client install ++Requires: krb5-pkinit-openssl >= %{krb5_version} + # authselect: sssd profile with-subid + %if 0%{?fedora} >= 36 + Requires: authselect >= 1.4.0 +-- +2.38.1 + diff --git a/SOURCES/0002-webui-Do-not-allow-empty-pagination-size.patch b/SOURCES/0002-webui-Do-not-allow-empty-pagination-size.patch deleted file mode 100644 index 15f0b8b..0000000 --- a/SOURCES/0002-webui-Do-not-allow-empty-pagination-size.patch +++ /dev/null @@ -1,67 +0,0 @@ -From 02d3fb8266d8199fd1ed983de6c57b269546df82 Mon Sep 17 00:00:00 2001 -From: Armando Neto -Date: Fri, 8 Jul 2022 15:56:31 -0300 -Subject: [PATCH] webui: Do not allow empty pagination size - -Pagination size must be required, the current validators are triggered after -form is submitted, thus the only way for check if data is not empty is by making -the field required. - -Fixes: https://pagure.io/freeipa/issue/9192 - -Signed-off-by: Armando Neto -Reviewed-By: Florence Blanc-Renaud ---- - .../ui/src/freeipa/Application_controller.js | 1 + - ipatests/test_webui/test_misc_cases.py | 19 +++++++++++++++++++ - 2 files changed, 20 insertions(+) - -diff --git a/install/ui/src/freeipa/Application_controller.js b/install/ui/src/freeipa/Application_controller.js -index 46aabc9c4dd47aa3874cb3ddf27da048607b7516..140ee8fe0d7adc274396248aae0be2f4559db27a 100644 ---- a/install/ui/src/freeipa/Application_controller.js -+++ b/install/ui/src/freeipa/Application_controller.js -@@ -318,6 +318,7 @@ define([ - $type: 'text', - name: 'pagination_size', - label: '@i18n:customization.table_pagination', -+ required: true, - validators: ['positive_integer'] - } - ] -diff --git a/ipatests/test_webui/test_misc_cases.py b/ipatests/test_webui/test_misc_cases.py -index 5f7ffb54ee33e9b453d6b987b7bf84d6f4311ebd..aca9e1a99e1e2cf60790fe8c33a65430e0d535e2 100644 ---- a/ipatests/test_webui/test_misc_cases.py -+++ b/ipatests/test_webui/test_misc_cases.py -@@ -11,6 +11,11 @@ from ipatests.test_webui.ui_driver import screenshot - import pytest - import re - -+try: -+ from selenium.webdriver.common.by import By -+except ImportError: -+ pass -+ - - @pytest.mark.tier1 - class TestMiscCases(UI_driver): -@@ -26,3 +31,17 @@ class TestMiscCases(UI_driver): - ver_re = re.compile('version: .*') - assert re.search(ver_re, about_text), 'Version not found' - self.dialog_button_click('ok') -+ -+ @screenshot -+ def test_customization_pagination_input_required(self): -+ """Test if 'pagination size' is required when submitting the form.""" -+ self.init_app() -+ -+ self.profile_menu_action('configuration') -+ self.fill_input('pagination_size', '') -+ self.dialog_button_click('save') -+ -+ pagination_size_elem = self.find( -+ ".widget[name='pagination_size']", By.CSS_SELECTOR) -+ -+ self.assert_field_validation_required(parent=pagination_size_elem) --- -2.36.1 - diff --git a/SOURCES/0003-ipatests-add-nightly-definitions-for-ipa-4-10-branch.patch b/SOURCES/0003-ipatests-add-nightly-definitions-for-ipa-4-10-branch.patch deleted file mode 100644 index b6a7fc1..0000000 --- a/SOURCES/0003-ipatests-add-nightly-definitions-for-ipa-4-10-branch.patch +++ /dev/null @@ -1,15825 +0,0 @@ -From 6c6a43c9090b5f61726512182a36958cbdafc9a4 Mon Sep 17 00:00:00 2001 -From: Florence Blanc-Renaud -Date: Mon, 4 Jul 2022 18:16:21 +0200 -Subject: [PATCH] ipatests: add nightly definitions for ipa-4-10 branch - -Reviewed-By: Rob Crittenden ---- - ipatests/prci_definitions/gating.yaml | 192 +- - ...test.yaml => nightly_ipa-4-10_latest.yaml} | 1166 ++++----- - ...l => nightly_ipa-4-10_latest_selinux.yaml} | 1168 ++++----- - ...de.yaml => nightly_ipa-4-10_previous.yaml} | 1355 +++++----- - .../nightly_latest_389ds.yaml | 658 ----- - .../prci_definitions/nightly_latest_pki.yaml | 1042 -------- - .../nightly_latest_testing.yaml | 2114 --------------- - .../nightly_latest_testing_selinux.yaml | 2259 ----------------- - .../prci_definitions/nightly_previous.yaml | 1823 ------------- - ipatests/prci_definitions/temp_commit.yaml | 16 +- - 10 files changed, 1876 insertions(+), 9917 deletions(-) - rename ipatests/prci_definitions/{nightly_latest.yaml => nightly_ipa-4-10_latest.yaml} (51%) - rename ipatests/prci_definitions/{nightly_latest_selinux.yaml => nightly_ipa-4-10_latest_selinux.yaml} (54%) - rename ipatests/prci_definitions/{nightly_rawhide.yaml => nightly_ipa-4-10_previous.yaml} (50%) - delete mode 100644 ipatests/prci_definitions/nightly_latest_389ds.yaml - delete mode 100644 ipatests/prci_definitions/nightly_latest_pki.yaml - delete mode 100644 ipatests/prci_definitions/nightly_latest_testing.yaml - delete mode 100644 ipatests/prci_definitions/nightly_latest_testing_selinux.yaml - delete mode 100644 ipatests/prci_definitions/nightly_previous.yaml - -diff --git a/ipatests/prci_definitions/gating.yaml b/ipatests/prci_definitions/gating.yaml -index e0ca590809448c435588009122566058cde7bef7..4083c650a17ce76bdefa243f1a7c5924039ff0bb 100644 ---- a/ipatests/prci_definitions/gating.yaml -+++ b/ipatests/prci_definitions/gating.yaml -@@ -21,7 +21,7 @@ topologies: - memory: 2400 - - jobs: -- fedora-latest/build: -+ fedora-latest-ipa-4-10/build: - requires: [] - priority: 150 - job: -@@ -29,284 +29,284 @@ jobs: - args: - git_repo: '{git_repo}' - git_refspec: '{git_refspec}' -- template: &ci-master-latest -- name: freeipa/ci-master-f36 -- version: 0.0.7 -+ template: &ci-ipa-4-10-latest -+ name: freeipa/ci-ipa-4-10-f36 -+ version: 0.0.1 - timeout: 1800 - topology: *build - -- fedora-latest/test_installation_TestInstallMaster: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallMaster: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 100 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallMaster -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/simple_replication: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/simple_replication: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 100 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_simple_replication.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_caless_TestServerReplicaCALessToCAFull: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_caless_TestServerReplicaCALessToCAFull: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 100 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_caless.py::TestServerReplicaCALessToCAFull -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_external_ca_TestExternalCA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_external_ca_TestExternalCA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 100 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_external_ca.py::TestExternalCA test_integration/test_external_ca.py::TestExternalCAConstraints -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 4800 - topology: *master_1repl_1client - -- fedora-latest/test_external_ca_TestSelfExternalSelf: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_external_ca_TestSelfExternalSelf: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 100 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_external_ca.py::TestSelfExternalSelf test_integration/test_external_ca.py::TestExternalCAInstall -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/external_ca_templates: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/external_ca_templates: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 100 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_external_ca.py::TestExternalCAProfileScenarios -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_topologies: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_topologies: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 100 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_topologies.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_sudo: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_sudo: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 100 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_sudo.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 4800 - topology: *master_1repl_1client - -- fedora-latest/test_commands: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_commands: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 100 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_commands.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl_1client - -- fedora-latest/test_kerberos_flags: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_kerberos_flags: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 100 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_kerberos_flags.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl_1client - -- fedora-latest/test_forced_client_enrolment: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_forced_client_enrolment: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 100 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_forced_client_reenrollment.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 4800 - topology: *master_1repl_1client - -- fedora-latest/test_advise: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_advise: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 100 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_advise.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl_1client - -- fedora-latest/test_testconfig: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_testconfig: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 100 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_testconfig.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_service_permissions: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_service_permissions: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 100 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_service_permissions.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_netgroup: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_netgroup: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 100 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_netgroup.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_authconfig: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_authconfig: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 100 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_authselect.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 4800 - topology: *master_1repl_1client - -- fedora-latest/test_replica_promotion_TestSubCAkeyReplication: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replica_promotion_TestSubCAkeyReplication: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 100 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_replica_promotion.py::TestSubCAkeyReplication -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_dnssec_TestInstallDNSSECFirst: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_dnssec_TestInstallDNSSECFirst: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 100 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_dnssec.py::TestInstallDNSSECFirst -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_membermanager: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_membermanager: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 100 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_membermanager.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 1800 - topology: *master_1repl - -- fedora-latest/test_adtrust_install: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_adtrust_install: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 100 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_adtrust_install.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_cert: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_cert: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 100 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_cert.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl_1client - -- fedora-latest/test_upgrade: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_upgrade: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 100 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_upgrade.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_subids: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_subids: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 100 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_subids.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl -diff --git a/ipatests/prci_definitions/nightly_latest.yaml b/ipatests/prci_definitions/nightly_ipa-4-10_latest.yaml -similarity index 51% -rename from ipatests/prci_definitions/nightly_latest.yaml -rename to ipatests/prci_definitions/nightly_ipa-4-10_latest.yaml -index 86be5f30468d049b9a214432e3258060cea6d98a..f5c9faa9333c6e4dfd7764ebbc5ef25679e1b10f 100644 ---- a/ipatests/prci_definitions/nightly_latest.yaml -+++ b/ipatests/prci_definitions/nightly_ipa-4-10_latest.yaml -@@ -41,7 +41,7 @@ topologies: - memory: 14500 - - jobs: -- fedora-latest/build: -+ fedora-latest-ipa-4-10/build: - requires: [] - priority: 100 - job: -@@ -49,1775 +49,1775 @@ jobs: - args: - git_repo: '{git_repo}' - git_refspec: '{git_refspec}' -- template: &ci-master-latest -+ template: &ci-ipa-4-10-latest - name: freeipa/ci-master-f36 -- version: 0.0.7 -+ version: 0.0.1 - timeout: 1800 - topology: *build - -- fedora-latest/simple_replication: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/simple_replication: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_simple_replication.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_external_ca_TestExternalCA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_external_ca_TestExternalCA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_external_ca.py::TestExternalCA test_integration/test_external_ca.py::TestExternalCAConstraints -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 4800 - topology: *master_1repl_1client - -- fedora-latest/test_external_ca_TestSelfExternalSelf: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_external_ca_TestSelfExternalSelf: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_external_ca.py::TestSelfExternalSelf test_integration/test_external_ca.py::TestExternalCAInstall -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/external_ca_templates: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/external_ca_templates: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_external_ca.py::TestExternalCAProfileScenarios -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_topologies: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_topologies: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_topologies.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_sudo: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_sudo: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_sudo.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 4800 - topology: *master_1repl_1client - -- fedora-latest/test_commands: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_commands: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_commands.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl_1client - -- fedora-latest/test_kerberos_flags: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_kerberos_flags: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_kerberos_flags.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl_1client - -- fedora-latest/test_http_kdc_proxy: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_http_kdc_proxy: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunADTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_http_kdc_proxy.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *ad_master_2client - -- fedora-latest/test_fips: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_fips: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_fips.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl_1client - -- fedora-latest/test_forced_client_enrolment: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_forced_client_enrolment: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_forced_client_reenrollment.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 4800 - topology: *master_1repl_1client - -- fedora-latest/test_advise: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_advise: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_advise.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl_1client - -- fedora-latest/test_testconfig: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_testconfig: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_testconfig.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_service_permissions: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_service_permissions: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_service_permissions.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_netgroup: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_netgroup: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_netgroup.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_vault: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_vault: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_vault.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 6300 - topology: *master_1repl - -- fedora-latest/test_authconfig: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_authconfig: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_authselect.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 4800 - topology: *master_1repl_1client - -- fedora-latest/test_smb: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_smb: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunADTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_smb.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *ad_master_2client - -- fedora-latest/test_server_del: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_server_del: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_server_del.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_2repl_1client - -- fedora-latest/test_installation_TestInstallWithCA1: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA1: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallWithCA1 -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_installation_TestInstallWithCA2: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA2: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallWithCA2 -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_installation_TestInstallCA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallCA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallCA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_2repl_1client - -- fedora-latest/test_installation_TestInstallWithCA_KRA1: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_KRA1: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA1 -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_installation_TestInstallWithCA_KRA2: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_KRA2: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA2 -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_installation_TestInstallWithCA_DNS1: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_DNS1: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS1 -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_installation_TestInstallWithCA_DNS2: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_DNS2: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS2 -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_installation_TestInstallWithCA_DNS3: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_DNS3: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS3 -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_installation_TestInstallWithCA_DNS4: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_DNS4: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS4 -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_installation_TestInstallWithCA_KRA_DNS1: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_KRA_DNS1: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS1 -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_installation_TestInstallWithCA_KRA_DNS2: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_KRA_DNS2: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS2 -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_installation_TestInstallMaster: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallMaster: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallMaster -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_1repl - -- fedora-latest/test_installation_TestInstallMasterKRA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallMasterKRA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallMasterKRA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_1repl - -- fedora-latest/test_installation_TestInstallMasterDNS: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallMasterDNS: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallMasterDNS -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_1repl - -- fedora-latest/test_installation_TestInstallMasterDNSRepeatedly: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallMasterDNSRepeatedly: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallMasterDNSRepeatedly -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_1repl - -- fedora-latest/test_installation_TestInstallMasterReservedIPasForwarder: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallMasterReservedIPasForwarder: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallMasterReservedIPasForwarder -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_1repl - -- fedora-latest/test_installation_TestInstallMasterReplica: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallMasterReplica: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallMasterReplica -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_1repl - -- fedora-latest/test_installation_TestInstallReplicaAgainstSpecificServer: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallReplicaAgainstSpecificServer: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallReplicaAgainstSpecificServer -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_2repl_1client - -- fedora-latest/test_installation_TestADTrustInstall: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestADTrustInstall: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestADTrustInstall -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_2repl_1client - -- fedora-latest/test_installation_TestADTrustInstallWithDNS_KRA_ADTrust: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestADTrustInstallWithDNS_KRA_ADTrust: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestADTrustInstallWithDNS_KRA_ADTrust -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_2repl_1client - -- fedora-latest/test_installation_TestKRAinstallAfterCertRenew: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestKRAinstallAfterCertRenew: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestKRAinstallAfterCertRenew -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_1repl - -- fedora-latest/test_installation_TestInstallWithoutSudo: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallWithoutSudo: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallWithoutSudo -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 4800 - topology: *master_1repl_1client - -- fedora-latest/test_installation_TestInstallWithoutNamed: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallWithoutNamed: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallWithoutNamed -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 4800 - topology: *master_1repl - -- fedora-latest/test_installation_TestInstallwithSHA384withRSA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallwithSHA384withRSA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallwithSHA384withRSA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_idviews: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_idviews: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunADTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_idviews.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *ad_master_2client - -- fedora-latest/test_caless_TestServerInstall: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_caless_TestServerInstall: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_caless.py::TestServerInstall -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 12000 - topology: *master_1repl - -- fedora-latest/test_caless_TestReplicaInstall: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_caless_TestReplicaInstall: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_caless.py::TestReplicaInstall -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_caless_TestClientInstall: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_caless_TestClientInstall: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_caless.py::TestClientInstall -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - # actually master_1client - topology: *master_1repl_1client - -- fedora-latest/test_caless_TestIPACommands: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_caless_TestIPACommands: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_caless.py::TestIPACommands -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl - -- fedora-latest/test_caless_TestCertInstall: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_caless_TestCertInstall: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_caless.py::TestCertInstall -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl - -- fedora-latest/test_caless_TestPKINIT: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_caless_TestPKINIT: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_caless.py::TestPKINIT -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl - -- fedora-latest/test_caless_TestServerReplicaCALessToCAFull: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_caless_TestServerReplicaCALessToCAFull: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_caless.py::TestServerReplicaCALessToCAFull -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl - -- fedora-latest/test_caless_TestReplicaCALessToCAFull: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_caless_TestReplicaCALessToCAFull: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_caless.py::TestReplicaCALessToCAFull -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl - -- fedora-latest/test_caless_TestServerCALessToExternalCA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_caless_TestServerCALessToExternalCA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_caless.py::TestServerCALessToExternalCA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl - -- fedora-latest/test_backup_and_restore_TestUserRootFilesOwnershipPermission: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestUserRootFilesOwnershipPermission: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestUserRootFilesOwnershipPermission -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_backup_and_restore_TestBackupAndRestore: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestore: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestore -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_backup_and_restore_TestBackupAndRestoreWithDNSSEC: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreWithDNSSEC: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNSSEC -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_backup_and_restore_TestBackupReinstallRestoreWithDNSSEC: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupReinstallRestoreWithDNSSEC: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNSSEC -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_backup_and_restore_TestBackupAndRestoreWithDNS: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreWithDNS: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNS -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_backup_and_restore_TestBackupReinstallRestoreWithDNS: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupReinstallRestoreWithDNS: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNS -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_backup_and_restore_TestBackupAndRestoreWithKRA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreWithKRA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithKRA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_backup_and_restore_TestBackupReinstallRestoreWithKRA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupReinstallRestoreWithKRA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithKRA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_backup_and_restore_TestBackupAndRestoreWithReplica: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreWithReplica: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithReplica -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_2repl_1client - -- fedora-latest/test_backup_and_restore_TestBackupAndRestoreDMPassword: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreDMPassword: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreDMPassword -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_backup_and_restore_TestReplicaInstallAfterRestore: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestReplicaInstallAfterRestore: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestReplicaInstallAfterRestore -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_2repl_1client - -- fedora-latest/test_backup_and_restore_TestBackupRoles: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupRoles: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestBackupRoles -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_dnssec: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_dnssec: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_dnssec.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_2repl_1client - -- fedora-latest/test_replica_promotion_TestReplicaPromotionLevel1: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replica_promotion_TestReplicaPromotionLevel1: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_replica_promotion.py::TestReplicaPromotionLevel1 -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_replica_promotion_TestUnprivilegedUserPermissions: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replica_promotion_TestUnprivilegedUserPermissions: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_replica_promotion.py::TestUnprivilegedUserPermissions -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_replica_promotion_TestProhibitReplicaUninstallation: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replica_promotion_TestProhibitReplicaUninstallation: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_replica_promotion.py::TestProhibitReplicaUninstallation -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_2repl_1client - -- fedora-latest/test_replica_promotion_TestWrongClientDomain: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replica_promotion_TestWrongClientDomain: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_replica_promotion.py::TestWrongClientDomain -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_replica_promotion_TestRenewalMaster: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replica_promotion_TestRenewalMaster: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_replica_promotion.py::TestRenewalMaster -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_replica_promotion_TestReplicaInstallWithExistingEntry: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replica_promotion_TestReplicaInstallWithExistingEntry: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallWithExistingEntry -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_replica_promotion_TestSubCAkeyReplication: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replica_promotion_TestSubCAkeyReplication: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_replica_promotion.py::TestSubCAkeyReplication -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_replica_promotion_TestReplicaInstallCustodia: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replica_promotion_TestReplicaInstallCustodia: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallCustodia -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_2repl_1client - -- fedora-latest/test_replica_promotion_TestReplicaInForwardZone: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replica_promotion_TestReplicaInForwardZone: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_replica_promotion.py::TestReplicaInForwardZone -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_replica_promotion_TestHiddenReplicaPromotion: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replica_promotion_TestHiddenReplicaPromotion: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaPromotion -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_2repl_1client - -- fedora-latest/test_replica_promotion_TestHiddenReplicaKRA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replica_promotion_TestHiddenReplicaKRA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaKRA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_2repl_1client - -- fedora-latest/test_upgrade: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_upgrade: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_upgrade.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_topology_TestCASpecificRUVs: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_topology_TestCASpecificRUVs: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_topology.py::TestCASpecificRUVs -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_3repl_1client - -- fedora-latest/test_topology_TestTopologyOptions: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_topology_TestTopologyOptions: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_topology.py::TestTopologyOptions -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_3repl_1client - -- fedora-latest/test_replication_layouts_TestLineTopologyWithoutCA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replication_layouts_TestLineTopologyWithoutCA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithoutCA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_3repl_1client - -- fedora-latest/test_replication_layouts_TestLineTopologyWithCA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replication_layouts_TestLineTopologyWithCA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_replication_layouts_TestLineTopologyWithCAKRA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replication_layouts_TestLineTopologyWithCAKRA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCAKRA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_replication_layouts.py_TestStarTopologyWithoutCA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replication_layouts.py_TestStarTopologyWithoutCA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithoutCA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_3repl_1client - -- fedora-latest/test_replication_layouts_TestStarTopologyWithCA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replication_layouts_TestStarTopologyWithCA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_3repl_1client - -- fedora-latest/test_replication_layouts_TestStarTopologyWithCAKRA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replication_layouts_TestStarTopologyWithCAKRA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCAKRA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_replication_layouts_TestCompleteTopologyWithoutCA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replication_layouts_TestCompleteTopologyWithoutCA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithoutCA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_3repl_1client - -- fedora-latest/test_replication_layouts_TestCompleteTopologyWithCA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replication_layouts_TestCompleteTopologyWithCA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_3repl_1client - -- fedora-latest/test_replication_layouts_TestCompleteTopologyWithCAKRA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replication_layouts_TestCompleteTopologyWithCAKRA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCAKRA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_3repl_1client - -- fedora-latest/test_client_uninstallation: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_client_uninstallation: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_uninstallation.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl_1client - -- fedora-latest/test_installation_client: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_client: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation_client.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_3client - -- fedora-latest/test_user_permissions: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_user_permissions: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_user_permissions.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl_1client - -- fedora-latest/test_webui_cert: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_webui_cert: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_webui/test_cert.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 2400 - topology: *ipaserver - -- fedora-latest/test_webui_general: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_webui_general: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: >- - test_webui/test_loginscreen.py - test_webui/test_misc_cases.py - test_webui/test_navigation.py - test_webui/test_translation.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *ipaserver - -- fedora-latest/test_webui_host: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_webui_host: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_webui/test_host.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *ipaserver - -- fedora-latest/test_webui_host_net_groups: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_webui_host_net_groups: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: >- - test_webui/test_hostgroup.py - test_webui/test_netgroup.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *ipaserver - -- fedora-latest/test_webui_identity: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_webui_identity: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: >- - test_webui/test_automember.py - test_webui/test_idviews.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *ipaserver - -- fedora-latest/test_webui_network: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_webui_network: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: >- - test_webui/test_automount.py - test_webui/test_dns.py - test_webui/test_vault.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *ipaserver - -- fedora-latest/test_webui_policy: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_webui_policy: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: >- - test_webui/test_hbac.py - test_webui/test_krbtpolicy.py - test_webui/test_pwpolicy.py - test_webui/test_selinuxusermap.py - test_webui/test_sudo.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *ipaserver - -- fedora-latest/test_webui_rbac: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_webui_rbac: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: >- - test_webui/test_delegation.py - test_webui/test_rbac.py - test_webui/test_selfservice.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *ipaserver - -- fedora-latest/test_webui_server: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_webui_server: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: >- - test_webui/test_config.py - test_webui/test_range.py - test_webui/test_realmdomains.py - test_webui/test_topology.py - test_webui/test_trust.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *ipaserver - -- fedora-latest/test_webui_service: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_webui_service: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_webui/test_service.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 2400 - topology: *ipaserver - -- fedora-latest/test_webui_users: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_webui_users: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: >- - test_webui/test_group.py - test_webui/test_user.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 4800 - topology: *ipaserver - -- fedora-latest/test_webui_subid: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_webui_subid: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_webui/test_subid.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 2400 - topology: *ipaserver - -- fedora-latest/customized_ds_config_install: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/customized_ds_config_install: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_customized_ds_config_install.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/dns_locations: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/dns_locations: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_dns_locations.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_2repl_1client - -- fedora-latest/external_ca_TestExternalCAdirsrvStop: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/external_ca_TestExternalCAdirsrvStop: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_external_ca.py::TestExternalCAdirsrvStop -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/external_ca_TestExternalCAInvalidCert: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/external_ca_TestExternalCAInvalidCert: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_external_ca.py::TestExternalCAInvalidCert test_integration/test_external_ca.py::TestExternalCAInvalidIntermediate -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/external_ca_TestMultipleExternalCA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/external_ca_TestMultipleExternalCA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_external_ca.py::TestMultipleExternalCA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_ipahealthcheck: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_ipahealthcheck: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheck -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl_1client - -- fedora-latest/test_ipahealthcheck_nodns_extca_file: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_ipahealthcheck_nodns_extca_file: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithoutDNS test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithExternalCA test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFileCheck -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl - -- fedora-latest/test_ipahealthcheck_cli_fsspace: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_ipahealthcheck_cli_fsspace: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCLI test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFilesystemSpace -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_ipahealthcheck_adtrust: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_ipahealthcheck_adtrust: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunADTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithADtrust -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 4800 - topology: *adroot_adchild_adtree_master_1client - -- fedora-latest/test_ntp_options: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_ntp_options: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_ntp_options.py::TestNTPoptions -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_1repl_1client - -- fedora-latest/test_otp: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_otp: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_otp.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_pkinit_manage: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_pkinit_manage: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_pkinit_manage.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_pki_config_override: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_pki_config_override: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_pki_config_override.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - --# fedora-latest/nfs: --# requires: [fedora-latest/build] -+# fedora-latest-ipa-4-10/nfs: -+# requires: [fedora-latest-ipa-4-10/build] - # priority: 50 - # job: - # class: RunPytest - # args: --# build_url: '{fedora-latest/build_url}' -+# build_url: '{fedora-latest-ipa-4-10/build_url}' - # test_suite: test_integration/test_nfs.py::TestNFS --# template: *ci-master-latest -+# template: *ci-ipa-4-10-latest - # timeout: 9000 - # topology: *master_3client - -- fedora-latest/nfs_nsswitch_restore: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/nfs_nsswitch_restore: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_nfs.py::TestIpaClientAutomountFileRestore -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_3client - -- fedora-latest/mask: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/mask: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestMaskInstall -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/hostname_validator: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/hostname_validator: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestHostnameValidator -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/automember: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/automember: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_automember.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_crlgen_manage: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_crlgen_manage: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_crlgen_manage.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_integration_TestIPANotConfigured: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_integration_TestIPANotConfigured: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_cli_ipa_not_configured.py::TestIPANotConfigured -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_1repl - -- fedora-latest/test_sssd: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_sssd: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunADTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_sssd.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *adroot_adchild_adtree_master_1client - -- fedora-latest/test_ca_custom_sdn: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_ca_custom_sdn: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_ca_custom_sdn.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_membermanager: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_membermanager: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_membermanager.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 1800 - topology: *master_1repl - -- fedora-latest/krbtpolicy: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/krbtpolicy: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_krbtpolicy.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 4800 - topology: *master_1repl - -- fedora-latest/test_winsyncmigrate: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_winsyncmigrate: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunADTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_winsyncmigrate.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 4800 - topology: *ad_master - -- fedora-latest/test_trust: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_trust: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunADTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_trust.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10000 - topology: *adroot_adchild_adtree_master_1client - -- fedora-latest/test_backup_and_restore_TestBackupAndRestoreTrust: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreTrust: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreTrust -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_adtrust_install: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_adtrust_install: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_adtrust_install.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_cert: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_cert: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_cert.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl_1client - -- fedora-latest/test_epn: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_epn: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_epn.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_3client - -- fedora-latest/test_acme: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_acme: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_acme.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl_1client - -- fedora-latest/test_dns: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_dns: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_dns.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_pwpolicy: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_pwpolicy: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_pwpolicy.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_cert_fix: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_cert_fix: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_ipa_cert_fix.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_1repl - -- fedora-latest/test_subids: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_subids: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_subids.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_custom_plugins: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_custom_plugins: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_custom_plugins.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_external_idp: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_external_idp: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_idp.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5000 - topology: *master_2repl_1client - -- fedora-latest/test_random_serial_numbers_TestInstallWithCA_DNS1_RSN: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_random_serial_numbers_TestInstallWithCA_DNS1_RSN: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_DNS1_RSN -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_random_serial_numbers_TestInstallWithCA_KRA1_RSN: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_random_serial_numbers_TestInstallWithCA_KRA1_RSN: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_KRA1_RSN -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_random_serial_numbers_test_commands_RSN: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_random_serial_numbers_test_commands_RSN: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_random_serial_numbers.py::TestIPACommand_RSN::test_certificate_out_write_to_file -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl_1client - -- fedora-latest/test_caless_TestServerCALessToExternalCA_RSN: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_caless_TestServerCALessToExternalCA_RSN: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_random_serial_numbers.py::TestServerCALessToExternalCA_RSN -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl -diff --git a/ipatests/prci_definitions/nightly_latest_selinux.yaml b/ipatests/prci_definitions/nightly_ipa-4-10_latest_selinux.yaml -similarity index 54% -rename from ipatests/prci_definitions/nightly_latest_selinux.yaml -rename to ipatests/prci_definitions/nightly_ipa-4-10_latest_selinux.yaml -index cef8f5ef0cc350d2597fe46bdb45d8fd50211a10..f22cc08384b3d50e49278d38e73bf93cd7804e80 100644 ---- a/ipatests/prci_definitions/nightly_latest_selinux.yaml -+++ b/ipatests/prci_definitions/nightly_ipa-4-10_latest_selinux.yaml -@@ -41,7 +41,7 @@ topologies: - memory: 14500 - - jobs: -- fedora-latest/build: -+ fedora-latest-ipa-4-10/build: - requires: [] - priority: 100 - job: -@@ -49,1305 +49,1305 @@ jobs: - args: - git_repo: '{git_repo}' - git_refspec: '{git_refspec}' -- template: &ci-master-latest -- name: freeipa/ci-master-f36 -- version: 0.0.7 -+ template: &ci-ipa-4-10-latest -+ name: freeipa/ci-ipa-4-10-f36 -+ version: 0.0.1 - timeout: 1800 - topology: *build - -- fedora-latest/simple_replication: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/simple_replication: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_simple_replication.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_external_ca_TestExternalCA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_external_ca_TestExternalCA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_external_ca.py::TestExternalCA test_integration/test_external_ca.py::TestExternalCAConstraints -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 4800 - topology: *master_1repl_1client - -- fedora-latest/test_external_ca_TestSelfExternalSelf: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_external_ca_TestSelfExternalSelf: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_external_ca.py::TestSelfExternalSelf test_integration/test_external_ca.py::TestExternalCAInstall -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/external_ca_templates: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/external_ca_templates: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_external_ca.py::TestExternalCAProfileScenarios -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_topologies: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_topologies: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_topologies.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_sudo: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_sudo: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_sudo.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 4800 - topology: *master_1repl_1client - -- fedora-latest/test_commands: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_commands: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_commands.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl_1client - -- fedora-latest/test_kerberos_flags: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_kerberos_flags: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_kerberos_flags.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl_1client - -- fedora-latest/test_http_kdc_proxy: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_http_kdc_proxy: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunADTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_http_kdc_proxy.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *ad_master_2client - -- fedora-latest/test_fips: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_fips: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_fips.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl_1client - -- fedora-latest/test_forced_client_enrolment: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_forced_client_enrolment: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_forced_client_reenrollment.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 4800 - topology: *master_1repl_1client - -- fedora-latest/test_advise: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_advise: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_advise.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl_1client - -- fedora-latest/test_testconfig: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_testconfig: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_testconfig.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_service_permissions: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_service_permissions: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_service_permissions.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_netgroup: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_netgroup: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_netgroup.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_vault: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_vault: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_vault.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 6300 - topology: *master_1repl - -- fedora-latest/test_authconfig: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_authconfig: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_authselect.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 4800 - topology: *master_1repl_1client - -- fedora-latest/test_smb: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_smb: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunADTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_smb.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *ad_master_2client - -- fedora-latest/test_server_del: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_server_del: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_server_del.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_2repl_1client - -- fedora-latest/test_installation_TestInstallWithCA1: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA1: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestInstallWithCA1 -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_installation_TestInstallWithCA2: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA2: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestInstallWithCA2 -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_installation_TestInstallCA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallCA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestInstallCA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_2repl_1client - -- fedora-latest/test_installation_TestInstallWithCA_KRA1: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_KRA1: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA1 -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_installation_TestInstallWithCA_KRA2: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_KRA2: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA2 -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_installation_TestInstallWithCA_DNS1: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_DNS1: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS1 -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_installation_TestInstallWithCA_DNS2: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_DNS2: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS2 -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_installation_TestInstallWithCA_DNS3: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_DNS3: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS3 -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_installation_TestInstallWithCA_DNS4: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_DNS4: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS4 -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_installation_TestInstallWithCA_KRA_DNS1: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_KRA_DNS1: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS1 -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_installation_TestInstallWithCA_KRA_DNS2: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_KRA_DNS2: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS2 -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_installation_TestInstallMaster: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallMaster: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestInstallMaster -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_1repl - -- fedora-latest/test_installation_TestInstallMasterKRA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallMasterKRA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestInstallMasterKRA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_1repl - -- fedora-latest/test_installation_TestInstallMasterDNS: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallMasterDNS: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestInstallMasterDNS -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_1repl - -- fedora-latest/test_installation_TestInstallMasterDNSRepeatedly: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallMasterDNSRepeatedly: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestInstallMasterDNSRepeatedly -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_1repl - -- fedora-latest/test_installation_TestInstallMasterReservedIPasForwarder: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallMasterReservedIPasForwarder: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestInstallMasterReservedIPasForwarder -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_1repl - -- fedora-latest/test_installation_TestInstallMasterReplica: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallMasterReplica: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestInstallMasterReplica -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_1repl - -- fedora-latest/test_installation_TestInstallReplicaAgainstSpecificServer: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallReplicaAgainstSpecificServer: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestInstallReplicaAgainstSpecificServer -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_2repl_1client - -- fedora-latest/test_installation_TestADTrustInstall: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestADTrustInstall: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestADTrustInstall -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_2repl_1client - -- fedora-latest/test_installation_TestADTrustInstallWithDNS_KRA_ADTrust: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestADTrustInstallWithDNS_KRA_ADTrust: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestADTrustInstallWithDNS_KRA_ADTrust -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_2repl_1client - -- fedora-latest/test_installation_TestKRAinstallAfterCertRenew: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestKRAinstallAfterCertRenew: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestKRAinstallAfterCertRenew -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_1repl - -- fedora-latest/test_installation_TestInstallWithoutSudo: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallWithoutSudo: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestInstallWithoutSudo -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 4800 - topology: *master_1repl_1client - -- fedora-latest/test_installation_TestInstallWithoutNamed: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallWithoutNamed: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestInstallWithoutNamed -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 4800 - topology: *master_1repl - -- fedora-latest/test_installation_TestInstallwithSHA384withRSA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_TestInstallwithSHA384withRSA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestInstallwithSHA384withRSA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_idviews: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_idviews: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunADTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_idviews.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *ad_master_2client - -- fedora-latest/test_caless_TestServerInstall: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_caless_TestServerInstall: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_caless.py::TestServerInstall -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 12000 - topology: *master_1repl - -- fedora-latest/test_caless_TestReplicaInstall: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_caless_TestReplicaInstall: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_caless.py::TestReplicaInstall -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_caless_TestClientInstall: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_caless_TestClientInstall: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_caless.py::TestClientInstall -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - # actually master_1client - topology: *master_1repl_1client - -- fedora-latest/test_caless_TestIPACommands: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_caless_TestIPACommands: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_caless.py::TestIPACommands -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl - -- fedora-latest/test_caless_TestCertInstall: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_caless_TestCertInstall: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_caless.py::TestCertInstall -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl - -- fedora-latest/test_caless_TestPKINIT: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_caless_TestPKINIT: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_caless.py::TestPKINIT -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl - -- fedora-latest/test_caless_TestServerReplicaCALessToCAFull: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_caless_TestServerReplicaCALessToCAFull: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_caless.py::TestServerReplicaCALessToCAFull -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl - -- fedora-latest/test_caless_TestReplicaCALessToCAFull: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_caless_TestReplicaCALessToCAFull: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_caless.py::TestReplicaCALessToCAFull -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl - -- fedora-latest/test_caless_TestServerCALessToExternalCA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_caless_TestServerCALessToExternalCA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_caless.py::TestServerCALessToExternalCA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl - -- fedora-latest/test_backup_and_restore_TestUserRootFilesOwnershipPermission: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestUserRootFilesOwnershipPermission: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_backup_and_restore.py::TestUserRootFilesOwnershipPermission -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_backup_and_restore_TestBackupAndRestore: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestore: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestore -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_backup_and_restore_TestBackupAndRestoreWithDNSSEC: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreWithDNSSEC: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNSSEC -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_backup_and_restore_TestBackupReinstallRestoreWithDNSSEC: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupReinstallRestoreWithDNSSEC: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNSSEC -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_backup_and_restore_TestBackupAndRestoreWithDNS: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreWithDNS: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNS -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_backup_and_restore_TestBackupReinstallRestoreWithDNS: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupReinstallRestoreWithDNS: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNS -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_backup_and_restore_TestBackupAndRestoreWithKRA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreWithKRA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithKRA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_backup_and_restore_TestBackupReinstallRestoreWithKRA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupReinstallRestoreWithKRA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithKRA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_backup_and_restore_TestBackupAndRestoreWithReplica: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreWithReplica: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithReplica -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_2repl_1client - -- fedora-latest/test_backup_and_restore_TestBackupAndRestoreDMPassword: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreDMPassword: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreDMPassword -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_backup_and_restore_TestReplicaInstallAfterRestore: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestReplicaInstallAfterRestore: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_backup_and_restore.py::TestReplicaInstallAfterRestore -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_2repl_1client - -- fedora-latest/test_backup_and_restore_TestBackupRoles: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupRoles: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_backup_and_restore.py::TestBackupRoles -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_dnssec: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_dnssec: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_dnssec.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_2repl_1client - -- fedora-latest/test_replica_promotion_TestReplicaPromotionLevel1: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replica_promotion_TestReplicaPromotionLevel1: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_replica_promotion.py::TestReplicaPromotionLevel1 -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_replica_promotion_TestUnprivilegedUserPermissions: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replica_promotion_TestUnprivilegedUserPermissions: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_replica_promotion.py::TestUnprivilegedUserPermissions -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_replica_promotion_TestProhibitReplicaUninstallation: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replica_promotion_TestProhibitReplicaUninstallation: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_replica_promotion.py::TestProhibitReplicaUninstallation -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_2repl_1client - -- fedora-latest/test_replica_promotion_TestWrongClientDomain: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replica_promotion_TestWrongClientDomain: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_replica_promotion.py::TestWrongClientDomain -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_replica_promotion_TestRenewalMaster: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replica_promotion_TestRenewalMaster: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_replica_promotion.py::TestRenewalMaster -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_replica_promotion_TestReplicaInstallWithExistingEntry: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replica_promotion_TestReplicaInstallWithExistingEntry: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallWithExistingEntry -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_replica_promotion_TestSubCAkeyReplication: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replica_promotion_TestSubCAkeyReplication: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_replica_promotion.py::TestSubCAkeyReplication -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_replica_promotion_TestReplicaInstallCustodia: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replica_promotion_TestReplicaInstallCustodia: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallCustodia -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_2repl_1client - -- fedora-latest/test_replica_promotion_TestReplicaInForwardZone: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replica_promotion_TestReplicaInForwardZone: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_replica_promotion.py::TestReplicaInForwardZone -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_replica_promotion_TestHiddenReplicaPromotion: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replica_promotion_TestHiddenReplicaPromotion: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaPromotion -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_2repl_1client - -- fedora-latest/test_replica_promotion_TestHiddenReplicaKRA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replica_promotion_TestHiddenReplicaKRA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaKRA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_2repl_1client - -- fedora-latest/test_upgrade: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_upgrade: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_upgrade.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_topology_TestCASpecificRUVs: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_topology_TestCASpecificRUVs: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_topology.py::TestCASpecificRUVs -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_3repl_1client - -- fedora-latest/test_topology_TestTopologyOptions: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_topology_TestTopologyOptions: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_topology.py::TestTopologyOptions -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_3repl_1client - -- fedora-latest/test_replication_layouts_TestLineTopologyWithoutCA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replication_layouts_TestLineTopologyWithoutCA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithoutCA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_3repl_1client - -- fedora-latest/test_replication_layouts_TestLineTopologyWithCA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replication_layouts_TestLineTopologyWithCA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_replication_layouts_TestLineTopologyWithCAKRA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replication_layouts_TestLineTopologyWithCAKRA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCAKRA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_replication_layouts.py_TestStarTopologyWithoutCA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replication_layouts.py_TestStarTopologyWithoutCA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithoutCA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_3repl_1client - -- fedora-latest/test_replication_layouts_TestStarTopologyWithCA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replication_layouts_TestStarTopologyWithCA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_3repl_1client - -- fedora-latest/test_replication_layouts_TestStarTopologyWithCAKRA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replication_layouts_TestStarTopologyWithCAKRA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCAKRA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_replication_layouts_TestCompleteTopologyWithoutCA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replication_layouts_TestCompleteTopologyWithoutCA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithoutCA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_3repl_1client - -- fedora-latest/test_replication_layouts_TestCompleteTopologyWithCA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replication_layouts_TestCompleteTopologyWithCA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_3repl_1client - -- fedora-latest/test_replication_layouts_TestCompleteTopologyWithCAKRA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_replication_layouts_TestCompleteTopologyWithCAKRA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCAKRA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_3repl_1client - -- fedora-latest/test_client_uninstallation: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_client_uninstallation: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_uninstallation.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl_1client - -- fedora-latest/test_installation_client: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_installation_client: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation_client.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_3client - -- fedora-latest/test_user_permissions: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_user_permissions: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_user_permissions.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl_1client - -- fedora-latest/test_webui_cert: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_webui_cert: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_webui/test_cert.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 2400 - topology: *ipaserver - -- fedora-latest/test_webui_general: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_webui_general: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: >- - test_webui/test_loginscreen.py - test_webui/test_misc_cases.py - test_webui/test_navigation.py - test_webui/test_translation.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *ipaserver - -- fedora-latest/test_webui_host: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_webui_host: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_webui/test_host.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *ipaserver - -- fedora-latest/test_webui_host_net_groups: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_webui_host_net_groups: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: >- - test_webui/test_hostgroup.py - test_webui/test_netgroup.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *ipaserver - -- fedora-latest/test_webui_identity: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_webui_identity: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: >- - test_webui/test_automember.py - test_webui/test_idviews.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *ipaserver - -- fedora-latest/test_webui_network: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_webui_network: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: >- - test_webui/test_automount.py - test_webui/test_dns.py - test_webui/test_vault.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *ipaserver - -- fedora-latest/test_webui_policy: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_webui_policy: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: >- - test_webui/test_hbac.py -@@ -1355,33 +1355,33 @@ jobs: - test_webui/test_pwpolicy.py - test_webui/test_selinuxusermap.py - test_webui/test_sudo.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *ipaserver - -- fedora-latest/test_webui_rbac: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_webui_rbac: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: >- - test_webui/test_delegation.py - test_webui/test_rbac.py - test_webui/test_selfservice.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *ipaserver - -- fedora-latest/test_webui_server: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_webui_server: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: >- - test_webui/test_config.py -@@ -1389,580 +1389,580 @@ jobs: - test_webui/test_realmdomains.py - test_webui/test_topology.py - test_webui/test_trust.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *ipaserver - -- fedora-latest/test_webui_service: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_webui_service: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_webui/test_service.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 2400 - topology: *ipaserver - -- fedora-latest/test_webui_users: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_webui_users: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: >- - test_webui/test_group.py - test_webui/test_user.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 4800 - topology: *ipaserver - -- fedora-latest/test_webui_subid: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_webui_subid: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_webui/test_subid.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 2400 - topology: *ipaserver - -- fedora-latest/customized_ds_config_install: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/customized_ds_config_install: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_customized_ds_config_install.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/dns_locations: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/dns_locations: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_dns_locations.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_2repl_1client - -- fedora-latest/external_ca_TestExternalCAdirsrvStop: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/external_ca_TestExternalCAdirsrvStop: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_external_ca.py::TestExternalCAdirsrvStop -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/external_ca_TestExternalCAInvalidCert: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/external_ca_TestExternalCAInvalidCert: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_external_ca.py::TestExternalCAInvalidCert test_integration/test_external_ca.py::TestExternalCAInvalidIntermediate -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/external_ca_TestMultipleExternalCA: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/external_ca_TestMultipleExternalCA: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_external_ca.py::TestMultipleExternalCA -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_ipahealthcheck: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_ipahealthcheck: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheck -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl_1client - -- fedora-latest/test_ipahealthcheck_nodns_extca_file: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_ipahealthcheck_nodns_extca_file: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithoutDNS test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithExternalCA test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFileCheck -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl - -- fedora-latest/test_ipahealthcheck_cli_fsspace: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_ipahealthcheck_cli_fsspace: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCLI test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFilesystemSpace -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_ipahealthcheck_adtrust: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_ipahealthcheck_adtrust: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunADTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithADtrust -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 4800 - topology: *adroot_adchild_adtree_master_1client - -- fedora-latest/test_ntp_options: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_ntp_options: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_ntp_options.py::TestNTPoptions -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_1repl_1client - -- fedora-latest/test_otp: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_otp: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_otp.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_pkinit_manage: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_pkinit_manage: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_pkinit_manage.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_pki_config_override: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_pki_config_override: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_pki_config_override.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - --# fedora-latest/nfs: --# requires: [fedora-latest/build] -+# fedora-latest-ipa-4-10/nfs: -+# requires: [fedora-latest-ipa-4-10/build] - # priority: 50 - # job: - # class: RunPytest - # args: --# build_url: '{fedora-latest/build_url}' -+# build_url: '{fedora-latest-ipa-4-10/build_url}' - # selinux_enforcing: True - # test_suite: test_integration/test_nfs.py::TestNFS --# template: *ci-master-latest -+# template: *ci-ipa-4-10-latest - # timeout: 9000 - # topology: *master_3client - -- fedora-latest/nfs_nsswitch_restore: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/nfs_nsswitch_restore: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_nfs.py::TestIpaClientAutomountFileRestore -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_3client - -- fedora-latest/mask: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/mask: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestMaskInstall -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/hostname_validator: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/hostname_validator: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_installation.py::TestHostnameValidator -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/automember: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/automember: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_automember.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_crlgen_manage: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_crlgen_manage: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_crlgen_manage.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_integration_TestIPANotConfigured: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_integration_TestIPANotConfigured: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_cli_ipa_not_configured.py::TestIPANotConfigured -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_1repl - -- fedora-latest/test_sssd: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_sssd: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunADTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_sssd.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *adroot_adchild_adtree_master_1client - -- fedora-latest/test_ca_custom_sdn: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_ca_custom_sdn: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_ca_custom_sdn.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_membermanager: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_membermanager: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_membermanager.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 1800 - topology: *master_1repl - -- fedora-latest/krbtpolicy: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/krbtpolicy: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_krbtpolicy.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 4800 - topology: *master_1repl - -- fedora-latest/test_winsyncmigrate: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_winsyncmigrate: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunADTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_winsyncmigrate.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 4800 - topology: *ad_master - -- fedora-latest/test_trust: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_trust: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunADTests - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_trust.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10000 - topology: *adroot_adchild_adtree_master_1client - -- fedora-latest/test_backup_and_restore_TestBackupAndRestoreTrust: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreTrust: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreTrust -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl - -- fedora-latest/test_adtrust_install: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_adtrust_install: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_adtrust_install.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_cert: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_cert: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_cert.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl_1client - -- fedora-latest/test_epn: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_epn: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_epn.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_3client - -- fedora-latest/test_acme: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_acme: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_acme.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 7200 - topology: *master_1repl_1client - -- fedora-latest/test_dns: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_dns: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_dns.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_pwpolicy: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_pwpolicy: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_pwpolicy.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_cert_fix: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_cert_fix: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_ipa_cert_fix.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_1repl - -- fedora-latest/test_subids: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_subids: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_subids.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_custom_plugins: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_custom_plugins: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_custom_plugins.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl - -- fedora-latest/test_external_idp: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_external_idp: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_idp.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5000 - topology: *master_2repl_1client - -- fedora-latest/test_random_serial_numbers_TestInstallWithCA_DNS1_RSN: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_random_serial_numbers_TestInstallWithCA_DNS1_RSN: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_DNS1_RSN -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_random_serial_numbers_TestInstallWithCA_KRA1_RSN: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_random_serial_numbers_TestInstallWithCA_KRA1_RSN: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_KRA1_RSN -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 10800 - topology: *master_3repl_1client - -- fedora-latest/test_random_serial_numbers_test_commands_RSN: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_random_serial_numbers_test_commands_RSN: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_random_serial_numbers.py::TestIPACommand_RSN::test_certificate_out_write_to_file -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl_1client - -- fedora-latest/test_caless_TestServerCALessToExternalCA_RSN: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/test_caless_TestServerCALessToExternalCA_RSN: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - selinux_enforcing: True - test_suite: test_integration/test_random_serial_numbers.py::TestServerCALessToExternalCA_RSN -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl -diff --git a/ipatests/prci_definitions/nightly_rawhide.yaml b/ipatests/prci_definitions/nightly_ipa-4-10_previous.yaml -similarity index 50% -rename from ipatests/prci_definitions/nightly_rawhide.yaml -rename to ipatests/prci_definitions/nightly_ipa-4-10_previous.yaml -index 60a0d5f22369d2aa5fb4892a3e32d0772d1ab0da..df98a66871fd90daaebd83f063e48f1580675049 100644 ---- a/ipatests/prci_definitions/nightly_rawhide.yaml -+++ b/ipatests/prci_definitions/nightly_ipa-4-10_previous.yaml -@@ -41,7 +41,7 @@ topologies: - memory: 14500 - - jobs: -- fedora-rawhide/build: -+ fedora-previous-ipa-4-10/build: - requires: [] - priority: 100 - job: -@@ -49,1920 +49,1775 @@ jobs: - args: - git_repo: '{git_repo}' - git_refspec: '{git_refspec}' -- template: &ci-master-frawhide -- name: freeipa/ci-master-frawhide -- version: 0.7.0 -+ template: &ci-ipa-4-10-previous -+ name: freeipa/ci-ipa-4-10-f35 -+ version: 0.0.1 - timeout: 1800 - topology: *build - -- fedora-rawhide/simple_replication: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/simple_replication: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_simple_replication.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl - -- fedora-rawhide/test_external_ca_TestExternalCA: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_external_ca_TestExternalCA: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_external_ca.py::TestExternalCA test_integration/test_external_ca.py::TestExternalCAConstraints -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 4800 - topology: *master_1repl_1client - -- fedora-rawhide/test_external_ca_TestSelfExternalSelf: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_external_ca_TestSelfExternalSelf: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_external_ca.py::TestSelfExternalSelf test_integration/test_external_ca.py::TestExternalCAInstall -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl - -- fedora-rawhide/external_ca_templates: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/external_ca_templates: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_external_ca.py::TestExternalCAProfileScenarios -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl - -- fedora-rawhide/test_topologies: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_topologies: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_topologies.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl - -- fedora-rawhide/test_sudo: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_sudo: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_sudo.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 4800 - topology: *master_1repl_1client - -- fedora-rawhide/test_commands: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_commands: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_commands.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 5400 - topology: *master_1repl_1client - -- fedora-rawhide/test_kerberos_flags: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_kerberos_flags: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_kerberos_flags.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl_1client - -- fedora-rawhide/test_http_kdc_proxy: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_http_kdc_proxy: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunADTests - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_http_kdc_proxy.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *ad_master_2client - -- fedora-rawhide/test_fips: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_fips: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_fips.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_1repl_1client - -- fedora-rawhide/test_forced_client_enrolment: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_forced_client_enrolment: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_forced_client_reenrollment.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 4800 - topology: *master_1repl_1client - -- fedora-rawhide/test_advise: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_advise: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_advise.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl_1client - -- fedora-rawhide/test_testconfig: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_testconfig: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_testconfig.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl - -- fedora-rawhide/test_service_permissions: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_service_permissions: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_service_permissions.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl - -- fedora-rawhide/test_netgroup: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_netgroup: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_netgroup.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl - -- fedora-rawhide/test_vault: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_vault: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_vault.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 6300 - topology: *master_1repl - -- fedora-rawhide/test_authconfig: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_authconfig: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_authselect.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 4800 - topology: *master_1repl_1client - -- fedora-rawhide/test_smb: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_smb: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunADTests - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_smb.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *ad_master_2client - -- fedora-rawhide/test_server_del: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_server_del: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_server_del.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_2repl_1client - -- fedora-rawhide/test_installation_TestInstallWithCA1: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_installation_TestInstallWithCA1: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallWithCA1 -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_3repl_1client - -- fedora-rawhide/test_installation_TestInstallWithCA2: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_installation_TestInstallWithCA2: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallWithCA2 -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_3repl_1client - -- fedora-rawhide/test_installation_TestInstallCA: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_installation_TestInstallCA: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallCA -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_2repl_1client - -- fedora-rawhide/test_installation_TestInstallWithCA_KRA1: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_installation_TestInstallWithCA_KRA1: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA1 -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_3repl_1client - -- fedora-rawhide/test_installation_TestInstallWithCA_KRA2: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_installation_TestInstallWithCA_KRA2: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA2 -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_3repl_1client - -- fedora-rawhide/test_installation_TestInstallWithCA_DNS1: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_installation_TestInstallWithCA_DNS1: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS1 -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_3repl_1client - -- fedora-rawhide/test_installation_TestInstallWithCA_DNS2: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_installation_TestInstallWithCA_DNS2: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS2 -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_3repl_1client - -- fedora-rawhide/test_installation_TestInstallWithCA_DNS3: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_installation_TestInstallWithCA_DNS3: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS3 -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl - -- fedora-rawhide/test_installation_TestInstallWithCA_DNS4: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_installation_TestInstallWithCA_DNS4: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS4 -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl - -- fedora-rawhide/test_installation_TestInstallWithCA_KRA_DNS1: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_installation_TestInstallWithCA_KRA_DNS1: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS1 -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_3repl_1client - -- fedora-rawhide/test_installation_TestInstallWithCA_KRA_DNS2: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_installation_TestInstallWithCA_KRA_DNS2: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS2 -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_3repl_1client - -- fedora-rawhide/test_installation_TestInstallMaster: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_installation_TestInstallMaster: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallMaster -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_1repl - -- fedora-rawhide/test_installation_TestInstallMasterKRA: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_installation_TestInstallMasterKRA: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallMasterKRA -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_1repl - -- fedora-rawhide/test_installation_TestInstallMasterDNS: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_installation_TestInstallMasterDNS: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallMasterDNS -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_1repl - -- fedora-rawhide/test_installation_TestInstallMasterDNSRepeatedly: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_installation_TestInstallMasterDNSRepeatedly: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallMasterDNSRepeatedly -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_1repl - -- fedora-rawhide/test_installation_TestInstallMasterReservedIPasForwarder: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_installation_TestInstallMasterReservedIPasForwarder: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallMasterReservedIPasForwarder -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_1repl - -- fedora-rawhide/test_installation_TestInstallMasterReplica: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_installation_TestInstallMasterReplica: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallMasterReplica -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_1repl - -- fedora-rawhide/test_installation_TestInstallReplicaAgainstSpecificServer: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_installation_TestInstallReplicaAgainstSpecificServer: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallReplicaAgainstSpecificServer -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_2repl_1client - -- fedora-rawhide/test_installation_TestADTrustInstall: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_installation_TestADTrustInstall: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestADTrustInstall -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_2repl_1client - -- fedora-rawhide/test_installation_TestADTrustInstallWithDNS_KRA_ADTrust: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_installation_TestADTrustInstallWithDNS_KRA_ADTrust: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestADTrustInstallWithDNS_KRA_ADTrust -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_2repl_1client - -- fedora-rawhide/test_installation_TestKRAinstallAfterCertRenew: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_installation_TestKRAinstallAfterCertRenew: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestKRAinstallAfterCertRenew -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_1repl - -- fedora-rawhide/test_installation_TestInstallWithoutSudo: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_installation_TestInstallWithoutSudo: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallWithoutSudo -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 4800 - topology: *master_1repl_1client - -- fedora-rawhide/test_installation_TestInstallWithoutNamed: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_installation_TestInstallWithoutNamed: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallWithoutNamed -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 4800 - topology: *master_1repl - -- fedora-rawhide/test_installation_TestInstallwithSHA384withRSA: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_installation_TestInstallwithSHA384withRSA: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_installation.py::TestInstallwithSHA384withRSA -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl - -- fedora-rawhide/test_idviews: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_idviews: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunADTests - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_idviews.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *ad_master_2client - -- fedora-rawhide/test_caless_TestServerInstall: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_caless_TestServerInstall: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_caless.py::TestServerInstall -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 12000 - topology: *master_1repl - -- fedora-rawhide/test_caless_TestReplicaInstall: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_caless_TestReplicaInstall: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_caless.py::TestReplicaInstall -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_1repl - -- fedora-rawhide/test_caless_TestClientInstall: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_caless_TestClientInstall: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_caless.py::TestClientInstall -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 5400 - # actually master_1client - topology: *master_1repl_1client - -- fedora-rawhide/test_caless_TestIPACommands: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_caless_TestIPACommands: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_caless.py::TestIPACommands -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 5400 - topology: *master_1repl - -- fedora-rawhide/test_caless_TestCertInstall: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_caless_TestCertInstall: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_caless.py::TestCertInstall -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 5400 - topology: *master_1repl - -- fedora-rawhide/test_caless_TestPKINIT: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_caless_TestPKINIT: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_caless.py::TestPKINIT -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 5400 - topology: *master_1repl - -- fedora-rawhide/test_caless_TestServerReplicaCALessToCAFull: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_caless_TestServerReplicaCALessToCAFull: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_caless.py::TestServerReplicaCALessToCAFull -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 5400 - topology: *master_1repl - -- fedora-rawhide/test_caless_TestReplicaCALessToCAFull: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_caless_TestReplicaCALessToCAFull: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_caless.py::TestReplicaCALessToCAFull -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 5400 - topology: *master_1repl - -- fedora-rawhide/test_caless_TestServerCALessToExternalCA: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_caless_TestServerCALessToExternalCA: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_caless.py::TestServerCALessToExternalCA -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 5400 - topology: *master_1repl - -- fedora-rawhide/test_backup_and_restore_TestUserRootFilesOwnershipPermission: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_backup_and_restore_TestUserRootFilesOwnershipPermission: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestUserRootFilesOwnershipPermission -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_1repl - -- fedora-rawhide/test_backup_and_restore_TestBackupAndRestore: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_backup_and_restore_TestBackupAndRestore: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestore -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_1repl - -- fedora-rawhide/test_backup_and_restore_TestBackupAndRestoreWithDNSSEC: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreWithDNSSEC: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNSSEC -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_1repl - -- fedora-rawhide/test_backup_and_restore_TestBackupReinstallRestoreWithDNSSEC: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_backup_and_restore_TestBackupReinstallRestoreWithDNSSEC: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNSSEC -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_1repl - -- fedora-rawhide/test_backup_and_restore_TestBackupAndRestoreWithDNS: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreWithDNS: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNS -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_1repl - -- fedora-rawhide/test_backup_and_restore_TestBackupReinstallRestoreWithDNS: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_backup_and_restore_TestBackupReinstallRestoreWithDNS: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNS -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_1repl - -- fedora-rawhide/test_backup_and_restore_TestBackupAndRestoreWithKRA: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreWithKRA: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithKRA -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_1repl - -- fedora-rawhide/test_backup_and_restore_TestBackupReinstallRestoreWithKRA: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_backup_and_restore_TestBackupReinstallRestoreWithKRA: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithKRA -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_1repl - -- fedora-rawhide/test_backup_and_restore_TestBackupAndRestoreWithReplica: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreWithReplica: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithReplica -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_2repl_1client - -- fedora-rawhide/test_backup_and_restore_TestBackupAndRestoreDMPassword: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreDMPassword: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreDMPassword -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_1repl - -- fedora-rawhide/test_backup_and_restore_TestReplicaInstallAfterRestore: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_backup_and_restore_TestReplicaInstallAfterRestore: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestReplicaInstallAfterRestore -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_2repl_1client - -- fedora-rawhide/test_backup_and_restore_TestBackupRoles: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_backup_and_restore_TestBackupRoles: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestBackupRoles -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_1repl - -- fedora-rawhide/test_dnssec: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_dnssec: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_dnssec.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_2repl_1client - -- fedora-rawhide/test_replica_promotion_TestReplicaPromotionLevel1: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_replica_promotion_TestReplicaPromotionLevel1: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_replica_promotion.py::TestReplicaPromotionLevel1 -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_1repl - -- fedora-rawhide/test_replica_promotion_TestUnprivilegedUserPermissions: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_replica_promotion_TestUnprivilegedUserPermissions: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_replica_promotion.py::TestUnprivilegedUserPermissions -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_1repl - -- fedora-rawhide/test_replica_promotion_TestProhibitReplicaUninstallation: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_replica_promotion_TestProhibitReplicaUninstallation: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_replica_promotion.py::TestProhibitReplicaUninstallation -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_2repl_1client - -- fedora-rawhide/test_replica_promotion_TestWrongClientDomain: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_replica_promotion_TestWrongClientDomain: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_replica_promotion.py::TestWrongClientDomain -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_1repl - -- fedora-rawhide/test_replica_promotion_TestRenewalMaster: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_replica_promotion_TestRenewalMaster: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_replica_promotion.py::TestRenewalMaster -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_1repl - -- fedora-rawhide/test_replica_promotion_TestReplicaInstallWithExistingEntry: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_replica_promotion_TestReplicaInstallWithExistingEntry: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallWithExistingEntry -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_1repl - -- fedora-rawhide/test_replica_promotion_TestSubCAkeyReplication: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_replica_promotion_TestSubCAkeyReplication: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_replica_promotion.py::TestSubCAkeyReplication -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_1repl - -- fedora-rawhide/test_replica_promotion_TestReplicaInstallCustodia: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_replica_promotion_TestReplicaInstallCustodia: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallCustodia -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_2repl_1client - -- fedora-rawhide/test_replica_promotion_TestReplicaInForwardZone: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_replica_promotion_TestReplicaInForwardZone: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_replica_promotion.py::TestReplicaInForwardZone -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_1repl - -- fedora-rawhide/test_replica_promotion_TestHiddenReplicaPromotion: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_replica_promotion_TestHiddenReplicaPromotion: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaPromotion -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_2repl_1client - -- fedora-rawhide/test_replica_promotion_TestHiddenReplicaKRA: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_replica_promotion_TestHiddenReplicaKRA: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaKRA -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_2repl_1client - -- fedora-rawhide/test_upgrade: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_upgrade: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_upgrade.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_1repl - -- fedora-rawhide/test_topology_TestCASpecificRUVs: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_topology_TestCASpecificRUVs: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_topology.py::TestCASpecificRUVs -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_3repl_1client - -- fedora-rawhide/test_topology_TestTopologyOptions: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_topology_TestTopologyOptions: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_topology.py::TestTopologyOptions -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_3repl_1client - -- fedora-rawhide/test_replication_layouts_TestLineTopologyWithoutCA: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_replication_layouts_TestLineTopologyWithoutCA: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithoutCA -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_3repl_1client - -- fedora-rawhide/test_replication_layouts_TestLineTopologyWithCA: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_replication_layouts_TestLineTopologyWithCA: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCA -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_3repl_1client - -- fedora-rawhide/test_replication_layouts_TestLineTopologyWithCAKRA: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_replication_layouts_TestLineTopologyWithCAKRA: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCAKRA -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_3repl_1client - -- fedora-rawhide/test_replication_layouts.py_TestStarTopologyWithoutCA: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_replication_layouts.py_TestStarTopologyWithoutCA: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithoutCA -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_3repl_1client - -- fedora-rawhide/test_replication_layouts_TestStarTopologyWithCA: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_replication_layouts_TestStarTopologyWithCA: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCA -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_3repl_1client - -- fedora-rawhide/test_replication_layouts_TestStarTopologyWithCAKRA: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_replication_layouts_TestStarTopologyWithCAKRA: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCAKRA -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_3repl_1client - -- fedora-rawhide/test_replication_layouts_TestCompleteTopologyWithoutCA: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_replication_layouts_TestCompleteTopologyWithoutCA: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithoutCA -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_3repl_1client - -- fedora-rawhide/test_replication_layouts_TestCompleteTopologyWithCA: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_replication_layouts_TestCompleteTopologyWithCA: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCA -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_3repl_1client - -- fedora-rawhide/test_replication_layouts_TestCompleteTopologyWithCAKRA: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_replication_layouts_TestCompleteTopologyWithCAKRA: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCAKRA -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_3repl_1client - -- fedora-rawhide/test_client_uninstallation: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_client_uninstallation: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_uninstallation.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_1repl_1client - -- fedora-rawhide/test_installation_client: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_installation_client: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_installation_client.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_3client - -- fedora-rawhide/test_user_permissions: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_user_permissions: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_user_permissions.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl_1client - -- fedora-rawhide/test_webui_cert: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_webui_cert: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_webui/test_cert.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 2400 - topology: *ipaserver - -- fedora-rawhide/test_webui_general: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_webui_general: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: >- - test_webui/test_loginscreen.py - test_webui/test_misc_cases.py - test_webui/test_navigation.py - test_webui/test_translation.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *ipaserver - -- fedora-rawhide/test_webui_host: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_webui_host: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_webui/test_host.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *ipaserver - -- fedora-rawhide/test_webui_host_net_groups: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_webui_host_net_groups: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: >- - test_webui/test_hostgroup.py - test_webui/test_netgroup.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *ipaserver - -- fedora-rawhide/test_webui_identity: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_webui_identity: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: >- - test_webui/test_automember.py - test_webui/test_idviews.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *ipaserver - -- fedora-rawhide/test_webui_network: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_webui_network: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: >- - test_webui/test_automount.py - test_webui/test_dns.py - test_webui/test_vault.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *ipaserver - -- fedora-rawhide/test_webui_policy: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_webui_policy: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: >- - test_webui/test_hbac.py - test_webui/test_krbtpolicy.py - test_webui/test_pwpolicy.py - test_webui/test_selinuxusermap.py - test_webui/test_sudo.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *ipaserver - -- fedora-rawhide/test_webui_rbac: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_webui_rbac: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: >- - test_webui/test_delegation.py - test_webui/test_rbac.py - test_webui/test_selfservice.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *ipaserver - -- fedora-rawhide/test_webui_server: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_webui_server: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: >- - test_webui/test_config.py - test_webui/test_range.py - test_webui/test_realmdomains.py - test_webui/test_topology.py - test_webui/test_trust.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *ipaserver - -- fedora-rawhide/test_webui_service: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_webui_service: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_webui/test_service.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 2400 - topology: *ipaserver - -- fedora-rawhide/test_webui_users: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_webui_users: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: >- - test_webui/test_group.py - test_webui/test_user.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 4800 - topology: *ipaserver - -- fedora-rawhide/test_webui_subid: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_webui_subid: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunWebuiTests - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_webui/test_subid.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 2400 - topology: *ipaserver - -- fedora-rawhide/customized_ds_config_install: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/customized_ds_config_install: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_customized_ds_config_install.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl - -- fedora-rawhide/dns_locations: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/dns_locations: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_dns_locations.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_2repl_1client - -- fedora-rawhide/external_ca_TestExternalCAdirsrvStop: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/external_ca_TestExternalCAdirsrvStop: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_external_ca.py::TestExternalCAdirsrvStop -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl - -- fedora-rawhide/external_ca_TestExternalCAInvalidCert: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/external_ca_TestExternalCAInvalidCert: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_external_ca.py::TestExternalCAInvalidCert test_integration/test_external_ca.py::TestExternalCAInvalidIntermediate -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl - -- fedora-rawhide/external_ca_TestMultipleExternalCA: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/external_ca_TestMultipleExternalCA: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_external_ca.py::TestMultipleExternalCA -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl - -- fedora-rawhide/test_ipahealthcheck: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_ipahealthcheck: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheck -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 5400 - topology: *master_1repl_1client - -- fedora-rawhide/test_ipahealthcheck_nodns_extca_file: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_ipahealthcheck_nodns_extca_file: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithoutDNS test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithExternalCA test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFileCheck -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 5400 - topology: *master_1repl - -- fedora-rawhide/test_ipahealthcheck_cli_fsspace: -- requires: [fedora-rawhide/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCLI test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFilesystemSpace -- template: *ci-master-frawhide -- timeout: 3600 -- topology: *master_1repl -+ fedora-previous-ipa-4-10/test_ipahealthcheck_cli_fsspace: -+ requires: [fedora-previous-ipa-4-10/build] -+ priority: 50 -+ job: -+ class: RunPytest -+ args: -+ build_url: '{fedora-previous-ipa-4-10/build_url}' -+ test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCLI test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFilesystemSpace -+ template: *ci-ipa-4-10-previous -+ timeout: 3600 -+ topology: *master_1repl - -- fedora-rawhide/test_ipahealthcheck_adtrust: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_ipahealthcheck_adtrust: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunADTests - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithADtrust -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 4800 - topology: *adroot_adchild_adtree_master_1client - -- fedora-rawhide/test_ntp_options: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_ntp_options: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_ntp_options.py::TestNTPoptions -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_1repl_1client - -- fedora-rawhide/test_otp: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_otp: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_otp.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl - -- fedora-rawhide/test_pkinit_manage: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_pkinit_manage: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_pkinit_manage.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl - -- fedora-rawhide/test_pki_config_override: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_pki_config_override: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_pki_config_override.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl - -- fedora-rawhide/mask: -- requires: [fedora-rawhide/build] -+# fedora-previous-ipa-4-10/nfs: -+# requires: [fedora-previous-ipa-4-10/build] -+# priority: 50 -+# job: -+# class: RunPytest -+# args: -+# build_url: '{fedora-previous-ipa-4-10/build_url}' -+# test_suite: test_integration/test_nfs.py::TestNFS -+# template: *ci-ipa-4-10-previous -+# timeout: 9000 -+# topology: *master_3client -+ -+ fedora-previous-ipa-4-10/nfs_nsswitch_restore: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -- test_suite: test_integration/test_installation.py::TestMaskInstall -- template: *ci-master-frawhide -+ build_url: '{fedora-previous-ipa-4-10/build_url}' -+ test_suite: test_integration/test_nfs.py::TestIpaClientAutomountFileRestore -+ template: *ci-ipa-4-10-previous - timeout: 3600 -- topology: *master_1repl -+ topology: *master_3client - -- fedora-rawhide/hostname_validator: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/mask: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -- test_suite: test_integration/test_installation.py::TestHostnameValidator -- template: *ci-master-frawhide -+ build_url: '{fedora-previous-ipa-4-10/build_url}' -+ test_suite: test_integration/test_installation.py::TestMaskInstall -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl - --# fedora-rawhide/nfs: --# requires: [fedora-rawhide/build] --# priority: 50 --# job: --# class: RunPytest --# args: --# build_url: '{fedora-rawhide/build_url}' --# update_packages: True --# test_suite: test_integration/test_nfs.py::TestNFS --# template: *ci-master-frawhide --# timeout: 9000 --# topology: *master_3client -- -- fedora-rawhide/nfs_nsswitch_restore: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/hostname_validator: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -- test_suite: test_integration/test_nfs.py::TestIpaClientAutomountFileRestore -- template: *ci-master-frawhide -- timeout: 9000 -- topology: *master_3client -+ build_url: '{fedora-previous-ipa-4-10/build_url}' -+ test_suite: test_integration/test_installation.py::TestHostnameValidator -+ template: *ci-ipa-4-10-previous -+ timeout: 3600 -+ topology: *master_1repl - -- fedora-rawhide/automember: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/automember: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_automember.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl - -- fedora-rawhide/test_crlgen_manage: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_crlgen_manage: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_crlgen_manage.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl - -- fedora-rawhide/test_integration_TestIPANotConfigured: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_integration_TestIPANotConfigured: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_cli_ipa_not_configured.py::TestIPANotConfigured -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_1repl - -- fedora-rawhide/test_sssd: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_sssd: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunADTests - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_sssd.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *adroot_adchild_adtree_master_1client - -- fedora-rawhide/test_ca_custom_sdn: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_ca_custom_sdn: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_ca_custom_sdn.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_1repl - -- fedora-rawhide/test_membermanager: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_membermanager: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_membermanager.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 1800 - topology: *master_1repl - -- fedora-rawhide/krbtpolicy: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/krbtpolicy: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_krbtpolicy.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 4800 - topology: *master_1repl - -- fedora-rawhide/test_winsyncmigrate: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_winsyncmigrate: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunADTests - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_winsyncmigrate.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 4800 - topology: *ad_master - -- fedora-rawhide/test_trust: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_trust: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunADTests - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_trust.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10000 - topology: *adroot_adchild_adtree_master_1client - -- fedora-rawhide/test_backup_and_restore_TestBackupAndRestoreTrust: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreTrust: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreTrust -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_1repl - -- fedora-rawhide/test_adtrust_install: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_adtrust_install: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_adtrust_install.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl - -- fedora-rawhide/test_cert: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_cert: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_cert.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 5400 - topology: *master_1repl_1client - -- fedora-rawhide/test_epn: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_epn: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_epn.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_3client - -- fedora-rawhide/test_acme: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_acme: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_acme.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 7200 - topology: *master_1repl_1client - -- fedora-rawhide/test_dns: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_dns: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_dns.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl - -- fedora-rawhide/test_pwpolicy: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_pwpolicy: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_pwpolicy.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl - -- fedora-rawhide/test_cert_fix: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_cert_fix: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_ipa_cert_fix.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_1repl - -- fedora-rawhide/test_subids: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_subids: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_subids.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl - -- fedora-rawhide/test_custom_plugins: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_custom_plugins: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_custom_plugins.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 3600 - topology: *master_1repl - -- fedora-rawhide/test_external_idp: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_external_idp: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_idp.py -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 5000 - topology: *master_2repl_1client - -- fedora-rawhide/test_random_serial_numbers_TestInstallWithCA_DNS1_RSN: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_random_serial_numbers_TestInstallWithCA_DNS1_RSN: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_DNS1_RSN -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_3repl_1client - -- fedora-rawhide/test_random_serial_numbers_TestInstallWithCA_KRA1_RSN: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_random_serial_numbers_TestInstallWithCA_KRA1_RSN: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_KRA1_RSN -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 10800 - topology: *master_3repl_1client - -- fedora-rawhide/test_random_serial_numbers_test_commands_RSN: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_random_serial_numbers_test_commands_RSN: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_random_serial_numbers.py::TestIPACommand_RSN::test_certificate_out_write_to_file -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 5400 - topology: *master_1repl_1client - -- fedora-rawhide/test_caless_TestServerCALessToExternalCA_RSN: -- requires: [fedora-rawhide/build] -+ fedora-previous-ipa-4-10/test_caless_TestServerCALessToExternalCA_RSN: -+ requires: [fedora-previous-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-rawhide/build_url}' -- update_packages: True -+ build_url: '{fedora-previous-ipa-4-10/build_url}' - test_suite: test_integration/test_random_serial_numbers.py::TestServerCALessToExternalCA_RSN -- template: *ci-master-frawhide -+ template: *ci-ipa-4-10-previous - timeout: 5400 - topology: *master_1repl -diff --git a/ipatests/prci_definitions/nightly_latest_389ds.yaml b/ipatests/prci_definitions/nightly_latest_389ds.yaml -deleted file mode 100644 -index 1a2912ef1fca1576e64d6c8b20cf5fd8366e893a..0000000000000000000000000000000000000000 ---- a/ipatests/prci_definitions/nightly_latest_389ds.yaml -+++ /dev/null -@@ -1,658 +0,0 @@ --topologies: -- build: &build -- name: build -- cpu: 2 -- memory: 3800 -- master_1repl: &master_1repl -- name: master_1repl -- cpu: 4 -- memory: 6450 -- master_1repl_1client: &master_1repl_1client -- name: master_1repl_1client -- cpu: 4 -- memory: 7400 -- ipaserver: &ipaserver -- name: ipaserver -- cpu: 2 -- memory: 2400 -- master_2repl_1client: &master_2repl_1client -- name: master_2repl_1client -- cpu: 5 -- memory: 10150 -- master_3repl_1client: &master_3repl_1client -- name: master_3repl_1client -- cpu: 6 -- memory: 12900 -- --jobs: -- 389ds-fedora/build: -- requires: [] -- priority: 100 -- job: -- class: Build -- args: -- copr: '@389ds/389-ds-base-nightly' -- git_repo: '{git_repo}' -- git_refspec: '{git_refspec}' -- template: &ci-master-latest -- name: freeipa/ci-master-f36 -- version: 0.0.7 -- timeout: 1800 -- topology: *build -- -- 389ds-fedora/simple_replication: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_simple_replication.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- 389ds-fedora/test_commands: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_commands.py -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl_1client -- -- 389ds-fedora/test_server_del: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_server_del.py -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_2repl_1client -- -- 389ds-fedora/test_installation_TestInstallWithCA1: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_installation.py::TestInstallWithCA1 -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- 389ds-fedora/test_caless_TestServerInstall: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_caless.py::TestServerInstall -- template: *ci-master-latest -- timeout: 12000 -- topology: *master_1repl -- -- 389ds-fedora/test_caless_TestReplicaInstall: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_caless.py::TestReplicaInstall -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- 389ds-fedora/test_caless_TestClientInstall: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_caless.py::TestClientInstall -- template: *ci-master-latest -- timeout: 5400 -- # actually master_1client -- topology: *master_1repl_1client -- -- 389ds-fedora/test_caless_TestCertInstall: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_caless.py::TestCertInstall -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl -- -- 389ds-fedora/test_backup_and_restore_TestUserRootFilesOwnershipPermission: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_backup_and_restore.py::TestUserRootFilesOwnershipPermission -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- 389ds-fedora/test_backup_and_restore_TestBackupAndRestore: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestore -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- 389ds-fedora/test_backup_and_restore_TestBackupAndRestoreWithDNSSEC: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNSSEC -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- 389ds-fedora/test_backup_and_restore_TestBackupReinstallRestoreWithDNSSEC: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNSSEC -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- 389ds-fedora/test_backup_and_restore_TestBackupAndRestoreWithDNS: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNS -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- 389ds-fedora/test_backup_and_restore_TestBackupReinstallRestoreWithDNS: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNS -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- 389ds-fedora/test_backup_and_restore_TestBackupAndRestoreWithKRA: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithKRA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- 389ds-fedora/test_backup_and_restore_TestBackupReinstallRestoreWithKRA: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithKRA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- 389ds-fedora/test_backup_and_restore_TestBackupAndRestoreWithReplica: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithReplica -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_2repl_1client -- -- 389ds-fedora/test_backup_and_restore_TestBackupAndRestoreDMPassword: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreDMPassword -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- 389ds-fedora/test_backup_and_restore_TestReplicaInstallAfterRestore: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_backup_and_restore.py::TestReplicaInstallAfterRestore -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_2repl_1client -- -- 389ds-fedora/test_dnssec: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_dnssec.py -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_2repl_1client -- -- 389ds-fedora/test_replica_promotion_TestReplicaPromotionLevel1: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_replica_promotion.py::TestReplicaPromotionLevel1 -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- 389ds-fedora/test_replica_promotion_TestProhibitReplicaUninstallation: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_replica_promotion.py::TestProhibitReplicaUninstallation -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_2repl_1client -- -- 389ds-fedora/test_replica_promotion_TestHiddenReplicaPromotion: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaPromotion -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_2repl_1client -- -- 389ds-fedora/test_upgrade: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_upgrade.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- 389ds-fedora/test_topology_TestCASpecificRUVs: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_topology.py::TestCASpecificRUVs -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- 389ds-fedora/test_topology_TestTopologyOptions: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_topology.py::TestTopologyOptions -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- 389ds-fedora/test_replication_layouts_TestLineTopologyWithoutCA: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithoutCA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- 389ds-fedora/test_replication_layouts_TestLineTopologyWithCA: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCA -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- 389ds-fedora/test_replication_layouts_TestLineTopologyWithCAKRA: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCAKRA -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- 389ds-fedora/test_replication_layouts.py_TestStarTopologyWithoutCA: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithoutCA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- 389ds-fedora/test_replication_layouts_TestStarTopologyWithCA: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- 389ds-fedora/test_replication_layouts_TestStarTopologyWithCAKRA: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCAKRA -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- 389ds-fedora/test_replication_layouts_TestCompleteTopologyWithoutCA: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithoutCA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- 389ds-fedora/test_replication_layouts_TestCompleteTopologyWithCA: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- 389ds-fedora/test_replication_layouts_TestCompleteTopologyWithCAKRA: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCAKRA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- 389ds-fedora/test_client_uninstallation: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_uninstallation.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl_1client -- -- 389ds-fedora/customized_ds_config_install: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_customized_ds_config_install.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- 389ds-fedora/dns_locations: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_dns_locations.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_2repl_1client -- -- 389ds-fedora/external_ca_TestExternalCAdirsrvStop: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_external_ca.py::TestExternalCAdirsrvStop -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- 389ds-fedora/mask: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_installation.py::TestMaskInstall -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- 389ds-fedora/automember: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_automember.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- 389ds-fedora/test_fips: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_fips.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl_1client -- -- 389ds-fedora/test_pwpolicy: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_pwpolicy.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- 389ds-fedora/test_external_idp: -- requires: [389ds-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{389ds-fedora/build_url}' -- update_packages: True -- copr: '@389ds/389-ds-base-nightly' -- test_suite: test_integration/test_idp.py -- template: *ci-master-latest -- timeout: 5000 -- topology: *master_2repl_1client -diff --git a/ipatests/prci_definitions/nightly_latest_pki.yaml b/ipatests/prci_definitions/nightly_latest_pki.yaml -deleted file mode 100644 -index 217823679444e3fac7f894e4f937fb3457fc5c39..0000000000000000000000000000000000000000 ---- a/ipatests/prci_definitions/nightly_latest_pki.yaml -+++ /dev/null -@@ -1,1042 +0,0 @@ --topologies: -- build: &build -- name: build -- cpu: 2 -- memory: 3800 -- master_1repl: &master_1repl -- name: master_1repl -- cpu: 4 -- memory: 6450 -- master_1repl_1client: &master_1repl_1client -- name: master_1repl_1client -- cpu: 4 -- memory: 7400 -- ipaserver: &ipaserver -- name: ipaserver -- cpu: 2 -- memory: 2400 -- master_2repl_1client: &master_2repl_1client -- name: master_2repl_1client -- cpu: 5 -- memory: 10150 -- master_3repl_1client: &master_3repl_1client -- name: master_3repl_1client -- cpu: 6 -- memory: 12900 -- ad_master: &ad_master -- name: ad_master -- cpu: 4 -- memory: 12000 -- --jobs: -- pki-fedora/build: -- requires: [] -- priority: 100 -- job: -- class: Build -- args: -- copr: '@pki/master' -- git_repo: '{git_repo}' -- git_refspec: '{git_refspec}' -- template: &ci-master-latest -- name: freeipa/ci-master-f36 -- version: 0.0.7 -- timeout: 1800 -- topology: *build -- -- pki-fedora/simple_replication: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_simple_replication.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- pki-fedora/test_external_ca_TestExternalCA: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_external_ca.py::TestExternalCA -- template: *ci-master-latest -- timeout: 4800 -- topology: *master_1repl_1client -- -- pki-fedora/test_external_ca_TestSelfExternalSelf: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_external_ca.py::TestSelfExternalSelf test_integration/test_external_ca.py::TestExternalCAInstall -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- pki-fedora/external_ca_templates: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_external_ca.py::TestExternalCAProfileScenarios -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- pki-fedora/test_vault: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_vault.py -- template: *ci-master-latest -- timeout: 6300 -- topology: *master_1repl -- -- pki-fedora/test_forced_client_enrolment: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_forced_client_reenrollment.py -- template: *ci-master-latest -- timeout: 4800 -- topology: *master_1repl_1client -- -- pki-fedora/test_installation_TestInstallWithCA1: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_installation.py::TestInstallWithCA1 -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- pki-fedora/test_installation_TestInstallWithCA2: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_installation.py::TestInstallWithCA2 -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- pki-fedora/test_installation_TestInstallCA: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_installation.py::TestInstallCA -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_2repl_1client -- -- pki-fedora/test_installation_TestInstallWithCA_KRA1: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA1 -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- pki-fedora/test_installation_TestInstallWithCA_KRA2: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA2 -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- pki-fedora/test_installation_TestInstallWithCA_DNS1: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS1 -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- pki-fedora/test_installation_TestInstallWithCA_DNS2: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS2 -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- pki-fedora/test_installation_TestInstallWithCA_DNS3: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS3 -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- pki-fedora/test_installation_TestInstallWithCA_DNS4: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS4 -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- pki-fedora/test_installation_TestInstallWithCA_KRA_DNS1: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS1 -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- pki-fedora/test_installation_TestInstallWithCA_KRA_DNS2: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS2 -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- pki-fedora/test_installation_TestInstallMaster: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_installation.py::TestInstallMaster -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl -- -- pki-fedora/test_installation_TestInstallMasterKRA: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_installation.py::TestInstallMasterKRA -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl -- -- pki-fedora/test_installation_TestInstallMasterDNS: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_installation.py::TestInstallMasterDNS -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl -- -- pki-fedora/test_installation_TestInstallMasterDNSRepeatedly: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_installation.py::TestInstallMasterDNSRepeatedly -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl -- -- pki-fedora/test_installation_TestInstallMasterReservedIPasForwarder: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_installation.py::TestInstallMasterReservedIPasForwarder -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl -- -- pki-fedora/test_installation_TestInstallwithSHA384withRSA: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_installation.py::TestInstallwithSHA384withRSA -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- pki-fedora/test_caless_TestServerInstall: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_caless.py::TestServerInstall -- template: *ci-master-latest -- timeout: 12000 -- topology: *master_1repl -- -- pki-fedora/test_caless_TestReplicaInstall: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_caless.py::TestReplicaInstall -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- pki-fedora/test_caless_TestClientInstall: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_caless.py::TestClientInstall -- template: *ci-master-latest -- timeout: 5400 -- # actually master_1client -- topology: *master_1repl_1client -- -- pki-fedora/test_caless_TestIPACommands: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_caless.py::TestIPACommands -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl -- -- pki-fedora/test_caless_TestCertInstall: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_caless.py::TestCertInstall -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl -- -- pki-fedora/test_caless_TestPKINIT: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_caless.py::TestPKINIT -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl -- -- pki-fedora/test_caless_TestServerReplicaCALessToCAFull: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_caless.py::TestServerReplicaCALessToCAFull -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl -- -- pki-fedora/test_caless_TestReplicaCALessToCAFull: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_caless.py::TestReplicaCALessToCAFull -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl -- -- pki-fedora/test_caless_TestServerCALessToExternalCA: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_caless.py::TestServerCALessToExternalCA -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl -- -- pki-fedora/test_backup_and_restore_TestBackupAndRestoreWithKRA: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithKRA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- pki-fedora/test_backup_and_restore_TestBackupReinstallRestoreWithKRA: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithKRA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- pki-fedora/test_backup_and_restore_TestBackupAndRestoreWithReplica: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithReplica -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_2repl_1client -- -- pki-fedora/test_backup_and_restore_TestReplicaInstallAfterRestore: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_backup_and_restore.py::TestReplicaInstallAfterRestore -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_2repl_1client -- -- pki-fedora/test_replica_promotion_TestReplicaPromotionLevel1: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_replica_promotion.py::TestReplicaPromotionLevel1 -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- pki-fedora/test_replica_promotion_TestRenewalMaster: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_replica_promotion.py::TestRenewalMaster -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- pki-fedora/test_replica_promotion_TestSubCAkeyReplication: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_replica_promotion.py::TestSubCAkeyReplication -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- pki-fedora/test_replica_promotion_TestReplicaInstallCustodia: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallCustodia -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_2repl_1client -- -- pki-fedora/test_upgrade: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_upgrade.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- pki-fedora/test_topology_TestCASpecificRUVs: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_topology.py::TestCASpecificRUVs -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- pki-fedora/test_replication_layouts_TestLineTopologyWithoutCA: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithoutCA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- pki-fedora/test_replication_layouts_TestLineTopologyWithCA: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCA -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- pki-fedora/test_replication_layouts_TestLineTopologyWithCAKRA: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCAKRA -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- pki-fedora/test_replication_layouts.py_TestStarTopologyWithoutCA: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithoutCA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- pki-fedora/test_replication_layouts_TestStarTopologyWithCA: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- pki-fedora/test_replication_layouts_TestStarTopologyWithCAKRA: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCAKRA -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- pki-fedora/test_replication_layouts_TestCompleteTopologyWithoutCA: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithoutCA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- pki-fedora/test_replication_layouts_TestCompleteTopologyWithCA: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- pki-fedora/test_replication_layouts_TestCompleteTopologyWithCAKRA: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCAKRA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- pki-fedora/test_client_uninstallation: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_uninstallation.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl_1client -- -- pki-fedora/test_webui_cert: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_webui/test_cert.py -- template: *ci-master-latest -- timeout: 2400 -- topology: *ipaserver -- -- pki-fedora/test_webui_identity: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: >- -- test_webui/test_automember.py -- test_webui/test_idviews.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *ipaserver -- -- pki-fedora/dns_locations: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_dns_locations.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_2repl_1client -- -- pki-fedora/external_ca_TestExternalCAdirsrvStop: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_external_ca.py::TestExternalCAdirsrvStop -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- pki-fedora/external_ca_TestExternalCAInvalidCert: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_external_ca.py::TestExternalCAInvalidCert -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- pki-fedora/external_ca_TestMultipleExternalCA: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_external_ca.py::TestMultipleExternalCA -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- pki-fedora/test_ipahealthcheck: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheck -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl_1client -- -- pki-fedora/test_ipahealthcheck_nodns_extca_file: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithoutDNS test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithExternalCA test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFileCheck -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl -- -- pki-fedora/test_pkinit_manage: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_pkinit_manage.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- pki-fedora/test_crlgen_manage: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_crlgen_manage.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- pki-fedora/test_ca_custom_sdn: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_ca_custom_sdn.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- pki-fedora/test_fips: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_fips.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl_1client -- -- pki-fedora/test_acme: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_acme.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl_1client -- -- pki-fedora/test_cert_fix: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_ipa_cert_fix.py -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl -- -- pki-fedora/test_external_idp: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_idp.py -- template: *ci-master-latest -- timeout: 5000 -- topology: *master_2repl_1client -- -- pki-fedora/test_random_serial_numbers_TestInstallWithCA_DNS1_RSN: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_DNS1_RSN -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- pki-fedora/test_random_serial_numbers_TestInstallWithCA_KRA1_RSN: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_KRA1_RSN -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- pki-fedora/test_random_serial_numbers_test_commands_RSN: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_random_serial_numbers.py::TestIPACommand_RSN::test_certificate_out_write_to_file -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl_1client -- -- pki-fedora/test_caless_TestServerCALessToExternalCA_RSN: -- requires: [pki-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{pki-fedora/build_url}' -- update_packages: True -- copr: '@pki/master' -- test_suite: test_integration/test_random_serial_numbers.py::TestServerCALessToExternalCA_RSN -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl -diff --git a/ipatests/prci_definitions/nightly_latest_testing.yaml b/ipatests/prci_definitions/nightly_latest_testing.yaml -deleted file mode 100644 -index 02d311d27598503c035ba7ff99e5bf311075419a..0000000000000000000000000000000000000000 ---- a/ipatests/prci_definitions/nightly_latest_testing.yaml -+++ /dev/null -@@ -1,2114 +0,0 @@ --topologies: -- build: &build -- name: build -- cpu: 2 -- memory: 3800 -- master_3client: &master_3client -- name: master_3client -- cpu: 5 -- memory: 10150 -- master_1repl: &master_1repl -- name: master_1repl -- cpu: 4 -- memory: 6450 -- master_1repl_1client: &master_1repl_1client -- name: master_1repl_1client -- cpu: 4 -- memory: 7400 -- ipaserver: &ipaserver -- name: ipaserver -- cpu: 2 -- memory: 2400 -- master_2repl_1client: &master_2repl_1client -- name: master_2repl_1client -- cpu: 5 -- memory: 10150 -- master_3repl_1client: &master_3repl_1client -- name: master_3repl_1client -- cpu: 6 -- memory: 12900 -- ad_master_2client: &ad_master_2client -- name: ad_master_2client -- cpu: 4 -- memory: 12000 -- ad_master: &ad_master -- name: ad_master -- cpu: 4 -- memory: 12000 -- adroot_adchild_adtree_master_1client: &adroot_adchild_adtree_master_1client -- name: adroot_adchild_adtree_master_1client -- cpu: 8 -- memory: 14500 -- --jobs: -- testing-fedora/build: -- requires: [] -- priority: 100 -- job: -- class: Build -- args: -- enable_testing_repo: True -- git_repo: '{git_repo}' -- git_refspec: '{git_refspec}' -- template: &ci-master-latest -- name: freeipa/ci-master-f36 -- version: 0.0.7 -- timeout: 1800 -- topology: *build -- -- testing-fedora/simple_replication: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_simple_replication.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_external_ca_TestExternalCA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_external_ca.py::TestExternalCA test_integration/test_external_ca.py::TestExternalCAConstraints -- template: *ci-master-latest -- timeout: 4800 -- topology: *master_1repl_1client -- -- testing-fedora/test_external_ca_TestSelfExternalSelf: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_external_ca.py::TestSelfExternalSelf test_integration/test_external_ca.py::TestExternalCAInstall -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/external_ca_templates: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_external_ca.py::TestExternalCAProfileScenarios -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_topologies: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_topologies.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_sudo: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_sudo.py -- template: *ci-master-latest -- timeout: 4800 -- topology: *master_1repl_1client -- -- testing-fedora/test_commands: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_commands.py -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl_1client -- -- testing-fedora/test_kerberos_flags: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_kerberos_flags.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl_1client -- -- testing-fedora/test_http_kdc_proxy: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunADTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_http_kdc_proxy.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *ad_master_2client -- -- testing-fedora/test_fips: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_fips.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl_1client -- -- testing-fedora/test_forced_client_enrolment: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_forced_client_reenrollment.py -- template: *ci-master-latest -- timeout: 4800 -- topology: *master_1repl_1client -- -- testing-fedora/test_advise: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_advise.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl_1client -- -- testing-fedora/test_testconfig: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_testconfig.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_service_permissions: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_service_permissions.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_netgroup: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_netgroup.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_vault: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_vault.py -- template: *ci-master-latest -- timeout: 6300 -- topology: *master_1repl -- -- testing-fedora/test_authconfig: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_authselect.py -- template: *ci-master-latest -- timeout: 4800 -- topology: *master_1repl_1client -- -- testing-fedora/test_smb: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunADTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_smb.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *ad_master_2client -- -- testing-fedora/test_server_del: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_server_del.py -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_2repl_1client -- -- testing-fedora/test_installation_TestInstallWithCA1: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallWithCA1 -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_installation_TestInstallWithCA2: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallWithCA2 -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_installation_TestInstallCA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallCA -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_2repl_1client -- -- testing-fedora/test_installation_TestInstallWithCA_KRA1: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA1 -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_installation_TestInstallWithCA_KRA2: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA2 -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_installation_TestInstallWithCA_DNS1: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS1 -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_installation_TestInstallWithCA_DNS2: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS2 -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_installation_TestInstallWithCA_DNS3: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS3 -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_installation_TestInstallWithCA_DNS4: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS4 -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_installation_TestInstallWithCA_KRA_DNS1: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS1 -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_installation_TestInstallWithCA_KRA_DNS2: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS2 -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_installation_TestInstallMaster: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallMaster -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl -- -- testing-fedora/test_installation_TestInstallMasterKRA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallMasterKRA -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl -- -- testing-fedora/test_installation_TestInstallMasterDNS: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallMasterDNS -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl -- -- testing-fedora/test_installation_TestInstallMasterDNSRepeatedly: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallMasterDNSRepeatedly -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl -- -- testing-fedora/test_installation_TestInstallMasterReservedIPasForwarder: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallMasterReservedIPasForwarder -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl -- -- testing-fedora/test_installation_TestInstallMasterReplica: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallMasterReplica -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl -- -- testing-fedora/test_installation_TestInstallReplicaAgainstSpecificServer: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallReplicaAgainstSpecificServer -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_2repl_1client -- -- testing-fedora/test_installation_TestADTrustInstall: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestADTrustInstall -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_2repl_1client -- -- testing-fedora/test_installation_TestADTrustInstallWithDNS_KRA_ADTrust: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestADTrustInstallWithDNS_KRA_ADTrust -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_2repl_1client -- -- testing-fedora/test_installation_TestKRAinstallAfterCertRenew: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestKRAinstallAfterCertRenew -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl -- -- testing-fedora/test_installation_TestInstallWithoutSudo: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallWithoutSudo -- template: *ci-master-latest -- timeout: 4800 -- topology: *master_1repl_1client -- -- testing-fedora/test_installation_TestInstallWithoutNamed: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallWithoutNamed -- template: *ci-master-latest -- timeout: 4800 -- topology: *master_1repl -- -- testing-fedora/test_installation_TestInstallwithSHA384withRSA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallwithSHA384withRSA -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_idviews: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunADTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_idviews.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *ad_master_2client -- -- testing-fedora/test_caless_TestServerInstall: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_caless.py::TestServerInstall -- template: *ci-master-latest -- timeout: 12000 -- topology: *master_1repl -- -- testing-fedora/test_caless_TestReplicaInstall: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_caless.py::TestReplicaInstall -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_caless_TestClientInstall: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_caless.py::TestClientInstall -- template: *ci-master-latest -- timeout: 5400 -- # actually master_1client -- topology: *master_1repl_1client -- -- testing-fedora/test_caless_TestIPACommands: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_caless.py::TestIPACommands -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl -- -- testing-fedora/test_caless_TestCertInstall: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_caless.py::TestCertInstall -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl -- -- testing-fedora/test_caless_TestPKINIT: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_caless.py::TestPKINIT -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl -- -- testing-fedora/test_caless_TestServerReplicaCALessToCAFull: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_caless.py::TestServerReplicaCALessToCAFull -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl -- -- testing-fedora/test_caless_TestReplicaCALessToCAFull: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_caless.py::TestReplicaCALessToCAFull -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl -- -- testing-fedora/test_caless_TestServerCALessToExternalCA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_caless.py::TestServerCALessToExternalCA -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl -- -- testing-fedora/test_backup_and_restore_TestUserRootFilesOwnershipPermission: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestUserRootFilesOwnershipPermission -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_backup_and_restore_TestBackupAndRestore: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestore -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_backup_and_restore_TestBackupAndRestoreWithDNSSEC: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNSSEC -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_backup_and_restore_TestBackupReinstallRestoreWithDNSSEC: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNSSEC -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_backup_and_restore_TestBackupAndRestoreWithDNS: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNS -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_backup_and_restore_TestBackupReinstallRestoreWithDNS: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNS -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_backup_and_restore_TestBackupAndRestoreWithKRA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithKRA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_backup_and_restore_TestBackupReinstallRestoreWithKRA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithKRA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_backup_and_restore_TestBackupAndRestoreWithReplica: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithReplica -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_2repl_1client -- -- testing-fedora/test_backup_and_restore_TestBackupAndRestoreDMPassword: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreDMPassword -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_backup_and_restore_TestReplicaInstallAfterRestore: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestReplicaInstallAfterRestore -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_2repl_1client -- -- testing-fedora/test_backup_and_restore_TestBackupRoles: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestBackupRoles -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_dnssec: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_dnssec.py -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_2repl_1client -- -- testing-fedora/test_replica_promotion_TestReplicaPromotionLevel1: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_replica_promotion.py::TestReplicaPromotionLevel1 -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_replica_promotion_TestUnprivilegedUserPermissions: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_replica_promotion.py::TestUnprivilegedUserPermissions -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_replica_promotion_TestProhibitReplicaUninstallation: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_replica_promotion.py::TestProhibitReplicaUninstallation -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_2repl_1client -- -- testing-fedora/test_replica_promotion_TestWrongClientDomain: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_replica_promotion.py::TestWrongClientDomain -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_replica_promotion_TestRenewalMaster: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_replica_promotion.py::TestRenewalMaster -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_replica_promotion_TestReplicaInstallWithExistingEntry: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallWithExistingEntry -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_replica_promotion_TestSubCAkeyReplication: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_replica_promotion.py::TestSubCAkeyReplication -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_replica_promotion_TestReplicaInstallCustodia: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallCustodia -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_2repl_1client -- -- testing-fedora/test_replica_promotion_TestReplicaInForwardZone: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_replica_promotion.py::TestReplicaInForwardZone -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_replica_promotion_TestHiddenReplicaPromotion: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaPromotion -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_2repl_1client -- -- testing-fedora/test_replica_promotion_TestHiddenReplicaKRA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaKRA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_2repl_1client -- -- testing-fedora/test_upgrade: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_upgrade.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_topology_TestCASpecificRUVs: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_topology.py::TestCASpecificRUVs -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- testing-fedora/test_topology_TestTopologyOptions: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_topology.py::TestTopologyOptions -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- testing-fedora/test_replication_layouts_TestLineTopologyWithoutCA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithoutCA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- testing-fedora/test_replication_layouts_TestLineTopologyWithCA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCA -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_replication_layouts_TestLineTopologyWithCAKRA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCAKRA -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_replication_layouts.py_TestStarTopologyWithoutCA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithoutCA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- testing-fedora/test_replication_layouts_TestStarTopologyWithCA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- testing-fedora/test_replication_layouts_TestStarTopologyWithCAKRA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCAKRA -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_replication_layouts_TestCompleteTopologyWithoutCA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithoutCA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- testing-fedora/test_replication_layouts_TestCompleteTopologyWithCA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- testing-fedora/test_replication_layouts_TestCompleteTopologyWithCAKRA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCAKRA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- testing-fedora/test_client_uninstallation: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_uninstallation.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl_1client -- -- testing-fedora/test_installation_client: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation_client.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_3client -- -- testing-fedora/test_user_permissions: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_user_permissions.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl_1client -- -- testing-fedora/test_webui_cert: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_webui/test_cert.py -- template: *ci-master-latest -- timeout: 2400 -- topology: *ipaserver -- -- testing-fedora/test_webui_general: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: >- -- test_webui/test_loginscreen.py -- test_webui/test_misc_cases.py -- test_webui/test_navigation.py -- test_webui/test_translation.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *ipaserver -- -- testing-fedora/test_webui_host: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_webui/test_host.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *ipaserver -- -- testing-fedora/test_webui_host_net_groups: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: >- -- test_webui/test_hostgroup.py -- test_webui/test_netgroup.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *ipaserver -- -- testing-fedora/test_webui_identity: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: >- -- test_webui/test_automember.py -- test_webui/test_idviews.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *ipaserver -- -- testing-fedora/test_webui_network: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: >- -- test_webui/test_automount.py -- test_webui/test_dns.py -- test_webui/test_vault.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *ipaserver -- -- testing-fedora/test_webui_policy: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: >- -- test_webui/test_hbac.py -- test_webui/test_krbtpolicy.py -- test_webui/test_pwpolicy.py -- test_webui/test_selinuxusermap.py -- test_webui/test_sudo.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *ipaserver -- -- testing-fedora/test_webui_rbac: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: >- -- test_webui/test_delegation.py -- test_webui/test_rbac.py -- test_webui/test_selfservice.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *ipaserver -- -- testing-fedora/test_webui_server: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: >- -- test_webui/test_config.py -- test_webui/test_range.py -- test_webui/test_realmdomains.py -- test_webui/test_topology.py -- test_webui/test_trust.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *ipaserver -- -- testing-fedora/test_webui_service: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_webui/test_service.py -- template: *ci-master-latest -- timeout: 2400 -- topology: *ipaserver -- -- testing-fedora/test_webui_users: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: >- -- test_webui/test_group.py -- test_webui/test_user.py -- template: *ci-master-latest -- timeout: 4800 -- topology: *ipaserver -- -- testing-fedora/test_webui_subid: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_webui/test_subid.py -- template: *ci-master-latest -- timeout: 2400 -- topology: *ipaserver -- -- testing-fedora/customized_ds_config_install: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_customized_ds_config_install.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/dns_locations: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_dns_locations.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_2repl_1client -- -- testing-fedora/external_ca_TestExternalCAdirsrvStop: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_external_ca.py::TestExternalCAdirsrvStop -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/external_ca_TestExternalCAInvalidCert: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_external_ca.py::TestExternalCAInvalidCert test_integration/test_external_ca.py::TestExternalCAInvalidIntermediate -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/external_ca_TestMultipleExternalCA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_external_ca.py::TestMultipleExternalCA -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_ipahealthcheck: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheck -- template: *ci-master-latest -- topology: *master_1repl_1client -- timeout: 5400 -- -- testing-fedora/test_ipahealthcheck_nodns_extca_file: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithoutDNS test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithExternalCA test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFileCheck -- template: *ci-master-latest -- topology: *master_1repl -- timeout: 5400 -- -- testing-fedora/test_ipahealthcheck_cli_fsspace: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCLI test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFilesystemSpace -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_ipahealthcheck_adtrust: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunADTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithADtrust -- template: *ci-master-latest -- timeout: 4800 -- topology: *adroot_adchild_adtree_master_1client -- -- testing-fedora/test_ntp_options: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_ntp_options.py::TestNTPoptions -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl_1client -- -- testing-fedora/test_otp: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_otp.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_pkinit_manage: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_pkinit_manage.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_pki_config_override: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_pki_config_override.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- --# testing-fedora/nfs: --# requires: [testing-fedora/build] --# priority: 50 --# job: --# class: RunPytest --# args: --# build_url: '{testing-fedora/build_url}' --# update_packages: True --# enable_testing_repo: True --# test_suite: test_integration/test_nfs.py::TestNFS --# template: *ci-master-latest --# timeout: 9000 --# topology: *master_3client -- -- testing-fedora/nfs_nsswitch_restore: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_nfs.py::TestIpaClientAutomountFileRestore -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_3client -- -- testing-fedora/mask: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestMaskInstall -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/hostname_validator: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestHostnameValidator -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/automember: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_automember.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_crlgen_manage: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_crlgen_manage.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_integration_TestIPANotConfigured: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_cli_ipa_not_configured.py::TestIPANotConfigured -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl -- -- testing-fedora/test_sssd: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunADTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_sssd.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *adroot_adchild_adtree_master_1client -- -- testing-fedora/test_ca_custom_sdn: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_ca_custom_sdn.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_membermanager: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_membermanager.py -- template: *ci-master-latest -- timeout: 1800 -- topology: *master_1repl -- -- testing-fedora/krbtpolicy: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_krbtpolicy.py -- template: *ci-master-latest -- timeout: 4800 -- topology: *master_1repl -- -- testing-fedora/test_winsyncmigrate: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunADTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_winsyncmigrate.py -- template: *ci-master-latest -- timeout: 4800 -- topology: *ad_master -- -- testing-fedora/test_trust: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunADTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_trust.py -- template: *ci-master-latest -- timeout: 10000 -- topology: *adroot_adchild_adtree_master_1client -- -- testing-fedora/test_backup_and_restore_TestBackupAndRestoreTrust: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreTrust -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_adtrust_install: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_adtrust_install.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_cert: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_cert.py -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl_1client -- -- testing-fedora/test_epn: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_epn.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3client -- -- testing-fedora/test_acme: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_acme.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl_1client -- -- testing-fedora/test_dns: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_dns.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_pwpolicy: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_pwpolicy.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_cert_fix: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_ipa_cert_fix.py -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl -- -- testing-fedora/test_subids: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_subids.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_custom_plugins: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_custom_plugins.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_external_idp: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_idp.py -- template: *ci-master-latest -- timeout: 5000 -- topology: *master_2repl_1client -- -- testing-fedora/test_random_serial_numbers_TestInstallWithCA_DNS1_RSN: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_DNS1_RSN -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_random_serial_numbers_TestInstallWithCA_KRA1_RSN: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_KRA1_RSN -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_random_serial_numbers_test_commands_RSN: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_random_serial_numbers.py::TestIPACommand_RSN::test_certificate_out_write_to_file -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl_1client -- -- testing-fedora/test_caless_TestServerCALessToExternalCA_RSN: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- enable_testing_repo: True -- test_suite: test_integration/test_random_serial_numbers.py::TestServerCALessToExternalCA_RSN -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl -diff --git a/ipatests/prci_definitions/nightly_latest_testing_selinux.yaml b/ipatests/prci_definitions/nightly_latest_testing_selinux.yaml -deleted file mode 100644 -index f44b92c6cdd5971f22e808bdd5f10d16409b6452..0000000000000000000000000000000000000000 ---- a/ipatests/prci_definitions/nightly_latest_testing_selinux.yaml -+++ /dev/null -@@ -1,2259 +0,0 @@ --topologies: -- build: &build -- name: build -- cpu: 2 -- memory: 3800 -- master_3client: &master_3client -- name: master_3client -- cpu: 5 -- memory: 10150 -- master_1repl: &master_1repl -- name: master_1repl -- cpu: 4 -- memory: 6450 -- master_1repl_1client: &master_1repl_1client -- name: master_1repl_1client -- cpu: 4 -- memory: 7400 -- ipaserver: &ipaserver -- name: ipaserver -- cpu: 2 -- memory: 2400 -- master_2repl_1client: &master_2repl_1client -- name: master_2repl_1client -- cpu: 5 -- memory: 10150 -- master_3repl_1client: &master_3repl_1client -- name: master_3repl_1client -- cpu: 6 -- memory: 12900 -- ad_master_2client: &ad_master_2client -- name: ad_master_2client -- cpu: 4 -- memory: 12000 -- ad_master: &ad_master -- name: ad_master -- cpu: 4 -- memory: 12000 -- adroot_adchild_adtree_master_1client: &adroot_adchild_adtree_master_1client -- name: adroot_adchild_adtree_master_1client -- cpu: 8 -- memory: 14500 -- --jobs: -- testing-fedora/build: -- requires: [] -- priority: 100 -- job: -- class: Build -- args: -- enable_testing_repo: True -- git_repo: '{git_repo}' -- git_refspec: '{git_refspec}' -- template: &ci-master-latest -- name: freeipa/ci-master-f36 -- version: 0.0.7 -- timeout: 1800 -- topology: *build -- -- testing-fedora/simple_replication: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_simple_replication.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_external_ca_TestExternalCA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_external_ca.py::TestExternalCA test_integration/test_external_ca.py::TestExternalCAConstraints -- template: *ci-master-latest -- timeout: 4800 -- topology: *master_1repl_1client -- -- testing-fedora/test_external_ca_TestSelfExternalSelf: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_external_ca.py::TestSelfExternalSelf test_integration/test_external_ca.py::TestExternalCAInstall -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/external_ca_templates: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_external_ca.py::TestExternalCAProfileScenarios -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_topologies: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_topologies.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_sudo: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_sudo.py -- template: *ci-master-latest -- timeout: 4800 -- topology: *master_1repl_1client -- -- testing-fedora/test_commands: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_commands.py -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl_1client -- -- testing-fedora/test_kerberos_flags: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_kerberos_flags.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl_1client -- -- testing-fedora/test_http_kdc_proxy: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunADTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_http_kdc_proxy.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *ad_master_2client -- -- testing-fedora/test_fips: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_fips.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl_1client -- -- testing-fedora/test_forced_client_enrolment: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_forced_client_reenrollment.py -- template: *ci-master-latest -- timeout: 4800 -- topology: *master_1repl_1client -- -- testing-fedora/test_advise: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_advise.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl_1client -- -- testing-fedora/test_testconfig: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_testconfig.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_service_permissions: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_service_permissions.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_netgroup: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_netgroup.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_vault: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_vault.py -- template: *ci-master-latest -- timeout: 6300 -- topology: *master_1repl -- -- testing-fedora/test_authconfig: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_authselect.py -- template: *ci-master-latest -- timeout: 4800 -- topology: *master_1repl_1client -- -- testing-fedora/test_smb: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunADTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_smb.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *ad_master_2client -- -- testing-fedora/test_server_del: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_server_del.py -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_2repl_1client -- -- testing-fedora/test_installation_TestInstallWithCA1: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallWithCA1 -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_installation_TestInstallWithCA2: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallWithCA2 -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_installation_TestInstallCA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallCA -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_2repl_1client -- -- testing-fedora/test_installation_TestInstallWithCA_KRA1: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA1 -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_installation_TestInstallWithCA_KRA2: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA2 -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_installation_TestInstallWithCA_DNS1: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS1 -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_installation_TestInstallWithCA_DNS2: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS2 -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_installation_TestInstallWithCA_DNS3: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS3 -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_installation_TestInstallWithCA_DNS4: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS4 -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_installation_TestInstallWithCA_KRA_DNS1: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS1 -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_installation_TestInstallWithCA_KRA_DNS2: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS2 -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_installation_TestInstallMaster: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallMaster -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl -- -- testing-fedora/test_installation_TestInstallMasterKRA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallMasterKRA -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl -- -- testing-fedora/test_installation_TestInstallMasterDNS: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallMasterDNS -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl -- -- testing-fedora/test_installation_TestInstallMasterDNSRepeatedly: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallMasterDNSRepeatedly -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl -- -- testing-fedora/test_installation_TestInstallMasterReservedIPasForwarder: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallMasterReservedIPasForwarder -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl -- -- testing-fedora/test_installation_TestInstallMasterReplica: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallMasterReplica -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl -- -- testing-fedora/test_installation_TestInstallReplicaAgainstSpecificServer: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallReplicaAgainstSpecificServer -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_2repl_1client -- -- testing-fedora/test_installation_TestADTrustInstall: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestADTrustInstall -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_2repl_1client -- -- testing-fedora/test_installation_TestADTrustInstallWithDNS_KRA_ADTrust: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestADTrustInstallWithDNS_KRA_ADTrust -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_2repl_1client -- -- testing-fedora/test_installation_TestKRAinstallAfterCertRenew: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestKRAinstallAfterCertRenew -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl -- -- testing-fedora/test_installation_TestInstallWithoutSudo: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallWithoutSudo -- template: *ci-master-latest -- timeout: 4800 -- topology: *master_1repl_1client -- -- testing-fedora/test_installation_TestInstallWithoutNamed: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallWithoutNamed -- template: *ci-master-latest -- timeout: 4800 -- topology: *master_1repl -- -- testing-fedora/test_installation_TestInstallwithSHA384withRSA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestInstallwithSHA384withRSA -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_idviews: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunADTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_idviews.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *ad_master_2client -- -- testing-fedora/test_caless_TestServerInstall: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_caless.py::TestServerInstall -- template: *ci-master-latest -- timeout: 12000 -- topology: *master_1repl -- -- testing-fedora/test_caless_TestReplicaInstall: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_caless.py::TestReplicaInstall -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_caless_TestClientInstall: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_caless.py::TestClientInstall -- template: *ci-master-latest -- timeout: 5400 -- # actually master_1client -- topology: *master_1repl_1client -- -- testing-fedora/test_caless_TestIPACommands: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_caless.py::TestIPACommands -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl -- -- testing-fedora/test_caless_TestCertInstall: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_caless.py::TestCertInstall -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl -- -- testing-fedora/test_caless_TestPKINIT: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_caless.py::TestPKINIT -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl -- -- testing-fedora/test_caless_TestServerReplicaCALessToCAFull: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_caless.py::TestServerReplicaCALessToCAFull -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl -- -- testing-fedora/test_caless_TestReplicaCALessToCAFull: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_caless.py::TestReplicaCALessToCAFull -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl -- -- testing-fedora/test_caless_TestServerCALessToExternalCA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_caless.py::TestServerCALessToExternalCA -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl -- -- testing-fedora/test_backup_and_restore_TestUserRootFilesOwnershipPermission: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestUserRootFilesOwnershipPermission -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_backup_and_restore_TestBackupAndRestore: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestore -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_backup_and_restore_TestBackupAndRestoreWithDNSSEC: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNSSEC -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_backup_and_restore_TestBackupReinstallRestoreWithDNSSEC: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNSSEC -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_backup_and_restore_TestBackupAndRestoreWithDNS: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNS -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_backup_and_restore_TestBackupReinstallRestoreWithDNS: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNS -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_backup_and_restore_TestBackupAndRestoreWithKRA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithKRA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_backup_and_restore_TestBackupReinstallRestoreWithKRA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithKRA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_backup_and_restore_TestBackupAndRestoreWithReplica: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithReplica -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_2repl_1client -- -- testing-fedora/test_backup_and_restore_TestBackupAndRestoreDMPassword: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreDMPassword -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_backup_and_restore_TestReplicaInstallAfterRestore: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestReplicaInstallAfterRestore -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_2repl_1client -- -- testing-fedora/test_backup_and_restore_TestBackupRoles: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestBackupRoles -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_dnssec: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_dnssec.py -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_2repl_1client -- -- testing-fedora/test_replica_promotion_TestReplicaPromotionLevel1: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_replica_promotion.py::TestReplicaPromotionLevel1 -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_replica_promotion_TestUnprivilegedUserPermissions: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_replica_promotion.py::TestUnprivilegedUserPermissions -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_replica_promotion_TestProhibitReplicaUninstallation: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_replica_promotion.py::TestProhibitReplicaUninstallation -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_2repl_1client -- -- testing-fedora/test_replica_promotion_TestWrongClientDomain: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_replica_promotion.py::TestWrongClientDomain -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_replica_promotion_TestRenewalMaster: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_replica_promotion.py::TestRenewalMaster -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_replica_promotion_TestReplicaInstallWithExistingEntry: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallWithExistingEntry -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_replica_promotion_TestSubCAkeyReplication: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_replica_promotion.py::TestSubCAkeyReplication -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_replica_promotion_TestReplicaInstallCustodia: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallCustodia -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_2repl_1client -- -- testing-fedora/test_replica_promotion_TestReplicaInForwardZone: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_replica_promotion.py::TestReplicaInForwardZone -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_replica_promotion_TestHiddenReplicaPromotion: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaPromotion -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_2repl_1client -- -- testing-fedora/test_replica_promotion_TestHiddenReplicaKRA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaKRA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_2repl_1client -- -- testing-fedora/test_upgrade: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_upgrade.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_topology_TestCASpecificRUVs: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_topology.py::TestCASpecificRUVs -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- testing-fedora/test_topology_TestTopologyOptions: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_topology.py::TestTopologyOptions -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- testing-fedora/test_replication_layouts_TestLineTopologyWithoutCA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithoutCA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- testing-fedora/test_replication_layouts_TestLineTopologyWithCA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCA -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_replication_layouts_TestLineTopologyWithCAKRA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCAKRA -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_replication_layouts.py_TestStarTopologyWithoutCA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithoutCA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- testing-fedora/test_replication_layouts_TestStarTopologyWithCA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- testing-fedora/test_replication_layouts_TestStarTopologyWithCAKRA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCAKRA -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_replication_layouts_TestCompleteTopologyWithoutCA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithoutCA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- testing-fedora/test_replication_layouts_TestCompleteTopologyWithCA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- testing-fedora/test_replication_layouts_TestCompleteTopologyWithCAKRA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCAKRA -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3repl_1client -- -- testing-fedora/test_client_uninstallation: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_uninstallation.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl_1client -- -- testing-fedora/test_installation_client: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation_client.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_3client -- -- testing-fedora/test_user_permissions: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_user_permissions.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl_1client -- -- testing-fedora/test_webui_cert: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_webui/test_cert.py -- template: *ci-master-latest -- timeout: 2400 -- topology: *ipaserver -- -- testing-fedora/test_webui_general: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: >- -- test_webui/test_loginscreen.py -- test_webui/test_misc_cases.py -- test_webui/test_navigation.py -- test_webui/test_translation.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *ipaserver -- -- testing-fedora/test_webui_host: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_webui/test_host.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *ipaserver -- -- testing-fedora/test_webui_host_net_groups: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: >- -- test_webui/test_hostgroup.py -- test_webui/test_netgroup.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *ipaserver -- -- testing-fedora/test_webui_identity: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: >- -- test_webui/test_automember.py -- test_webui/test_idviews.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *ipaserver -- -- testing-fedora/test_webui_network: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: >- -- test_webui/test_automount.py -- test_webui/test_dns.py -- test_webui/test_vault.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *ipaserver -- -- testing-fedora/test_webui_policy: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: >- -- test_webui/test_hbac.py -- test_webui/test_krbtpolicy.py -- test_webui/test_pwpolicy.py -- test_webui/test_selinuxusermap.py -- test_webui/test_sudo.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *ipaserver -- -- testing-fedora/test_webui_rbac: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: >- -- test_webui/test_delegation.py -- test_webui/test_rbac.py -- test_webui/test_selfservice.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *ipaserver -- -- testing-fedora/test_webui_server: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: >- -- test_webui/test_config.py -- test_webui/test_range.py -- test_webui/test_realmdomains.py -- test_webui/test_topology.py -- test_webui/test_trust.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *ipaserver -- -- testing-fedora/test_webui_service: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_webui/test_service.py -- template: *ci-master-latest -- timeout: 2400 -- topology: *ipaserver -- -- testing-fedora/test_webui_users: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: >- -- test_webui/test_group.py -- test_webui/test_user.py -- template: *ci-master-latest -- timeout: 4800 -- topology: *ipaserver -- -- testing-fedora/test_webui_subid: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_webui/test_subid.py -- template: *ci-master-latest -- timeout: 2400 -- topology: *ipaserver -- -- testing-fedora/customized_ds_config_install: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_customized_ds_config_install.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/dns_locations: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_dns_locations.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_2repl_1client -- -- testing-fedora/external_ca_TestExternalCAdirsrvStop: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_external_ca.py::TestExternalCAdirsrvStop -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/external_ca_TestExternalCAInvalidCert: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_external_ca.py::TestExternalCAInvalidCert test_integration/test_external_ca.py::TestExternalCAInvalidIntermediate -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/external_ca_TestMultipleExternalCA: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_external_ca.py::TestMultipleExternalCA -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_ipahealthcheck: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheck -- template: *ci-master-latest -- topology: *master_1repl_1client -- timeout: 5400 -- -- testing-fedora/test_ipahealthcheck_nodns_extca_file: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithoutDNS test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithExternalCA test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFileCheck -- template: *ci-master-latest -- topology: *master_1repl -- timeout: 5400 -- -- testing-fedora/test_ipahealthcheck_cli_fsspace: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCLI test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFilesystemSpace -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_ipahealthcheck_adtrust: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunADTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithADtrust -- template: *ci-master-latest -- timeout: 4800 -- topology: *adroot_adchild_adtree_master_1client -- -- testing-fedora/test_ntp_options: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_ntp_options.py::TestNTPoptions -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl_1client -- -- testing-fedora/test_otp: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_otp.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_pkinit_manage: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_pkinit_manage.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_pki_config_override: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_pki_config_override.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- --# testing-fedora/nfs: --# requires: [testing-fedora/build] --# priority: 50 --# job: --# class: RunPytest --# args: --# build_url: '{testing-fedora/build_url}' --# update_packages: True --# selinux_enforcing: True --# enable_testing_repo: True --# test_suite: test_integration/test_nfs.py::TestNFS --# template: *ci-master-latest --# timeout: 9000 --# topology: *master_3client -- -- testing-fedora/nfs_nsswitch_restore: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_nfs.py::TestIpaClientAutomountFileRestore -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_3client -- -- testing-fedora/mask: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestMaskInstall -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/hostname_validator: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_installation.py::TestHostnameValidator -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/automember: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_automember.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_crlgen_manage: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_crlgen_manage.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_integration_TestIPANotConfigured: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_cli_ipa_not_configured.py::TestIPANotConfigured -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl -- -- testing-fedora/test_sssd: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunADTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_sssd.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *adroot_adchild_adtree_master_1client -- -- testing-fedora/test_ca_custom_sdn: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_ca_custom_sdn.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_membermanager: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_membermanager.py -- template: *ci-master-latest -- timeout: 1800 -- topology: *master_1repl -- -- testing-fedora/krbtpolicy: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_krbtpolicy.py -- template: *ci-master-latest -- timeout: 4800 -- topology: *master_1repl -- -- testing-fedora/test_winsyncmigrate: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunADTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_winsyncmigrate.py -- template: *ci-master-latest -- timeout: 4800 -- topology: *ad_master -- -- testing-fedora/test_trust: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunADTests -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_trust.py -- template: *ci-master-latest -- timeout: 10000 -- topology: *adroot_adchild_adtree_master_1client -- -- testing-fedora/test_backup_and_restore_TestBackupAndRestoreTrust: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreTrust -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl -- -- testing-fedora/test_adtrust_install: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_adtrust_install.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_cert: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_cert.py -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl_1client -- -- testing-fedora/test_epn: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_epn.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_3client -- -- testing-fedora/test_acme: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_acme.py -- template: *ci-master-latest -- timeout: 7200 -- topology: *master_1repl_1client -- -- testing-fedora/test_dns: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_dns.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_pwpolicy: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- build_url: '{testing-fedora/build_url}' -- test_suite: test_integration/test_pwpolicy.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_cert_fix: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_ipa_cert_fix.py -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_1repl -- -- testing-fedora/test_subids: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_subids.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_custom_plugins: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_custom_plugins.py -- template: *ci-master-latest -- timeout: 3600 -- topology: *master_1repl -- -- testing-fedora/test_external_idp: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_idp.py -- template: *ci-master-latest -- timeout: 5000 -- topology: *master_2repl_1client -- -- testing-fedora/test_random_serial_numbers_TestInstallWithCA_DNS1_RSN: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_DNS1_RSN -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_random_serial_numbers_TestInstallWithCA_KRA1_RSN: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_KRA1_RSN -- template: *ci-master-latest -- timeout: 10800 -- topology: *master_3repl_1client -- -- testing-fedora/test_random_serial_numbers_test_commands_RSN: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_random_serial_numbers.py::TestIPACommand_RSN::test_certificate_out_write_to_file -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl_1client -- -- testing-fedora/test_caless_TestServerCALessToExternalCA_RSN: -- requires: [testing-fedora/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{testing-fedora/build_url}' -- update_packages: True -- selinux_enforcing: True -- enable_testing_repo: True -- test_suite: test_integration/test_random_serial_numbers.py::TestServerCALessToExternalCA_RSN -- template: *ci-master-latest -- timeout: 5400 -- topology: *master_1repl -diff --git a/ipatests/prci_definitions/nightly_previous.yaml b/ipatests/prci_definitions/nightly_previous.yaml -deleted file mode 100644 -index 8e7ccef18bbbee4200cf3868bffc7c2b50dde0c8..0000000000000000000000000000000000000000 ---- a/ipatests/prci_definitions/nightly_previous.yaml -+++ /dev/null -@@ -1,1823 +0,0 @@ --topologies: -- build: &build -- name: build -- cpu: 2 -- memory: 3800 -- master_3client: &master_3client -- name: master_3client -- cpu: 5 -- memory: 10150 -- master_1repl: &master_1repl -- name: master_1repl -- cpu: 4 -- memory: 6450 -- master_1repl_1client: &master_1repl_1client -- name: master_1repl_1client -- cpu: 4 -- memory: 7400 -- ipaserver: &ipaserver -- name: ipaserver -- cpu: 2 -- memory: 2400 -- master_2repl_1client: &master_2repl_1client -- name: master_2repl_1client -- cpu: 5 -- memory: 10150 -- master_3repl_1client: &master_3repl_1client -- name: master_3repl_1client -- cpu: 6 -- memory: 12900 -- ad_master_2client: &ad_master_2client -- name: ad_master_2client -- cpu: 4 -- memory: 12000 -- ad_master: &ad_master -- name: ad_master -- cpu: 4 -- memory: 12000 -- adroot_adchild_adtree_master_1client: &adroot_adchild_adtree_master_1client -- name: adroot_adchild_adtree_master_1client -- cpu: 8 -- memory: 14500 -- --jobs: -- fedora-previous/build: -- requires: [] -- priority: 100 -- job: -- class: Build -- args: -- git_repo: '{git_repo}' -- git_refspec: '{git_refspec}' -- template: &ci-master-previous -- name: freeipa/ci-master-f35 -- version: 0.0.7 -- timeout: 1800 -- topology: *build -- -- fedora-previous/simple_replication: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_simple_replication.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/test_external_ca_TestExternalCA: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_external_ca.py::TestExternalCA test_integration/test_external_ca.py::TestExternalCAConstraints -- template: *ci-master-previous -- timeout: 4800 -- topology: *master_1repl_1client -- -- fedora-previous/test_external_ca_TestSelfExternalSelf: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_external_ca.py::TestSelfExternalSelf test_integration/test_external_ca.py::TestExternalCAInstall -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/external_ca_templates: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_external_ca.py::TestExternalCAProfileScenarios -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/test_topologies: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_topologies.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/test_sudo: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_sudo.py -- template: *ci-master-previous -- timeout: 4800 -- topology: *master_1repl_1client -- -- fedora-previous/test_commands: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_commands.py -- template: *ci-master-previous -- timeout: 5400 -- topology: *master_1repl_1client -- -- fedora-previous/test_kerberos_flags: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_kerberos_flags.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl_1client -- -- fedora-previous/test_http_kdc_proxy: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunADTests -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_http_kdc_proxy.py -- template: *ci-master-previous -- timeout: 7200 -- topology: *ad_master_2client -- -- fedora-previous/test_fips: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_fips.py -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_1repl_1client -- -- fedora-previous/test_forced_client_enrolment: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_forced_client_reenrollment.py -- template: *ci-master-previous -- timeout: 4800 -- topology: *master_1repl_1client -- -- fedora-previous/test_advise: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_advise.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl_1client -- -- fedora-previous/test_testconfig: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_testconfig.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/test_service_permissions: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_service_permissions.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/test_netgroup: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_netgroup.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/test_vault: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_vault.py -- template: *ci-master-previous -- timeout: 6300 -- topology: *master_1repl -- -- fedora-previous/test_authconfig: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_authselect.py -- template: *ci-master-previous -- timeout: 4800 -- topology: *master_1repl_1client -- -- fedora-previous/test_smb: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunADTests -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_smb.py -- template: *ci-master-previous -- timeout: 7200 -- topology: *ad_master_2client -- -- fedora-previous/test_server_del: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_server_del.py -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_2repl_1client -- -- fedora-previous/test_installation_TestInstallWithCA1: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestInstallWithCA1 -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_3repl_1client -- -- fedora-previous/test_installation_TestInstallWithCA2: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestInstallWithCA2 -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_3repl_1client -- -- fedora-previous/test_installation_TestInstallCA: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestInstallCA -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_2repl_1client -- -- fedora-previous/test_installation_TestInstallWithCA_KRA1: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA1 -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_3repl_1client -- -- fedora-previous/test_installation_TestInstallWithCA_KRA2: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA2 -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_3repl_1client -- -- fedora-previous/test_installation_TestInstallWithCA_DNS1: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS1 -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_3repl_1client -- -- fedora-previous/test_installation_TestInstallWithCA_DNS2: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS2 -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_3repl_1client -- -- fedora-previous/test_installation_TestInstallWithCA_DNS3: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS3 -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/test_installation_TestInstallWithCA_DNS4: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS4 -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/test_installation_TestInstallWithCA_KRA_DNS1: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS1 -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_3repl_1client -- -- fedora-previous/test_installation_TestInstallWithCA_KRA_DNS2: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS2 -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_3repl_1client -- -- fedora-previous/test_installation_TestInstallMaster: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestInstallMaster -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_1repl -- -- fedora-previous/test_installation_TestInstallMasterKRA: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestInstallMasterKRA -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_1repl -- -- fedora-previous/test_installation_TestInstallMasterDNS: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestInstallMasterDNS -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_1repl -- -- fedora-previous/test_installation_TestInstallMasterDNSRepeatedly: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestInstallMasterDNSRepeatedly -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_1repl -- -- fedora-previous/test_installation_TestInstallMasterReservedIPasForwarder: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestInstallMasterReservedIPasForwarder -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_1repl -- -- fedora-previous/test_installation_TestInstallMasterReplica: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestInstallMasterReplica -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_1repl -- -- fedora-previous/test_installation_TestInstallReplicaAgainstSpecificServer: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestInstallReplicaAgainstSpecificServer -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_2repl_1client -- -- fedora-previous/test_installation_TestADTrustInstall: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestADTrustInstall -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_2repl_1client -- -- fedora-previous/test_installation_TestADTrustInstallWithDNS_KRA_ADTrust: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestADTrustInstallWithDNS_KRA_ADTrust -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_2repl_1client -- -- fedora-previous/test_installation_TestKRAinstallAfterCertRenew: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestKRAinstallAfterCertRenew -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_1repl -- -- fedora-previous/test_installation_TestInstallWithoutSudo: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestInstallWithoutSudo -- template: *ci-master-previous -- timeout: 4800 -- topology: *master_1repl_1client -- -- fedora-previous/test_installation_TestInstallWithoutNamed: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestInstallWithoutNamed -- template: *ci-master-previous -- timeout: 4800 -- topology: *master_1repl -- -- fedora-previous/test_installation_TestInstallwithSHA384withRSA: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestInstallwithSHA384withRSA -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/test_idviews: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunADTests -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_idviews.py -- template: *ci-master-previous -- timeout: 7200 -- topology: *ad_master_2client -- -- fedora-previous/test_caless_TestServerInstall: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_caless.py::TestServerInstall -- template: *ci-master-previous -- timeout: 12000 -- topology: *master_1repl -- -- fedora-previous/test_caless_TestReplicaInstall: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_caless.py::TestReplicaInstall -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_1repl -- -- fedora-previous/test_caless_TestClientInstall: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_caless.py::TestClientInstall -- template: *ci-master-previous -- timeout: 5400 -- # actually master_1client -- topology: *master_1repl_1client -- -- fedora-previous/test_caless_TestIPACommands: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_caless.py::TestIPACommands -- template: *ci-master-previous -- timeout: 5400 -- topology: *master_1repl -- -- fedora-previous/test_caless_TestCertInstall: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_caless.py::TestCertInstall -- template: *ci-master-previous -- timeout: 5400 -- topology: *master_1repl -- -- fedora-previous/test_caless_TestPKINIT: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_caless.py::TestPKINIT -- template: *ci-master-previous -- timeout: 5400 -- topology: *master_1repl -- -- fedora-previous/test_caless_TestServerReplicaCALessToCAFull: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_caless.py::TestServerReplicaCALessToCAFull -- template: *ci-master-previous -- timeout: 5400 -- topology: *master_1repl -- -- fedora-previous/test_caless_TestReplicaCALessToCAFull: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_caless.py::TestReplicaCALessToCAFull -- template: *ci-master-previous -- timeout: 5400 -- topology: *master_1repl -- -- fedora-previous/test_caless_TestServerCALessToExternalCA: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_caless.py::TestServerCALessToExternalCA -- template: *ci-master-previous -- timeout: 5400 -- topology: *master_1repl -- -- fedora-previous/test_backup_and_restore_TestUserRootFilesOwnershipPermission: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_backup_and_restore.py::TestUserRootFilesOwnershipPermission -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_1repl -- -- fedora-previous/test_backup_and_restore_TestBackupAndRestore: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestore -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_1repl -- -- fedora-previous/test_backup_and_restore_TestBackupAndRestoreWithDNSSEC: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNSSEC -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_1repl -- -- fedora-previous/test_backup_and_restore_TestBackupReinstallRestoreWithDNSSEC: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNSSEC -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_1repl -- -- fedora-previous/test_backup_and_restore_TestBackupAndRestoreWithDNS: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNS -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_1repl -- -- fedora-previous/test_backup_and_restore_TestBackupReinstallRestoreWithDNS: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNS -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_1repl -- -- fedora-previous/test_backup_and_restore_TestBackupAndRestoreWithKRA: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithKRA -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_1repl -- -- fedora-previous/test_backup_and_restore_TestBackupReinstallRestoreWithKRA: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithKRA -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_1repl -- -- fedora-previous/test_backup_and_restore_TestBackupAndRestoreWithReplica: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithReplica -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_2repl_1client -- -- fedora-previous/test_backup_and_restore_TestBackupAndRestoreDMPassword: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreDMPassword -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_1repl -- -- fedora-previous/test_backup_and_restore_TestReplicaInstallAfterRestore: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_backup_and_restore.py::TestReplicaInstallAfterRestore -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_2repl_1client -- -- fedora-previous/test_backup_and_restore_TestBackupRoles: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_backup_and_restore.py::TestBackupRoles -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_1repl -- -- fedora-previous/test_dnssec: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_dnssec.py -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_2repl_1client -- -- fedora-previous/test_replica_promotion_TestReplicaPromotionLevel1: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_replica_promotion.py::TestReplicaPromotionLevel1 -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_1repl -- -- fedora-previous/test_replica_promotion_TestUnprivilegedUserPermissions: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_replica_promotion.py::TestUnprivilegedUserPermissions -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_1repl -- -- fedora-previous/test_replica_promotion_TestProhibitReplicaUninstallation: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_replica_promotion.py::TestProhibitReplicaUninstallation -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_2repl_1client -- -- fedora-previous/test_replica_promotion_TestWrongClientDomain: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_replica_promotion.py::TestWrongClientDomain -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_1repl -- -- fedora-previous/test_replica_promotion_TestRenewalMaster: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_replica_promotion.py::TestRenewalMaster -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_1repl -- -- fedora-previous/test_replica_promotion_TestReplicaInstallWithExistingEntry: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallWithExistingEntry -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_1repl -- -- fedora-previous/test_replica_promotion_TestSubCAkeyReplication: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_replica_promotion.py::TestSubCAkeyReplication -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_1repl -- -- fedora-previous/test_replica_promotion_TestReplicaInstallCustodia: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallCustodia -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_2repl_1client -- -- fedora-previous/test_replica_promotion_TestReplicaInForwardZone: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_replica_promotion.py::TestReplicaInForwardZone -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_1repl -- -- fedora-previous/test_replica_promotion_TestHiddenReplicaPromotion: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaPromotion -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_2repl_1client -- -- fedora-previous/test_replica_promotion_TestHiddenReplicaKRA: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaKRA -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_2repl_1client -- -- fedora-previous/test_upgrade: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_upgrade.py -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_1repl -- -- fedora-previous/test_topology_TestCASpecificRUVs: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_topology.py::TestCASpecificRUVs -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_3repl_1client -- -- fedora-previous/test_topology_TestTopologyOptions: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_topology.py::TestTopologyOptions -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_3repl_1client -- -- fedora-previous/test_replication_layouts_TestLineTopologyWithoutCA: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithoutCA -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_3repl_1client -- -- fedora-previous/test_replication_layouts_TestLineTopologyWithCA: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCA -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_3repl_1client -- -- fedora-previous/test_replication_layouts_TestLineTopologyWithCAKRA: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCAKRA -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_3repl_1client -- -- fedora-previous/test_replication_layouts.py_TestStarTopologyWithoutCA: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithoutCA -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_3repl_1client -- -- fedora-previous/test_replication_layouts_TestStarTopologyWithCA: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCA -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_3repl_1client -- -- fedora-previous/test_replication_layouts_TestStarTopologyWithCAKRA: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCAKRA -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_3repl_1client -- -- fedora-previous/test_replication_layouts_TestCompleteTopologyWithoutCA: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithoutCA -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_3repl_1client -- -- fedora-previous/test_replication_layouts_TestCompleteTopologyWithCA: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCA -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_3repl_1client -- -- fedora-previous/test_replication_layouts_TestCompleteTopologyWithCAKRA: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCAKRA -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_3repl_1client -- -- fedora-previous/test_client_uninstallation: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_uninstallation.py -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_1repl_1client -- -- fedora-previous/test_installation_client: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation_client.py -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_1repl_1client -- -- fedora-previous/test_user_permissions: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_user_permissions.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl_1client -- -- fedora-previous/test_webui_cert: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_webui/test_cert.py -- template: *ci-master-previous -- timeout: 2400 -- topology: *ipaserver -- -- fedora-previous/test_webui_general: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: >- -- test_webui/test_loginscreen.py -- test_webui/test_misc_cases.py -- test_webui/test_navigation.py -- test_webui/test_translation.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *ipaserver -- -- fedora-previous/test_webui_host: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_webui/test_host.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *ipaserver -- -- fedora-previous/test_webui_host_net_groups: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: >- -- test_webui/test_hostgroup.py -- test_webui/test_netgroup.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *ipaserver -- -- fedora-previous/test_webui_identity: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: >- -- test_webui/test_automember.py -- test_webui/test_idviews.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *ipaserver -- -- fedora-previous/test_webui_network: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: >- -- test_webui/test_automount.py -- test_webui/test_dns.py -- test_webui/test_vault.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *ipaserver -- -- fedora-previous/test_webui_policy: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: >- -- test_webui/test_hbac.py -- test_webui/test_krbtpolicy.py -- test_webui/test_pwpolicy.py -- test_webui/test_selinuxusermap.py -- test_webui/test_sudo.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *ipaserver -- -- fedora-previous/test_webui_rbac: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: >- -- test_webui/test_delegation.py -- test_webui/test_rbac.py -- test_webui/test_selfservice.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *ipaserver -- -- fedora-previous/test_webui_server: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: >- -- test_webui/test_config.py -- test_webui/test_range.py -- test_webui/test_realmdomains.py -- test_webui/test_topology.py -- test_webui/test_trust.py -- template: *ci-master-previous -- timeout: 7200 -- topology: *ipaserver -- -- fedora-previous/test_webui_service: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_webui/test_service.py -- template: *ci-master-previous -- timeout: 2400 -- topology: *ipaserver -- -- fedora-previous/test_webui_users: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: >- -- test_webui/test_group.py -- test_webui/test_user.py -- template: *ci-master-previous -- timeout: 4800 -- topology: *ipaserver -- -- fedora-previous/test_webui_subid: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunWebuiTests -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_webui/test_subid.py -- template: *ci-master-previous -- timeout: 2400 -- topology: *ipaserver -- -- fedora-previous/customized_ds_config_install: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_customized_ds_config_install.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/dns_locations: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_dns_locations.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_2repl_1client -- -- fedora-previous/external_ca_TestExternalCAdirsrvStop: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_external_ca.py::TestExternalCAdirsrvStop -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/external_ca_TestExternalCAInvalidCert: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_external_ca.py::TestExternalCAInvalidCert test_integration/test_external_ca.py::TestExternalCAInvalidIntermediate -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/external_ca_TestMultipleExternalCA: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_external_ca.py::TestMultipleExternalCA -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/test_ipahealthcheck: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheck -- template: *ci-master-previous -- timeout: 5400 -- topology: *master_1repl_1client -- -- fedora-previous/test_ipahealthcheck_nodns_extca_file: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithoutDNS test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithExternalCA test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFileCheck -- template: *ci-master-previous -- timeout: 5400 -- topology: *master_1repl -- -- fedora-previous/test_ipahealthcheck_cli_fsspace: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCLI test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFilesystemSpace -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/test_ipahealthcheck_adtrust: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunADTests -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithADtrust -- template: *ci-master-previous -- timeout: 4800 -- topology: *adroot_adchild_adtree_master_1client -- -- fedora-previous/test_ntp_options: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_ntp_options.py::TestNTPoptions -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_1repl_1client -- -- fedora-previous/test_otp: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_otp.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/test_pkinit_manage: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_pkinit_manage.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/test_pki_config_override: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_pki_config_override.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- --# fedora-previous/nfs: --# requires: [fedora-previous/build] --# priority: 50 --# job: --# class: RunPytest --# args: --# build_url: '{fedora-previous/build_url}' --# test_suite: test_integration/test_nfs.py::TestNFS --# template: *ci-master-previous --# timeout: 9000 --# topology: *master_3client -- -- fedora-previous/nfs_nsswitch_restore: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_nfs.py::TestIpaClientAutomountFileRestore -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_3client -- -- fedora-previous/mask: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestMaskInstall -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/hostname_validator: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_installation.py::TestHostnameValidator -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/automember: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_automember.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/test_crlgen_manage: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_crlgen_manage.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/test_integration_TestIPANotConfigured: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_cli_ipa_not_configured.py::TestIPANotConfigured -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_1repl -- -- fedora-previous/test_sssd: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunADTests -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_sssd.py -- template: *ci-master-previous -- timeout: 7200 -- topology: *adroot_adchild_adtree_master_1client -- -- fedora-previous/test_ca_custom_sdn: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_ca_custom_sdn.py -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_1repl -- -- fedora-previous/test_membermanager: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_membermanager.py -- template: *ci-master-previous -- timeout: 1800 -- topology: *master_1repl -- -- fedora-previous/krbtpolicy: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_krbtpolicy.py -- template: *ci-master-previous -- timeout: 4800 -- topology: *master_1repl -- -- fedora-previous/test_winsyncmigrate: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunADTests -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_winsyncmigrate.py -- template: *ci-master-previous -- timeout: 4800 -- topology: *ad_master -- -- fedora-previous/test_trust: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunADTests -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_trust.py -- template: *ci-master-previous -- timeout: 10000 -- topology: *adroot_adchild_adtree_master_1client -- -- fedora-previous/test_backup_and_restore_TestBackupAndRestoreTrust: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreTrust -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_1repl -- -- fedora-previous/test_adtrust_install: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_adtrust_install.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/test_cert: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_cert.py -- template: *ci-master-previous -- timeout: 5400 -- topology: *master_1repl_1client -- -- fedora-previous/test_epn: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_epn.py -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_3client -- -- fedora-previous/test_acme: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_acme.py -- template: *ci-master-previous -- timeout: 7200 -- topology: *master_1repl_1client -- -- fedora-previous/test_dns: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_dns.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/test_pwpolicy: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_pwpolicy.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/test_cert_fix: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_ipa_cert_fix.py -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_1repl -- -- fedora-previous/test_subids: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_subids.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/test_custom_plugins: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_custom_plugins.py -- template: *ci-master-previous -- timeout: 3600 -- topology: *master_1repl -- -- fedora-previous/test_external_idp: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_idp.py -- template: *ci-master-previous -- timeout: 5000 -- topology: *master_2repl_1client -- -- fedora-previous/test_random_serial_numbers_TestInstallWithCA_DNS1_RSN: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_DNS1_RSN -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_3repl_1client -- -- fedora-previous/test_random_serial_numbers_TestInstallWithCA_KRA1_RSN: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_KRA1_RSN -- template: *ci-master-previous -- timeout: 10800 -- topology: *master_3repl_1client -- -- fedora-previous/test_random_serial_numbers_test_commands_RSN: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_random_serial_numbers.py::TestIPACommand_RSN::test_certificate_out_write_to_file -- template: *ci-master-previous -- timeout: 5400 -- topology: *master_1repl_1client -- -- fedora-previous/test_caless_TestServerCALessToExternalCA_RSN: -- requires: [fedora-previous/build] -- priority: 50 -- job: -- class: RunPytest -- args: -- build_url: '{fedora-previous/build_url}' -- test_suite: test_integration/test_random_serial_numbers.py::TestServerCALessToExternalCA_RSN -- template: *ci-master-previous -- timeout: 5400 -- topology: *master_1repl -diff --git a/ipatests/prci_definitions/temp_commit.yaml b/ipatests/prci_definitions/temp_commit.yaml -index 9384492e0b498778484c4a5165976f4938e73938..78974b3ff2a0e460dff1005d29ce799c7e05c074 100644 ---- a/ipatests/prci_definitions/temp_commit.yaml -+++ b/ipatests/prci_definitions/temp_commit.yaml -@@ -47,7 +47,7 @@ topologies: - memory: 14500 - - jobs: -- fedora-latest/build: -+ fedora-latest-ipa-4-10/build: - requires: [] - priority: 100 - job: -@@ -55,20 +55,20 @@ jobs: - args: - git_repo: '{git_repo}' - git_refspec: '{git_refspec}' -- template: &ci-master-latest -- name: freeipa/ci-master-f36 -- version: 0.0.7 -+ template: &ci-ipa-4-10-latest -+ name: freeipa/ci-ipa-4-10-f36 -+ version: 0.0.1 - timeout: 1800 - topology: *build - -- fedora-latest/temp_commit: -- requires: [fedora-latest/build] -+ fedora-latest-ipa-4-10/temp_commit: -+ requires: [fedora-latest-ipa-4-10/build] - priority: 50 - job: - class: RunPytest - args: -- build_url: '{fedora-latest/build_url}' -+ build_url: '{fedora-latest-ipa-4-10/build_url}' - test_suite: test_integration/test_REPLACEME.py -- template: *ci-master-latest -+ template: *ci-ipa-4-10-latest - timeout: 3600 - topology: *master_1repl_1client --- -2.37.2 - diff --git a/SOURCES/0003-server-install-remove-error-log-about-missing-bkup-f.patch b/SOURCES/0003-server-install-remove-error-log-about-missing-bkup-f.patch new file mode 100644 index 0000000..4bb3177 --- /dev/null +++ b/SOURCES/0003-server-install-remove-error-log-about-missing-bkup-f.patch @@ -0,0 +1,54 @@ +From 894dca12c120f0bfa705307a0609da47326b8fb2 Mon Sep 17 00:00:00 2001 +From: Florence Blanc-Renaud +Date: Thu, 12 Jan 2023 11:26:53 +0100 +Subject: [PATCH] server install: remove error log about missing bkup file + +The client installer code can be called in 3 different ways: +- from ipa-client-install CLI +- from ipa-replica-install CLI if the client is not already installed +- from ipa-server-install + +In the last case, the client installer is called with +options.on_master=True +As a result, it's skipping the part that is creating the krb5 +configuration: + if not options.on_master: + nolog = tuple() + configure_krb5_conf(...) + +The configure_krb5_conf method is the place where the krb5.conf file is +backup'ed with the extention ".ipabkp". For a master installation, this +code is not called and the ipabkp file does not exist => delete raises +an error. + +When delete fails because the file does not exist, no need to log an +error message. + +Fixes: https://pagure.io/freeipa/issue/9306 +Signed-off-by: Florence Blanc-Renaud +Reviewed-By: Rob Crittenden +--- + ipaclient/install/client.py | 7 +++---- + 1 file changed, 3 insertions(+), 4 deletions(-) + +diff --git a/ipaclient/install/client.py b/ipaclient/install/client.py +index e5d3e8223efa1ebb69a1b7e963c394f9e1f38816..6e7f17d5b69581320866627cb5747a050cb6e32e 100644 +--- a/ipaclient/install/client.py ++++ b/ipaclient/install/client.py +@@ -124,10 +124,9 @@ def cleanup(func): + os.rmdir(ccache_dir) + except OSError: + pass +- try: +- os.remove(krb_name + ".ipabkp") +- except OSError: +- logger.error("Could not remove %s.ipabkp", krb_name) ++ # During master installation, the .ipabkp file is not created ++ # Ignore the delete error if it is "file does not exist" ++ remove_file(krb_name + ".ipabkp") + + return inner + +-- +2.39.1 + diff --git a/SOURCES/0004-Added-a-check-while-removing-cert_dir-.-The-teardown.patch b/SOURCES/0004-Added-a-check-while-removing-cert_dir-.-The-teardown.patch deleted file mode 100644 index 59052bb..0000000 --- a/SOURCES/0004-Added-a-check-while-removing-cert_dir-.-The-teardown.patch +++ /dev/null @@ -1,69 +0,0 @@ -From aca97507cd119ad55e0c3c18ca65087cb5576c82 Mon Sep 17 00:00:00 2001 -From: Sumedh Sidhaye -Date: Mon, 13 Jun 2022 13:49:08 +0530 -Subject: [PATCH] Added a check while removing 'cert_dir'. The teardown method - is called even if all the tests are skipped since the required PKI version is - not present. The teardown is trying to remove a non-existent directory. - -Currently the cert_dir attribute is only present if IPA installation was -done. If IPA was not installed the attribute does not exist. -In order that the uninstall code finds the attribute a class attribute -is added. - -Pagure Issue: https://pagure.io/freeipa/issue/9179 - -Signed-off-by: Sumedh Sidhaye -Reviewed-By: Florence Blanc-Renaud -Reviewed-By: Rob Crittenden ---- - ipatests/test_integration/test_caless.py | 12 +++++++++++- - .../test_integration/test_random_serial_numbers.py | 6 ++++++ - 2 files changed, 17 insertions(+), 1 deletion(-) - -diff --git a/ipatests/test_integration/test_caless.py b/ipatests/test_integration/test_caless.py -index 96f477bbe4b0e25184605a80659b5ec6529a2320..4c370f77e84215714e533b1b6ebeb89216319c0f 100644 ---- a/ipatests/test_integration/test_caless.py -+++ b/ipatests/test_integration/test_caless.py -@@ -122,6 +122,15 @@ def replica_install_teardown(func): - - - class CALessBase(IntegrationTest): -+ # The teardown method is called even if all the tests are skipped -+ # since the required PKI version is not present. -+ # The teardown is trying to remove a non-existent directory. -+ # Currently the cert_dir attribute is only present if IPA installation was -+ # done. If IPA was not installed the attribute does not exist. -+ # In order that the uninstall code finds the attribute a class attribute -+ # is added. -+ cert_dir = None -+ - @classmethod - def install(cls, mh): - cls.cert_dir = tempfile.mkdtemp(prefix="ipatest-") -@@ -164,7 +173,8 @@ class CALessBase(IntegrationTest): - @classmethod - def uninstall(cls, mh): - # Remove the NSS database -- shutil.rmtree(cls.cert_dir) -+ if cls.cert_dir: -+ shutil.rmtree(cls.cert_dir) - super(CALessBase, cls).uninstall(mh) - - @classmethod -diff --git a/ipatests/test_integration/test_random_serial_numbers.py b/ipatests/test_integration/test_random_serial_numbers.py -index a931c7b562f00f94e10d1e9e891fbf0624d5fd88..c52cfa4ed50e2718791b0844d743fb240d26b365 100644 ---- a/ipatests/test_integration/test_random_serial_numbers.py -+++ b/ipatests/test_integration/test_random_serial_numbers.py -@@ -64,3 +64,9 @@ class TestServerCALessToExternalCA_RSN(TestServerCALessToExternalCA): - if not pki_supports_RSNv3(mh.master): - raise pytest.skip("RNSv3 not supported") - super(TestServerCALessToExternalCA_RSN, cls).install(mh) -+ -+ @classmethod -+ def uninstall(cls, mh): -+ if not pki_supports_RSNv3(mh.master): -+ raise pytest.skip("RSNv3 not supported") -+ super(TestServerCALessToExternalCA_RSN, cls).uninstall(mh) --- -2.37.2 - diff --git a/SOURCES/0004-ipa-tests-Add-LANG-before-kinit-command-to-fix-issue.patch b/SOURCES/0004-ipa-tests-Add-LANG-before-kinit-command-to-fix-issue.patch new file mode 100644 index 0000000..02bca15 --- /dev/null +++ b/SOURCES/0004-ipa-tests-Add-LANG-before-kinit-command-to-fix-issue.patch @@ -0,0 +1,118 @@ +From 2520a7adff7a49ddcddaaf19f0e586425dc0d878 Mon Sep 17 00:00:00 2001 +From: Filip Dvorak +Date: Tue, 6 Dec 2022 15:51:27 +0100 +Subject: [PATCH] ipa tests: Add LANG before kinit command to fix issue with + locale settings + +Reviewed-By: Rob Crittenden +Reviewed-By: Alexander Bokovoy +Reviewed-By: Florence Blanc-Renaud +Reviewed-By: Michal Polovka +--- + ipatests/test_integration/test_krbtpolicy.py | 20 ++++++++++---------- + 1 file changed, 10 insertions(+), 10 deletions(-) + +diff --git a/ipatests/test_integration/test_krbtpolicy.py b/ipatests/test_integration/test_krbtpolicy.py +index eae16247bdfb195c1d91209cf2d11eac4c25018f..269cfb0a191821c229aaeb5a3eda0181c6e3ae62 100644 +--- a/ipatests/test_integration/test_krbtpolicy.py ++++ b/ipatests/test_integration/test_krbtpolicy.py +@@ -23,7 +23,7 @@ PASSWORD = "Secret123" + USER1 = "testuser1" + USER2 = "testuser2" + MAXLIFE = 86400 +- ++LANG_PKG = ["langpacks-en"] + + def maxlife_within_policy(input, maxlife, slush=3600): + """Given klist output of the TGT verify that it is within policy +@@ -45,7 +45,6 @@ def maxlife_within_policy(input, maxlife, slush=3600): + + return maxlife >= diff >= maxlife - slush + +- + @pytest.fixture + def reset_to_default_policy(): + """Reset default user authentication and user authentication type""" +@@ -70,7 +69,7 @@ def reset_to_default_policy(): + def kinit_check_life(master, user): + """Acquire a TGT and check if it's within the lifetime window""" + master.run_command(["kinit", user], stdin_text=f"{PASSWORD}\n") +- result = master.run_command("klist | grep krbtgt") ++ result = master.run_command("LANG=en_US.utf-8 klist | grep krbtgt") + assert maxlife_within_policy(result.stdout_text, MAXLIFE) is True + + +@@ -81,6 +80,7 @@ class TestPWPolicy(IntegrationTest): + + @classmethod + def install(cls, mh): ++ tasks.install_packages(cls.master, LANG_PKG) + tasks.install_master(cls.master) + tasks.create_active_user(cls.master, USER1, PASSWORD) + tasks.create_active_user(cls.master, USER2, PASSWORD) +@@ -100,7 +100,7 @@ class TestPWPolicy(IntegrationTest): + + master.run_command(['kinit', USER1], + stdin_text=PASSWORD + '\n') +- result = master.run_command('klist | grep krbtgt') ++ result = master.run_command("LANG=en_US.utf-8 klist | grep krbtgt") + assert maxlife_within_policy(result.stdout_text, MAXLIFE) is True + + def test_krbtpolicy_password_and_hardended(self): +@@ -122,7 +122,7 @@ class TestPWPolicy(IntegrationTest): + + master.run_command(['kinit', USER1], + stdin_text=PASSWORD + '\n') +- result = master.run_command('klist | grep krbtgt') ++ result = master.run_command('LANG=en_US.utf-8 klist | grep krbtgt') + assert maxlife_within_policy(result.stdout_text, 600, + slush=600) is True + +@@ -131,7 +131,7 @@ class TestPWPolicy(IntegrationTest): + # Verify that the short policy only applies to USER1 + master.run_command(['kinit', USER2], + stdin_text=PASSWORD + '\n') +- result = master.run_command('klist | grep krbtgt') ++ result = master.run_command('LANG=en_US.utf-8 klist | grep krbtgt') + assert maxlife_within_policy(result.stdout_text, MAXLIFE) is True + + def test_krbtpolicy_hardended(self): +@@ -151,7 +151,7 @@ class TestPWPolicy(IntegrationTest): + + master.run_command(['kinit', USER1], + stdin_text=PASSWORD + '\n') +- result = master.run_command('klist | grep krbtgt') ++ result = master.run_command('LANG=en_US.utf-8 klist | grep krbtgt') + assert maxlife_within_policy(result.stdout_text, 1800, + slush=1800) is True + +@@ -160,7 +160,7 @@ class TestPWPolicy(IntegrationTest): + # Verify that the short policy only applies to USER1 + master.run_command(['kinit', USER2], + stdin_text=PASSWORD + '\n') +- result = master.run_command('klist | grep krbtgt') ++ result = master.run_command('LANG=en_US.utf-8 klist | grep krbtgt') + assert maxlife_within_policy(result.stdout_text, MAXLIFE) is True + + def test_krbtpolicy_password(self): +@@ -173,7 +173,7 @@ class TestPWPolicy(IntegrationTest): + + master.run_command(['kinit', USER2], + stdin_text=PASSWORD + '\n') +- result = master.run_command('klist | grep krbtgt') ++ result = master.run_command('LANG=en_US.utf-8 klist | grep krbtgt') + assert maxlife_within_policy(result.stdout_text, 1200, + slush=1200) is True + +@@ -183,7 +183,7 @@ class TestPWPolicy(IntegrationTest): + master.run_command(['ipa', 'krbtpolicy-reset', USER2]) + master.run_command(['kinit', USER2], + stdin_text=PASSWORD + '\n') +- result = master.run_command('klist | grep krbtgt') ++ result = master.run_command('LANG=en_US.utf-8 klist | grep krbtgt') + assert maxlife_within_policy(result.stdout_text, MAXLIFE) is True + + def test_krbtpolicy_otp(self, reset_to_default_policy): +-- +2.39.1 + diff --git a/SOURCES/0005-ipatests-healthcheck-test-if-system-is-FIPS-enabled.patch b/SOURCES/0005-ipatests-healthcheck-test-if-system-is-FIPS-enabled.patch deleted file mode 100644 index 5aa0535..0000000 --- a/SOURCES/0005-ipatests-healthcheck-test-if-system-is-FIPS-enabled.patch +++ /dev/null @@ -1,55 +0,0 @@ -From c55185d3dc3c6cd2ffebab77fbf8caa40a32bcd1 Mon Sep 17 00:00:00 2001 -From: Erik -Date: Mon, 18 Jul 2022 11:59:24 +0200 -Subject: [PATCH] ipatests: healthcheck: test if system is FIPS enabled - -Test if FIPS is enabled and the check exists. - -Related: https://pagure.io/freeipa/issue/8951 - -Signed-off-by: Erik Belko -Reviewed-By: Michal Polovka -Reviewed-By: Rob Crittenden ---- - .../test_integration/test_ipahealthcheck.py | 25 +++++++++++++++++++ - 1 file changed, 25 insertions(+) - -diff --git a/ipatests/test_integration/test_ipahealthcheck.py b/ipatests/test_integration/test_ipahealthcheck.py -index 23af09f3a7eaa8012e7a898ce6a534d1fad45323..a0c85f79e6e84f9e63072c6d70276480e4af97ad 100644 ---- a/ipatests/test_integration/test_ipahealthcheck.py -+++ b/ipatests/test_integration/test_ipahealthcheck.py -@@ -340,6 +340,31 @@ class TestIpaHealthCheck(IntegrationTest): - assert returncode == 0 - assert output == "No issues found." - -+ def test_ipa_healthcheck_fips_enabled(self): -+ """ -+ Test if FIPS is enabled and the check exists. -+ -+ https://pagure.io/freeipa/issue/8951 -+ """ -+ returncode, check = run_healthcheck(self.master, -+ source="ipahealthcheck.meta.core", -+ check="MetaCheck", -+ output_type="json", -+ failures_only=False) -+ assert returncode == 0 -+ -+ cmd = self.master.run_command(['fips-mode-setup', '--is-enabled'], -+ raiseonerr=False) -+ returncode = cmd.returncode -+ -+ # If this produces IndexError, the check does not exist -+ if check[0]["kw"]["fips"] == "disabled": -+ assert returncode == 2 -+ elif check[0]["kw"]["fips"] == "enabled": -+ assert returncode == 0 -+ else: -+ assert returncode == 1 -+ - def test_ipa_healthcheck_after_certupdate(self): - """ - Verify that ipa-certupdate hasn't messed up tracking --- -2.37.2 - diff --git a/SOURCES/0005-trust-add-handle-missing-msSFU30MaxGidNumber.patch b/SOURCES/0005-trust-add-handle-missing-msSFU30MaxGidNumber.patch new file mode 100644 index 0000000..4c702d0 --- /dev/null +++ b/SOURCES/0005-trust-add-handle-missing-msSFU30MaxGidNumber.patch @@ -0,0 +1,48 @@ +From 97fc368df2db3b559a9def236d3c3e0a12bcdd0a Mon Sep 17 00:00:00 2001 +From: Florence Blanc-Renaud +Date: Mon, 23 Jan 2023 20:28:17 +0100 +Subject: [PATCH] trust-add: handle missing msSFU30MaxGidNumber + +When ipa trust-add is executed with --range-type ad-trust-posix, +the server tries to find the max uidnumber and max gidnumber +from AD domain controller. +The values are extracted from the entry +CN=,CN=ypservers,CN=ypServ30,CN=RpcServices,CN=System, +in the msSFU30MaxUidNumber and msSFU30MaxGidNumber attributes. + +msSFU30MaxUidNumber is required but not msSFU30MaxGidNumber. +In case msSFU30MaxGidNumber is missing, the code is currently assigning +a "None" value and later on evaluates the max between this value and +msSFU30MaxUidNumber. The max function cannot compare None and a list +of string and triggers an exception. + +To avoid the exception, assign [b'0'] to max gid if msSFU30MaxGidNumber +is missing. This way, the comparison succeeds and max returns the +value from msSFU30MaxUidNumber. + +Fixes: https://pagure.io/freeipa/issue/9310 +Signed-off-by: Florence Blanc-Renaud +Reviewed-By: Rob Crittenden +--- + ipaserver/plugins/trust.py | 5 ++++- + 1 file changed, 4 insertions(+), 1 deletion(-) + +diff --git a/ipaserver/plugins/trust.py b/ipaserver/plugins/trust.py +index c074f6d6e609476e416c95bcbe607654718ae9ce..79264b8d8a3b15dd4e5d0553e4ce42194b0ae044 100644 +--- a/ipaserver/plugins/trust.py ++++ b/ipaserver/plugins/trust.py +@@ -379,7 +379,10 @@ def add_range(myapi, trustinstance, range_name, dom_sid, *keys, **options): + range_type = u'ipa-ad-trust-posix' + + max_uid = info.get('msSFU30MaxUidNumber') +- max_gid = info.get('msSFU30MaxGidNumber', None) ++ # if max_gid is missing, assume 0 and the max will ++ # be obtained from max_uid. We just checked that ++ # msSFU30MaxUidNumber is defined ++ max_gid = info.get('msSFU30MaxGidNumber', [b'0']) + max_id = int(max(max_uid, max_gid)[0]) + + base_id = int(info.get('msSFU30OrderNumber')[0]) +-- +2.39.1 + diff --git a/SOURCES/0006-Disabling-gracelimit-does-not-prevent-LDAP-binds.patch b/SOURCES/0006-Disabling-gracelimit-does-not-prevent-LDAP-binds.patch deleted file mode 100644 index b3891d7..0000000 --- a/SOURCES/0006-Disabling-gracelimit-does-not-prevent-LDAP-binds.patch +++ /dev/null @@ -1,125 +0,0 @@ -From 1bb4ff9ed2313fb3c2bd1418258c5bcec557b6a5 Mon Sep 17 00:00:00 2001 -From: Rob Crittenden -Date: Thu, 21 Jul 2022 09:28:46 -0400 -Subject: [PATCH] Disabling gracelimit does not prevent LDAP binds - -Originally the code treated 0 as disabled. This was -changed during the review process to -1 but one remnant -was missed effetively allowing gracelimit 0 to also mean -disabled. - -Add explicit tests for testing with gracelimit = 0 and -gracelimit = -1. - -Also remove some extranous "str(self.master.domain.basedn)" -lines from some of the tests. - -Fixes: https://pagure.io/freeipa/issue/9206 - -Signed-off-by: Rob Crittenden -Reviewed-By: Francisco Trivino ---- - .../ipa-graceperiod/ipa_graceperiod.c | 2 +- - ipatests/test_integration/test_pwpolicy.py | 55 ++++++++++++++++++- - 2 files changed, 53 insertions(+), 4 deletions(-) - -diff --git a/daemons/ipa-slapi-plugins/ipa-graceperiod/ipa_graceperiod.c b/daemons/ipa-slapi-plugins/ipa-graceperiod/ipa_graceperiod.c -index a3f57cb4bd7a2a66d70fae98cca0f62a8f0c017f..345e1dee7d163167373ca82dedb1e827f0e1bc8c 100644 ---- a/daemons/ipa-slapi-plugins/ipa-graceperiod/ipa_graceperiod.c -+++ b/daemons/ipa-slapi-plugins/ipa-graceperiod/ipa_graceperiod.c -@@ -479,7 +479,7 @@ static int ipagraceperiod_preop(Slapi_PBlock *pb) - if (pwresponse_requested) { - slapi_pwpolicy_make_response_control(pb, -1, grace_limit - grace_user_time , -1); - } -- } else if ((grace_limit > 0) && (grace_user_time >= grace_limit)) { -+ } else if (grace_user_time >= grace_limit) { - LOG_TRACE("%s password is expired and out of grace limit\n", dn); - errstr = "Password is expired.\n"; - ret = LDAP_INVALID_CREDENTIALS; -diff --git a/ipatests/test_integration/test_pwpolicy.py b/ipatests/test_integration/test_pwpolicy.py -index 6d66982848ac5a0061b47d30fad022be055c93e4..41d6e9070a90c2bde7b3182ad6ecf1a923bba203 100644 ---- a/ipatests/test_integration/test_pwpolicy.py -+++ b/ipatests/test_integration/test_pwpolicy.py -@@ -36,7 +36,7 @@ class TestPWPolicy(IntegrationTest): - cls.master.run_command(['ipa', 'group-add-member', POLICY, - '--users', USER]) - cls.master.run_command(['ipa', 'pwpolicy-add', POLICY, -- '--priority', '1']) -+ '--priority', '1', '--gracelimit', '-1']) - cls.master.run_command(['ipa', 'passwd', USER], - stdin_text='{password}\n{password}\n'.format( - password=PASSWORD -@@ -265,7 +265,6 @@ class TestPWPolicy(IntegrationTest): - - def test_graceperiod_expired(self): - """Test the LDAP bind grace period""" -- str(self.master.domain.basedn) - dn = "uid={user},cn=users,cn=accounts,{base_dn}".format( - user=USER, base_dn=str(self.master.domain.basedn)) - -@@ -308,7 +307,6 @@ class TestPWPolicy(IntegrationTest): - - def test_graceperiod_not_replicated(self): - """Test that the grace period is reset on password reset""" -- str(self.master.domain.basedn) - dn = "uid={user},cn=users,cn=accounts,{base_dn}".format( - user=USER, base_dn=str(self.master.domain.basedn)) - -@@ -341,3 +339,54 @@ class TestPWPolicy(IntegrationTest): - ) - assert 'passwordgraceusertime: 0' in result.stdout_text.lower() - self.reset_password(self.master) -+ -+ def test_graceperiod_zero(self): -+ """Test the LDAP bind with zero grace period""" -+ dn = "uid={user},cn=users,cn=accounts,{base_dn}".format( -+ user=USER, base_dn=str(self.master.domain.basedn)) -+ -+ self.master.run_command( -+ ["ipa", "pwpolicy-mod", POLICY, "--gracelimit", "0", ], -+ ) -+ -+ # Resetting the password will mark it as expired -+ self.reset_password(self.master) -+ -+ # Now grace is done and binds should fail. -+ result = self.master.run_command( -+ ["ldapsearch", "-e", "ppolicy", "-D", dn, -+ "-w", PASSWORD, "-b", dn], raiseonerr=False -+ ) -+ assert result.returncode == 49 -+ -+ assert 'Password is expired' in result.stderr_text -+ assert 'Password expired, 0 grace logins remain' in result.stderr_text -+ -+ def test_graceperiod_disabled(self): -+ """Test the LDAP bind with grace period disabled (-1)""" -+ str(self.master.domain.basedn) -+ dn = "uid={user},cn=users,cn=accounts,{base_dn}".format( -+ user=USER, base_dn=str(self.master.domain.basedn)) -+ -+ # This can fail if gracelimit is already -1 so ignore it -+ self.master.run_command( -+ ["ipa", "pwpolicy-mod", POLICY, "--gracelimit", "-1",], -+ raiseonerr=False, -+ ) -+ -+ # Ensure the password is expired -+ self.reset_password(self.master) -+ -+ result = self.kinit_as_user(self.master, PASSWORD, PASSWORD) -+ -+ for _i in range(0, 10): -+ result = self.master.run_command( -+ ["ldapsearch", "-e", "ppolicy", "-D", dn, -+ "-w", PASSWORD, "-b", dn] -+ ) -+ -+ # With graceperiod disabled it should not increment -+ result = tasks.ldapsearch_dm( -+ self.master, dn, ['passwordgraceusertime',], -+ ) -+ assert 'passwordgraceusertime: 0' in result.stdout_text.lower() --- -2.37.2 - diff --git a/SOURCES/0006-doc-Design-for-certificate-pruning.patch b/SOURCES/0006-doc-Design-for-certificate-pruning.patch new file mode 100644 index 0000000..07eb3c9 --- /dev/null +++ b/SOURCES/0006-doc-Design-for-certificate-pruning.patch @@ -0,0 +1,337 @@ +From 51b1c22d025bf40e9ef488bb0faf0c8dff303ccd Mon Sep 17 00:00:00 2001 +From: Rob Crittenden +Date: Thu, 8 Dec 2022 16:18:07 -0500 +Subject: [PATCH] doc: Design for certificate pruning + +This describes how the certificate pruning capability of PKI +introduced in v11.3.0 will be integrated into IPA, primarily for +ACME. + +Related: https://pagure.io/freeipa/issue/9294 + +Signed-off-by: Rob Crittenden +Reviewed-By: Florence Blanc-Renaud +--- + doc/designs/expired_certificate_pruning.md | 297 +++++++++++++++++++++ + doc/designs/index.rst | 1 + + 2 files changed, 298 insertions(+) + create mode 100644 doc/designs/expired_certificate_pruning.md + +diff --git a/doc/designs/expired_certificate_pruning.md b/doc/designs/expired_certificate_pruning.md +new file mode 100644 +index 0000000000000000000000000000000000000000..2c10d914020d3c12b6abb028323cd6796ec33e00 +--- /dev/null ++++ b/doc/designs/expired_certificate_pruning.md +@@ -0,0 +1,297 @@ ++# Expired Certificate Pruning ++ ++## Overview ++ ++https://pagure.io/dogtagpki/issue/1750 ++ ++When using short-lived certs and regular issuance, the expired certs can build up in the PKI database and cause issues with replication, performance and overall database size. ++ ++PKI has provided a new feature in 11.3.0, pruning, which is a job that can be executed on a schedule or manually to remove expired certificates and requests. ++ ++Random Serial Numbers v3 (RSNv3) is mandatory to enable pruning. ++ ++Both pruning and RSNv3 require PKI 11.3.0 or higher. ++ ++## Use Cases ++ ++ACME certificates in particular are generally short-lived and expired certificates can build up quickly in a dynamic environment. An example is a CI system that requests one or more certificates per run. These will build up infinitely without a way to remove the expired certificates. ++ ++Another case is simply a very long-lived installation. Over time as hosts come and go certificates build up. ++ ++## How to Use ++ ++https://github.com/dogtagpki/pki/wiki/Configuring-CA-Database-Pruning provides a thorough description of the capabilities of the pruning job. ++ ++The default configuration is to remove expired certificates and incomplete requests after 30 days. ++ ++Pruning is disabled by default. ++ ++Configuration is a four-step process: ++ ++1. Configure the expiration thresholds ++2. Enable the job ++3. Schedule the job ++4. Restart the CA ++ ++The job will be scheduled to use the PKI built-in cron-like timer. It is configured nearly identically to `crontab(5)`. On execution it will remove certificates and requests that fall outside the configured thresholds. LDAP search/time limits can be used to control how many are removed at once. ++ ++In addition to the automated schedule it is possible to manually run the pruning job. ++ ++The tool will not restart the CA. It will be left as an exercise for the user, who will be notified as needed. ++ ++### Where to use ++ ++The pruning configuration is not replicated. It should not be necessary to enable this task on all IPA servers, or more than one. ++ ++Running the task simultaneously on multiple servers has a few downsides: ++ ++* Additional stress on the LDAP server searching for expired certificates and requests ++* Unnecessary replication load deleting the same entries on multiple servers ++ ++While enabling this on a single server represents a single-point-of-failure there should be no catastrophic consequences other than expired certificates and requests potentially building up. This can be cleared by enabling pruning on a different server. Depending on the size of the backlog this could take a couple of executions to catch up. ++ ++## Design ++ ++There are several operations, most of which act locally and one of which uses the PKI REST API. ++ ++1. Updating the job configuration (enable, thresholds, etc). This will be done by running the `pki-server ca-config-set` command which modifies CS.cfg directly per the PKI wiki. A restart is required. ++ ++2. Retrieving the current configuration for display. The `pki-server ca-config-find` command returns the entire configuration so the results will need to be filtered. ++ ++3. Managing the job. This can be done using the REST API, https://github.com/dogtagpki/pki/wiki/PKI-REST-API . Operations include enabling the job and triggering it to run now. ++ ++Theoretically for operations 1 and 2 we could use existing code to manually update `CS.cfg` and retrieve values. For future-proofing purposes calling `pki-server` is probably the better long-term option given the limited number of times this will be used. Configuration is likely to be one and done. ++ ++There are four values each that can be managed for pruning certificates and requests: ++ ++* expired cert/incomplete request time ++* time unit ++* LDAP search size limit ++* LDAP search time limit ++ ++The first two configure when an expired certificate or incomplete request will be deleted. The unit can be one of: minute, hour, day, year. By default it is 30 days. ++ ++The LDAP limits control how many entries are returned and how long the search can take. By default it is 1000 entries and unlimited time. ++ ++### Configuration settings ++ ++The configuration values will be set by running `pki-server ca-config-set` This will ensure best forward compatibility. The options are case-sensitive and not validated by the CA until restart. The values are not applied until the CA is restarted. ++ ++### Configuring job execution time ++ ++The CA provides a cron-like interface for scheduling jobs. To configure the job to run at midnight on the first of every month the PKI equivalent command-line is: ++ ++``` ++pki-server ca-config-set jobsScheduler.job.pruning.cron `"0 0 1 * *"` ++``` ++ ++This will be the default when pruning is enabled. A separate configuration option will be available for fine-tuning execution time. ++ ++The format is defined https://access.redhat.com/documentation/en-us/red_hat_certificate_system/9/html/administration_guide/setting_up_specific_jobs#Frequency_Settings_for_Automated_Jobs ++ ++### REST Authentication and Authorization ++ ++The REST API for pruning is documented at https://github.com/dogtagpki/pki/wiki/PKI-Start-Job-REST-API ++ ++A PKI job can define an owner that can manage the job over the REST API. We will automatically define the owner as `ipara` when pruning is enabled. ++ ++Manually running the job will be done using the PKI REST API. Authentication to this API for our purposes is done at the `/ca/rest/account/login` endpoint. A cookie is returned which will be used in any subsequent calls. The IPA RA agent certificate will be used for authentication and authorization. ++ ++### Commands ++ ++This will be implemented in the ipa-acme-manage command. While strictly not completely ACME-related this is the primary driver for pruning. ++ ++A new verb will be added, pruning, to be used for enabling and configuring pruning. ++ ++### Enabling pruning ++ ++`# ipa-acme-manage pruning --enable=TRUE` ++ ++Enabling the job will call ++ ++`# pki-server ca-config-set jobsScheduler.job.pruning.enabled true` ++ ++This will also set jobsScheduler.job.pruning.cron to `"0 0 1 * *"` if it has not already been set. ++ ++Additionally it will set the job owner to `ipara` with: ++ ++`# pki-server ca-config-set jobsScheduler.job.pruning.owner ipara` ++ ++Disabling the job will call ++ ++`# pki-server ca-config-unset jobsScheduler.job.pruning.enabled` ++ ++### Cron settings ++ ++To modify the cron settings: ++ ++`# ipa-acme-manage pruning --cron="Minute Hour Day_of_month Month_of_year Day_of_week"` ++ ++Validation of the value will be: ++* each of the options is an integer ++* minute is within 0-59 ++* hour is within 0-23 ++* day of month is within 0-31 ++* month of year is within 1-12 ++* day of week is within 0-6 ++ ++No validation of setting February 31st will be done. That will be left to PKI. Buyer beware. ++ ++### Disabling pruning ++ ++`$ ipa-acme-manage pruning --enable=FALSE` ++ ++This will remove the configuration option for `jobsScheduler.job.pruning.cron` just to be sure it no longer runs. ++ ++### Configuration ++ ++#### Pruning certificates ++ ++`$ ipa-acme-manage pruning --certretention=VALUE --certretentionunit=UNIT` ++ ++will be the equivalent of: ++ ++`$ pki-server ca-config-set jobsScheduler.job.pruning.certRetentionTime 30` ++ ++`$ pki-server ca-config-set jobsScheduler.job.pruning.certRetentionUnit day` ++ ++The unit will always be required when modifying the time. ++ ++`$ ipa-acme-manage pruning --certsearchsizelimit=VALUE --certsearchtimelimit=VALUE` ++ ++will be the equivalent of: ++ ++`$ pki-server ca-config-set jobsScheduler.job.pruning.certSearchSizeLimit 1000` ++ ++`$ pki-server ca-config-set jobsScheduler.job.pruning.certSearchTimeLimit 0` ++ ++A value of 0 for searchtimelimit is unlimited. ++ ++#### Pruning requests ++ ++`$ ipa-acme-manage pruning --requestretention=VALUE --requestretentionunit=UNIT` ++ ++will be the equivalent of: ++ ++`$ pki-server ca-config-set jobsScheduler.job.pruning.requestRetentionTime 30` ++ ++`$ pki-server ca-config-set jobsScheduler.job.pruning.requestRetentionUnit day` ++ ++The unit will always be required when modifying the time. ++ ++`$ ipa-acme-manage pruning --requestsearchsizelimit=VALUE --requestsearchtimelimit=VALUE` ++ ++ ++will be the equivalent of: ++ ++`$ pki-server ca-config-set jobsScheduler.job.pruning.requestSearchSizeLimit 1000` ++ ++`$ pki-server ca-config-set jobsScheduler.job.pruning.requestSearchTimeLimit 0` ++ ++A value of 0 for searchtimelimit is unlimited. ++ ++These options set the client-side limits. The server imposes its own search size and look through limits. This can be tuned for the uid=pkidbuser,ou=people,o=ipaca user via https://access.redhat.com/documentation/en-us/red_hat_directory_server/11/html/administration_guide/ldapsearch-ex-complex-range ++ ++### Showing the Configuration ++ ++To display the current configuration run `pki-server ca-config-find` and filter the results to only those that contain `jobsScheduler.job.pruning`. ++ ++Default values are not included so will need to be set by `ipa-acme-manage` before displaying. ++ ++Output may look something like: ++ ++```console ++# ipa-acme-manage pruning --config-show ++Enabled: TRUE ++Certificate retention time: 30 days ++Certificate search size limit: 1000 ++Certificate search time limit: 0 ++Request retention time: 30 days ++Request search size limit: 1000 ++Request search time limit: 0 ++Cron: 0 0 1 * * ++``` ++ ++## Implementation ++ ++For online REST operations (login, run job) we will use the `ipaserver/plugins/dogtag.py::RestClient` class to manage the requests. This will take care of the authentication cookie, etc. ++ ++The class uses dogtag.https_request() will can take PEM cert and key files as arguments. These will be used for authentication. ++ ++For the non-REST operations (configuration, cron settings) the tool will fork out to pki-server ca-config-set. ++ ++### UI ++ ++This will only be configurable on the command-line. ++ ++### CLI ++ ++Overview of the CLI commands. Example: ++ ++ ++| Command | Options | ++| --- | ----- | ++| ipa-acme-manage pruning | --enable=TRUE | ++| ipa-acme-manage pruning | --enable=FALSE | ++| ipa-acme-manage pruning | --cron=`"0 0 1 * *"` | ++| ipa-acme-manage pruning | --certretention=30 --certretentionunit=day | ++| ipa-acme-manage pruning | --certsearchsizelimit=1000 --certsearchtimelimit=0 | ++| ipa-acme-manage pruning | --requestretention=30 --requestretentionunit=day | ++| ipa-acme-manage pruning | --requestsearchsizelimit=1000 --requestsearchtimelimit=0 | ++| ipa-acme-manage pruning | --config-show | ++ ++ipa-acme-manage can only be run as root. ++ ++### Configuration ++ ++Configuration changes will be made to /etc/pki/pki-tomcat/ca/CS.cfg ++ ++## Upgrade ++ ++No expected impact on upgrades. ++ ++## Test plan ++ ++Testing will consist of: ++ ++* Use the default configuration ++* enabling the pruning job ++* issue one or more certificates ++* move time forward +1 days after expiration ++* manually running the job ++* validating that the certificates are removed ++ ++For size/time limit testing, create a large number of certificates/requests and set the search limit to a low value, then ensure that the number of deleted certs is equal to the search limit. Testing timelimit in this way may be less predictable as it may require a massive number of entries to find to timeout on a non-busy server. ++ ++## Troubleshooting and debugging ++ ++The PKI debug log will contain job information. ++ ++``` ++2022-12-08 21:14:25 [https-jsse-nio-8443-exec-8] INFO: JobService: Starting job pruning ++2022-12-08 21:14:25 [https-jsse-nio-8443-exec-8] INFO: JobService: - principal: null ++2022-12-08 21:14:51 [https-jsse-nio-8443-exec-10] INFO: JobService: Starting job pruning 2022-12-08 21:14:51 [https-jsse-nio-8443-exec-10] INFO: JobService: - principal: null ++2022-12-08 21:15:11 [https-jsse-nio-8443-exec-11] INFO: PKIRealm: Authenticating certificate chain: ++2022-12-08 21:15:11 [https-jsse-nio-8443-exec-11] INFO: PKIRealm: - CN=IPA RA,O=EXAMPLE.TEST ++2022-12-08 21:15:11 [https-jsse-nio-8443-exec-11] INFO: PKIRealm: - CN=Certificate Authority,O=EXAMPLE.TEST ++2022-12-08 21:15:11 [https-jsse-nio-8443-exec-11] INFO: LDAPSession: Retrieving cn=19072098145751813471503860299601579276,ou=certificateRepository, ou=ca,o=ipaca ++2022-12-08 21:15:11 [https-jsse-nio-8443-exec-11] INFO: CertUserDBAuthentication: UID ipara authenticated. ++2022-12-08 21:15:11 [https-jsse-nio-8443-exec-11] INFO: PKIRealm: User ipara authenticated ++2022-12-08 21:15:11 [https-jsse-nio-8443-exec-11] INFO: UGSubsystem: Retrieving user uid=ipara,ou=People,o=ipaca ++2022-12-08 21:15:11 [https-jsse-nio-8443-exec-11] INFO: PKIRealm: User DN: uid=ipara,ou=people,o=ipaca ++2022-12-08 21:15:11 [https-jsse-nio-8443-exec-11] INFO: PKIRealm: Roles: ++2022-12-08 21:15:11 [https-jsse-nio-8443-exec-11] INFO: PKIRealm: - Certificate Manager Agents ++2022-12-08 21:15:11 [https-jsse-nio-8443-exec-11] INFO: PKIRealm: - Registration Manager Agents ++2022-12-08 21:15:11 [https-jsse-nio-8443-exec-11] INFO: PKIRealm: - Security Domain Administrators ++2022-12-08 21:15:11 [https-jsse-nio-8443-exec-11] INFO: PKIRealm: - Enterprise ACME Administrators ++2022-12-08 21:15:24 [https-jsse-nio-8443-exec-12] INFO: JobService: Starting job pruning ++2022-12-08 21:15:24 [https-jsse-nio-8443-exec-12] INFO: JobService: - principal: GenericPrincipal[ipara(Certificate Manager Agents,Enterprise ACME Administrators,Registration Manager Agents,Security Domain Administrators,)] ++2022-12-08 21:15:24 [https-jsse-nio-8443-exec-12] INFO: JobsScheduler: Starting job pruning ++2022-12-08 21:15:24 [pruning] INFO: PruningJob: Running pruning job at Thu Dec 08 21:15:24 UTC 2022 ++2022-12-08 21:15:24 [pruning] INFO: PruningJob: Pruning certs expired before Tue Nov 08 21:15:24 UTC 2022 ++2022-12-08 21:15:24 [pruning] INFO: PruningJob: - filter: (&(x509Cert.notAfter<=1667942124527)(!(x509Cert.notAfter=1667942124527))) ++2022-12-08 21:15:24 [pruning] INFO: LDAPSession: Searching ou=certificateRepository, ou=ca,o=ipaca for (&(notAfter<=20221108211524Z)(!(notAfter=20221108211524Z))) ++2022-12-08 21:15:24 [pruning] INFO: PruningJob: Pruning incomplete requests last modified before Tue Nov 08 21:15:24 UTC 2022 ++2022-12-08 21:15:24 [pruning] INFO: PruningJob: - filter: (&(!(requestState=complete))(requestModifyTime<=1667942124527)(!(requestModifyTime=1667942124527))) ++2022-12-08 21:15:24 [pruning] INFO: LDAPSession: Searching ou=ca, ou=requests,o=ipaca for (&(!(requestState=complete))(dateOfModify<=20221108211524Z)(!(dateOfModify=20221108211524Z))) ++``` +diff --git a/doc/designs/index.rst b/doc/designs/index.rst +index 570e526fe35d510feeac62a44dd59224289e0506..1d41c0f84f0d7d3d5f184a47e31b4e71a890805d 100644 +--- a/doc/designs/index.rst ++++ b/doc/designs/index.rst +@@ -14,6 +14,7 @@ FreeIPA design documentation + hsm.md + krb-ticket-policy.md + extdom-plugin-protocol.md ++ expired_certificate_pruning.md + expiring-password-notification.md + ldap_grace_period.md + ldap_pam_passthrough.md +-- +2.39.1 + diff --git a/SOURCES/0007-ipa-acme-manage-add-certificate-request-pruning-mana.patch b/SOURCES/0007-ipa-acme-manage-add-certificate-request-pruning-mana.patch new file mode 100644 index 0000000..cbc2095 --- /dev/null +++ b/SOURCES/0007-ipa-acme-manage-add-certificate-request-pruning-mana.patch @@ -0,0 +1,684 @@ +From 9246a8a003b2b0062e07c289cd7cde8fe902b16f Mon Sep 17 00:00:00 2001 +From: Rob Crittenden +Date: Thu, 12 Jan 2023 15:06:27 -0500 +Subject: [PATCH] ipa-acme-manage: add certificate/request pruning management + +Configures PKI to remove expired certificates and non-resolved +requests on a schedule. + +This is geared towards ACME which can generate a lot of certificates +over a short period of time but is general purpose. It lives in +ipa-acme-manage because that is the primary reason for including it. + +Random Serial Numbers v3 must be enabled for this to work. + +Enabling pruning enables the job scheduler within CS and sets the +job user as the IPA RA user which has full rights to certificates +and requests. + +Disabling pruning does not disable the job scheduler because the +tool is stateless. Having the scheduler enabled should not be a +problem. + +A restart of PKI is required to apply any changes. This tool forks +out to pki-server which does direct writes to CS.cfg. It might +be easier to use our own tooling for this but this makes the +integration tighter so we pick up any improvements in PKI. + +The "cron" setting is quite limited, taking only integer values +and *. It does not accept ranges, either - or /. + +No error checking is done in PKI when setting a value, only when +attempting to use it, so some rudimentary validation is done. + +Fixes: https://pagure.io/freeipa/issue/9294 + +Signed-off-by: Rob Crittenden rcritten@redhat.com +Reviewed-By: Florence Blanc-Renaud +--- + install/tools/man/ipa-acme-manage.1 | 83 +++++++ + ipaserver/install/ipa_acme_manage.py | 303 ++++++++++++++++++++++++- + ipatests/test_integration/test_acme.py | 158 +++++++++++++ + 3 files changed, 534 insertions(+), 10 deletions(-) + +diff --git a/install/tools/man/ipa-acme-manage.1 b/install/tools/man/ipa-acme-manage.1 +index e15d25bd0017d8bd71e425fcb633827fa6f67693..e6cec4e4a7fd460c514a72456a2dc9a2e3682ebd 100644 +--- a/install/tools/man/ipa-acme-manage.1 ++++ b/install/tools/man/ipa-acme-manage.1 +@@ -27,6 +27,89 @@ Disable the ACME service on this host. + .TP + \fBstatus\fR + Display the status of the ACME service. ++.TP ++\fBpruning\fR ++Configure certificate and request pruning. ++ ++.SH "PRUNING" ++Pruning is a job that runs in the CA that can remove expired ++certificates and certificate requests which have not been issued. ++This is particularly important when using short-lived certificates ++like those issued with the ACME protocol. Pruning requires that ++the IPA server be installed with random serial numbers enabled. ++ ++The CA needs to be restarted after modifying the pruning configuration. ++ ++The job is a cron-like task within the CA that is controlled by a ++number of options which dictate how long after the certificate or ++request is considered no longer valid and removed from the LDAP ++database. ++ ++The cron time and date fields are: ++.IP ++.ta 1.5i ++field allowed values ++.br ++----- -------------- ++.br ++minute 0-59 ++.br ++hour 0-23 ++.br ++day of month 1-31 ++.br ++month 1-12 ++.br ++day of week 0-6 (0 is Sunday) ++.br ++.PP ++ ++The cron syntax is limited to * or specific numbers. Ranges are not supported. ++ ++.TP ++\fB\-\-enable\fR ++Enable certificate pruning. ++.TP ++\fB\-\-disable\fR ++Disable certificate pruning. ++.TP ++\fB\-\-cron=CRON\fR ++Configure the pruning cron job. The syntax is similar to crontab(5) syntax. ++For example, "0 0 1 * *" schedules the job to run at 12:00am on the first ++day of each month. ++.TP ++\fB\-\-certretention=CERTRETENTION\fR ++Certificate retention time. The default is 30. ++.TP ++\fB\-\-certretentionunit=CERTRETENTIONUNIT\fR ++Certificate retention units. Valid units are: minute, hour, day, year. ++The default is days. ++.TP ++\fB\-\-certsearchsizelimit=CERTSEARCHSIZELIMIT\fR ++LDAP search size limit searching for expired certificates. The default is 1000. This is a client-side limit. There may be additional server-side limitations. ++.TP ++\fB\-\-certsearchtimelimit=CERTSEARCHTIMELIMIT\fR ++LDAP search time limit searching for expired certificates. The default is 0, no limit. This is a client-side limit. There may be additional server-side limitations. ++.TP ++\fB\-\-requestretention=REQUESTRETENTION\fR ++Request retention time. The default is 30. ++.TP ++\fB\-\-requestretentionunit=REQUESTRETENTIONUNIT\fR ++Request retention units. Valid units are: minute, hour, day, year. ++The default is days. ++.TP ++\fB\-\-requestsearchsizelimit=REQUESTSEARCHSIZELIMIT\fR ++LDAP search size limit searching for unfulfilled requests. The default is 1000. There may be additional server-side limitations. ++.TP ++\fB\-\-requestsearchtimelimit=REQUESTSEARCHTIMELIMIT\fR ++LDAP search time limit searching for unfulfilled requests. The default is 0, no limit. There may be additional server-side limitations. ++.TP ++\fB\-\-config\-show\fR ++Show the current pruning configuration ++.TP ++\fB\-\-run\fR ++Run the pruning job now. The IPA RA certificate is used to authenticate to the PKI REST backend. ++ + + .SH "EXIT STATUS" + 0 if the command was successful +diff --git a/ipaserver/install/ipa_acme_manage.py b/ipaserver/install/ipa_acme_manage.py +index 0474b9f4a051063ac6df41a81877a2af9d4a2096..b7b2111d9edcec2580aa4a485d7a7340146ff065 100644 +--- a/ipaserver/install/ipa_acme_manage.py ++++ b/ipaserver/install/ipa_acme_manage.py +@@ -2,7 +2,12 @@ + # Copyright (C) 2020 FreeIPA Contributors see COPYING for license + # + ++ + import enum ++import pki.util ++import logging ++ ++from optparse import OptionGroup # pylint: disable=deprecated-module + + from ipalib import api, errors, x509 + from ipalib import _ +@@ -10,10 +15,64 @@ from ipalib.facts import is_ipa_configured + from ipaplatform.paths import paths + from ipapython.admintool import AdminTool + from ipapython import cookie, dogtag ++from ipapython.ipautil import run ++from ipapython.certdb import NSSDatabase, EXTERNAL_CA_TRUST_FLAGS + from ipaserver.install import cainstance ++from ipaserver.install.ca import lookup_random_serial_number_version + + from ipaserver.plugins.dogtag import RestClient + ++logger = logging.getLogger(__name__) ++ ++default_pruning_options = { ++ 'certRetentionTime': '30', ++ 'certRetentionUnit': 'day', ++ 'certSearchSizeLimit': '1000', ++ 'certSearchTimeLimit': '0', ++ 'requestRetentionTime': 'day', ++ 'requestRetentionUnit': '30', ++ 'requestSearchSizeLimit': '1000', ++ 'requestSearchTimeLimit': '0', ++ 'cron': '' ++} ++ ++pruning_labels = { ++ 'certRetentionTime': 'Certificate Retention Time', ++ 'certRetentionUnit': 'Certificate Retention Unit', ++ 'certSearchSizeLimit': 'Certificate Search Size Limit', ++ 'certSearchTimeLimit': 'Certificate Search Time Limit', ++ 'requestRetentionTime': 'Request Retention Time', ++ 'requestRetentionUnit': 'Request Retention Unit', ++ 'requestSearchSizeLimit': 'Request Search Size Limit', ++ 'requestSearchTimeLimit': 'Request Search Time Limit', ++ 'cron': 'cron Schedule' ++} ++ ++ ++def validate_range(val, min, max): ++ """dogtag appears to have no error checking in the cron ++ entry so do some minimum amount of validation. It is ++ left as an exercise for the user to do month/day ++ validation so requesting Feb 31 will be accepted. ++ ++ Only * and a number within a min/max range are allowed. ++ """ ++ if val == '*': ++ return ++ ++ if '-' in val or '/' in val: ++ raise ValueError(f"{val} ranges are not supported") ++ ++ try: ++ int(val) ++ except ValueError: ++ # raise a clearer error ++ raise ValueError(f"{val} is not a valid integer") ++ ++ if int(val) < min or int(val) > max: ++ raise ValueError(f"{val} not within the range {min}-{max}") ++ ++ + # Manages the FreeIPA ACME service on a per-server basis. + # + # This program is a stop-gap until the deployment-wide management of +@@ -66,32 +125,121 @@ class acme_state(RestClient): + status, unused, _unused = self._request('/acme/disable', + headers=headers) + if status != 200: +- raise RuntimeError('Failed to disble ACME') ++ raise RuntimeError('Failed to disable ACME') + + + class Command(enum.Enum): + ENABLE = 'enable' + DISABLE = 'disable' + STATUS = 'status' ++ PRUNE = 'pruning' + + + class IPAACMEManage(AdminTool): + command_name = "ipa-acme-manage" +- usage = "%prog [enable|disable|status]" ++ usage = "%prog [enable|disable|status|pruning]" + description = "Manage the IPA ACME service" + ++ @classmethod ++ def add_options(cls, parser): ++ ++ group = OptionGroup(parser, 'Pruning') ++ group.add_option( ++ "--enable", dest="enable", action="store_true", ++ default=False, help="Enable certificate pruning") ++ group.add_option( ++ "--disable", dest="disable", action="store_true", ++ default=False, help="Disable certificate pruning") ++ group.add_option( ++ "--cron", dest="cron", action="store", ++ default=None, help="Configure the pruning cron job") ++ group.add_option( ++ "--certretention", dest="certretention", action="store", ++ default=None, help="Certificate retention time", type=int) ++ group.add_option( ++ "--certretentionunit", dest="certretentionunit", action="store", ++ choices=['minute', 'hour', 'day', 'year'], ++ default=None, help="Certificate retention units") ++ group.add_option( ++ "--certsearchsizelimit", dest="certsearchsizelimit", ++ action="store", ++ default=None, help="LDAP search size limit", type=int) ++ group.add_option( ++ "--certsearchtimelimit", dest="certsearchtimelimit", action="store", ++ default=None, help="LDAP search time limit", type=int) ++ group.add_option( ++ "--requestretention", dest="requestretention", action="store", ++ default=None, help="Request retention time", type=int) ++ group.add_option( ++ "--requestretentionunit", dest="requestretentionunit", ++ choices=['minute', 'hour', 'day', 'year'], ++ action="store", default=None, help="Request retention units") ++ group.add_option( ++ "--requestsearchsizelimit", dest="requestsearchsizelimit", ++ action="store", ++ default=None, help="LDAP search size limit", type=int) ++ group.add_option( ++ "--requestsearchtimelimit", dest="requestsearchtimelimit", ++ action="store", ++ default=None, help="LDAP search time limit", type=int) ++ group.add_option( ++ "--config-show", dest="config_show", action="store_true", ++ default=False, help="Show the current pruning configuration") ++ group.add_option( ++ "--run", dest="run", action="store_true", ++ default=False, help="Run the pruning job now") ++ parser.add_option_group(group) ++ super(IPAACMEManage, cls).add_options(parser, debug_option=True) ++ ++ + def validate_options(self): +- # needs root now - if/when this program changes to an API +- # wrapper we will no longer need root. + super(IPAACMEManage, self).validate_options(needs_root=True) + + if len(self.args) < 1: + self.option_parser.error(f'missing command argument') +- else: +- try: +- self.command = Command(self.args[0]) +- except ValueError: +- self.option_parser.error(f'unknown command "{self.args[0]}"') ++ ++ if self.args[0] == "pruning": ++ if self.options.enable and self.options.disable: ++ self.option_parser.error("Cannot both enable and disable") ++ elif ( ++ any( ++ [ ++ self.options.enable, ++ self.options.disable, ++ self.options.cron, ++ self.options.certretention, ++ self.options.certretentionunit, ++ self.options.requestretention, ++ self.options.requestretentionunit, ++ self.options.certsearchsizelimit, ++ self.options.certsearchtimelimit, ++ self.options.requestsearchsizelimit, ++ self.options.requestsearchtimelimit, ++ ] ++ ) ++ and (self.options.config_show or self.options.run) ++ ): ++ ++ self.option_parser.error( ++ "Cannot change and show config or run at the same time" ++ ) ++ elif self.options.cron: ++ if len(self.options.cron.split()) != 5: ++ self.option_parser.error("Invalid format for --cron") ++ # dogtag does no validation when setting an option so ++ # do the minimum. The dogtag cron is limited compared to ++ # crontab(5). ++ opt = self.options.cron.split() ++ validate_range(opt[0], 0, 59) ++ validate_range(opt[1], 0, 23) ++ validate_range(opt[2], 1, 31) ++ validate_range(opt[3], 1, 12) ++ validate_range(opt[4], 0, 6) ++ ++ try: ++ self.command = Command(self.args[0]) ++ except ValueError: ++ self.option_parser.error(f'unknown command "{self.args[0]}"') + + def check_san_status(self): + """ +@@ -100,6 +248,140 @@ class IPAACMEManage(AdminTool): + cert = x509.load_certificate_from_file(paths.HTTPD_CERT_FILE) + cainstance.check_ipa_ca_san(cert) + ++ def pruning(self): ++ def run_pki_server(command, directive, prefix, value=None): ++ """Take a set of arguments to append to pki-server""" ++ args = [ ++ 'pki-server', command, ++ f'{prefix}.{directive}' ++ ] ++ if value: ++ args.extend([str(value)]) ++ logger.debug(args) ++ result = run(args, raiseonerr=False, capture_output=True, ++ capture_error=True) ++ if result.returncode != 0: ++ raise RuntimeError(result.error_output) ++ return result ++ ++ def ca_config_set(directive, value, ++ prefix='jobsScheduler.job.pruning'): ++ run_pki_server('ca-config-set', directive, prefix, value) ++ # ca-config-set always succeeds, even if the option is ++ # not supported. ++ newvalue = ca_config_show(directive) ++ if str(value) != newvalue.strip(): ++ raise RuntimeError('Updating %s failed' % directive) ++ ++ def ca_config_show(directive): ++ result = run_pki_server('ca-config-show', directive, ++ prefix='jobsScheduler.job.pruning') ++ return result.output.strip() ++ ++ def config_show(): ++ status = ca_config_show('enabled') ++ if status.strip() == 'true': ++ print("Status: enabled") ++ else: ++ print("Status: disabled") ++ for option in ( ++ 'certRetentionTime', 'certRetentionUnit', ++ 'certSearchSizeLimit', 'certSearchTimeLimit', ++ 'requestRetentionTime', 'requestRetentionUnit', ++ 'requestSearchSizeLimit', 'requestSearchTimeLimit', ++ 'cron', ++ ): ++ value = ca_config_show(option) ++ if value: ++ print("{}: {}".format(pruning_labels[option], value)) ++ else: ++ print("{}: {}".format(pruning_labels[option], ++ default_pruning_options[option])) ++ ++ def run_pruning(): ++ """Run the pruning job manually""" ++ ++ with NSSDatabase() as tmpdb: ++ print("Preparing...") ++ tmpdb.create_db() ++ tmpdb.import_files((paths.RA_AGENT_PEM, paths.RA_AGENT_KEY), ++ import_keys=True) ++ tmpdb.import_files((paths.IPA_CA_CRT,)) ++ for nickname, trust_flags in tmpdb.list_certs(): ++ if trust_flags.has_key: ++ ra_nickname = nickname ++ continue ++ # external is suffucient for our purposes: C,, ++ tmpdb.trust_root_cert(nickname, EXTERNAL_CA_TRUST_FLAGS) ++ print("Starting job...") ++ args = ['pki', '-C', tmpdb.pwd_file, '-d', tmpdb.secdir, ++ '-n', ra_nickname, ++ 'ca-job-start', 'pruning'] ++ logger.debug(args) ++ run(args, stdin='y') ++ ++ pki_version = pki.util.Version(pki.specification_version()) ++ if pki_version < pki.util.Version("11.3.0"): ++ raise RuntimeError( ++ 'Certificate pruning is not supported in PKI version %s' ++ % pki_version ++ ) ++ ++ if lookup_random_serial_number_version(api) == 0: ++ raise RuntimeError( ++ 'Certificate pruning requires random serial numbers' ++ ) ++ ++ if self.options.config_show: ++ config_show() ++ return ++ ++ if self.options.run: ++ run_pruning() ++ return ++ ++ # Don't play the enable/disable at the same time game ++ if self.options.enable: ++ ca_config_set('owner', 'ipara') ++ ca_config_set('enabled', 'true') ++ ca_config_set('enabled', 'true', 'jobsScheduler') ++ elif self.options.disable: ++ ca_config_set('enabled', 'false') ++ ++ # pki-server ca-config-set can only set one option at a time so ++ # loop through all the options and set what is there. ++ if self.options.certretention: ++ ca_config_set('certRetentionTime', ++ self.options.certretention) ++ if self.options.certretentionunit: ++ ca_config_set('certRetentionUnit', ++ self.options.certretentionunit) ++ if self.options.certsearchtimelimit: ++ ca_config_set('certSearchTimeLimit', ++ self.options.certsearchtimelimit) ++ if self.options.certsearchsizelimit: ++ ca_config_set('certSearchSizeLimit', ++ self.options.certsearchsizelimit) ++ if self.options.requestretention: ++ ca_config_set('requestRetentionTime', ++ self.options.requestretention) ++ if self.options.requestretentionunit: ++ ca_config_set('requestRetentionUnit', ++ self.options.requestretentionunit) ++ if self.options.requestsearchsizelimit: ++ ca_config_set('requestSearchSizeLimit', ++ self.options.requestsearchsizelimit) ++ if self.options.requestsearchtimelimit: ++ ca_config_set('requestSearchTimeLimit', ++ self.options.requestsearchtimelimit) ++ if self.options.cron: ++ ca_config_set('cron', self.options.cron) ++ ++ config_show() ++ ++ print("The CA service must be restarted for changes to take effect") ++ ++ + def run(self): + if not is_ipa_configured(): + print("IPA is not configured.") +@@ -123,7 +405,8 @@ class IPAACMEManage(AdminTool): + elif self.command == Command.STATUS: + status = "enabled" if dogtag.acme_status() else "disabled" + print("ACME is {}".format(status)) +- return 0 ++ elif self.command == Command.PRUNE: ++ self.pruning() + else: + raise RuntimeError('programmer error: unhandled enum case') + +diff --git a/ipatests/test_integration/test_acme.py b/ipatests/test_integration/test_acme.py +index 15d7543cfb0fa0fcb921166f7cd8f13d0535a41d..93e785d8febd9fa8d7b3ef87ecb3f2eb42ac5da2 100644 +--- a/ipatests/test_integration/test_acme.py ++++ b/ipatests/test_integration/test_acme.py +@@ -12,6 +12,9 @@ from ipalib.constants import IPA_CA_RECORD + from ipatests.test_integration.base import IntegrationTest + from ipatests.pytest_ipa.integration import tasks + from ipatests.test_integration.test_caless import CALessBase, ipa_certs_cleanup ++from ipatests.test_integration.test_random_serial_numbers import ( ++ pki_supports_RSNv3 ++) + from ipaplatform.osinfo import osinfo + from ipaplatform.paths import paths + from ipatests.test_integration.test_external_ca import ( +@@ -388,6 +391,16 @@ class TestACME(CALessBase): + status = check_acme_status(self.replicas[0], 'disabled') + assert status == 'disabled' + ++ def test_acme_pruning_no_random_serial(self): ++ """This ACME install is configured without random serial ++ numbers. Verify that we can't enable pruning on it.""" ++ self.master.run_command(['ipa-acme-manage', 'enable']) ++ result = self.master.run_command( ++ ['ipa-acme-manage', 'pruning', '--enable'], ++ raiseonerr=False) ++ assert result.returncode == 1 ++ assert "requires random serial numbers" in result.stderr_text ++ + @server_install_teardown + def test_third_party_certs(self): + """Require ipa-ca SAN on replacement web certificates""" +@@ -630,3 +643,148 @@ class TestACMERenew(IntegrationTest): + renewed_expiry = cert.not_valid_after + + assert initial_expiry != renewed_expiry ++ ++ ++class TestACMEPrune(IntegrationTest): ++ """Validate that ipa-acme-manage configures dogtag for pruning""" ++ ++ random_serial = True ++ ++ @classmethod ++ def install(cls, mh): ++ if not pki_supports_RSNv3(mh.master): ++ raise pytest.skip("RNSv3 not supported") ++ tasks.install_master(cls.master, setup_dns=True, ++ random_serial=True) ++ ++ @classmethod ++ def uninstall(cls, mh): ++ if not pki_supports_RSNv3(mh.master): ++ raise pytest.skip("RSNv3 not supported") ++ super(TestACMEPrune, cls).uninstall(mh) ++ ++ def test_enable_pruning(self): ++ if (tasks.get_pki_version(self.master) ++ < tasks.parse_version('11.3.0')): ++ raise pytest.skip("Certificate pruning is not available") ++ cs_cfg = self.master.get_file_contents(paths.CA_CS_CFG_PATH) ++ assert "jobsScheduler.job.pruning.enabled=false".encode() in cs_cfg ++ ++ self.master.run_command(['ipa-acme-manage', 'pruning', '--enable']) ++ ++ cs_cfg = self.master.get_file_contents(paths.CA_CS_CFG_PATH) ++ assert "jobsScheduler.enabled=true".encode() in cs_cfg ++ assert "jobsScheduler.job.pruning.enabled=true".encode() in cs_cfg ++ assert "jobsScheduler.job.pruning.owner=ipara".encode() in cs_cfg ++ ++ def test_pruning_options(self): ++ if (tasks.get_pki_version(self.master) ++ < tasks.parse_version('11.3.0')): ++ raise pytest.skip("Certificate pruning is not available") ++ ++ self.master.run_command( ++ ['ipa-acme-manage', 'pruning', ++ '--certretention=60', ++ '--certretentionunit=minute', ++ '--certsearchsizelimit=2000', ++ '--certsearchtimelimit=5',] ++ ) ++ cs_cfg = self.master.get_file_contents(paths.CA_CS_CFG_PATH) ++ assert ( ++ "jobsScheduler.job.pruning.certRetentionTime=60".encode() ++ in cs_cfg ++ ) ++ assert ( ++ "jobsScheduler.job.pruning.certRetentionUnit=minute".encode() ++ in cs_cfg ++ ) ++ assert ( ++ "jobsScheduler.job.pruning.certSearchSizeLimit=2000".encode() ++ in cs_cfg ++ ) ++ assert ( ++ "jobsScheduler.job.pruning.certSearchTimeLimit=5".encode() ++ in cs_cfg ++ ) ++ ++ self.master.run_command( ++ ['ipa-acme-manage', 'pruning', ++ '--requestretention=60', ++ '--requestretentionunit=minute', ++ '--requestresearchsizelimit=2000', ++ '--requestsearchtimelimit=5',] ++ ) ++ cs_cfg = self.master.get_file_contents(paths.CA_CS_CFG_PATH) ++ assert ( ++ "jobsScheduler.job.pruning.requestRetentionTime=60".encode() ++ in cs_cfg ++ ) ++ assert ( ++ "jobsScheduler.job.pruning.requestRetentionUnit=minute".encode() ++ in cs_cfg ++ ) ++ assert ( ++ "jobsScheduler.job.pruning.requestSearchSizeLimit=2000".encode() ++ in cs_cfg ++ ) ++ assert ( ++ "jobsScheduler.job.pruning.requestSearchTimeLimit=5".encode() ++ in cs_cfg ++ ) ++ ++ self.master.run_command( ++ ['ipa-acme-manage', 'pruning', ++ '--cron="0 23 1 * *',] ++ ) ++ cs_cfg = self.master.get_file_contents(paths.CA_CS_CFG_PATH) ++ assert ( ++ "jobsScheduler.job.pruning.cron=0 23 1 * *".encode() ++ in cs_cfg ++ ) ++ ++ def test_pruning_negative_options(self): ++ """Negative option testing for things we directly cover""" ++ if (tasks.get_pki_version(self.master) ++ < tasks.parse_version('11.3.0')): ++ raise pytest.skip("Certificate pruning is not available") ++ ++ result = self.master.run_command( ++ ['ipa-acme-manage', 'pruning', ++ '--enable', '--disable'], ++ raiseonerr=False ++ ) ++ assert result.returncode == 1 ++ assert "Cannot both enable and disable" in result.stderr_text ++ ++ for cmd in ('--config-show', '--run'): ++ result = self.master.run_command( ++ ['ipa-acme-manage', 'pruning', ++ cmd, '--enable'], ++ raiseonerr=False ++ ) ++ assert result.returncode == 1 ++ assert "Cannot change and show config" in result.stderr_text ++ ++ result = self.master.run_command( ++ ['ipa-acme-manage', 'pruning', ++ '--cron="* *"'], ++ raiseonerr=False ++ ) ++ assert result.returncode == 1 ++ assert "Invalid format format --cron" in result.stderr_text ++ ++ result = self.master.run_command( ++ ['ipa-acme-manage', 'pruning', ++ '--cron="100 * * * *"'], ++ raiseonerr=False ++ ) ++ assert result.returncode == 1 ++ assert "100 not within the range 0-59" in result.stderr_text ++ ++ result = self.master.run_command( ++ ['ipa-acme-manage', 'pruning', ++ '--cron="10 1-5 * * *"'], ++ raiseonerr=False ++ ) ++ assert result.returncode == 1 ++ assert "1-5 ranges are not supported" in result.stderr_text +-- +2.39.1 + diff --git a/SOURCES/0007-ipatests-ipa-client-install-subid-adds-entry-in-nssw.patch b/SOURCES/0007-ipatests-ipa-client-install-subid-adds-entry-in-nssw.patch deleted file mode 100644 index dcc6bb0..0000000 --- a/SOURCES/0007-ipatests-ipa-client-install-subid-adds-entry-in-nssw.patch +++ /dev/null @@ -1,144 +0,0 @@ -From a39af6b7228d8ba85b9e97aa5decbc056d081c77 Mon Sep 17 00:00:00 2001 -From: Sudhir Menon -Date: Thu, 23 Jun 2022 16:14:39 +0530 -Subject: [PATCH] ipatests: ipa-client-install --subid adds entry in - nsswitch.conf - -This testcase checks that when ipa-client-install command -is run with --subid option, /etc/nsswitch.conf file is updated -with the below entry - -subid: nss -Related: https://pagure.io/freeipa/issue/9159 - -Since the newly added testsuite required client -system, hence modified the below yaml files to change the topology -from *master_1repl to *master_1repl_1client in the below files - -gating.yaml -nightly_latest.yaml -nightly_rawhide.yaml - -Signed-off-by: Sudhir Menon -Reviewed-By: Rob Crittenden -Reviewed-By: Michal Polovka -Reviewed-By: Stanislav Levin -Reviewed-By: Florence Blanc-Renaud -Signed-off-by: Sudhir Menon -Reviewed-By: Rob Crittenden -Reviewed-By: Michal Polovka -Reviewed-By: Stanislav Levin -Reviewed-By: Florence Blanc-Renaud ---- - ipatests/prci_definitions/gating.yaml | 2 +- - .../nightly_ipa-4-10_latest.yaml | 2 +- - .../nightly_ipa-4-10_latest_selinux.yaml | 2 +- - .../nightly_ipa-4-10_previous.yaml | 2 +- - ipatests/test_integration/test_subids.py | 38 +++++++++++++++++++ - 5 files changed, 42 insertions(+), 4 deletions(-) - -diff --git a/ipatests/prci_definitions/gating.yaml b/ipatests/prci_definitions/gating.yaml -index 4083c650a17ce76bdefa243f1a7c5924039ff0bb..db4875dcfae8676287ef771805b34d988330bb40 100644 ---- a/ipatests/prci_definitions/gating.yaml -+++ b/ipatests/prci_definitions/gating.yaml -@@ -309,4 +309,4 @@ jobs: - test_suite: test_integration/test_subids.py - template: *ci-ipa-4-10-latest - timeout: 3600 -- topology: *master_1repl -+ topology: *master_1repl_1client -diff --git a/ipatests/prci_definitions/nightly_ipa-4-10_latest.yaml b/ipatests/prci_definitions/nightly_ipa-4-10_latest.yaml -index 24aa6e7cf29e448ba9d838d1cb98169213ea63ef..027b2a5b6c0b7ec3c3b5784ec4569661a06d4ed7 100644 ---- a/ipatests/prci_definitions/nightly_ipa-4-10_latest.yaml -+++ b/ipatests/prci_definitions/nightly_ipa-4-10_latest.yaml -@@ -1748,7 +1748,7 @@ jobs: - test_suite: test_integration/test_subids.py - template: *ci-ipa-4-10-latest - timeout: 3600 -- topology: *master_1repl -+ topology: *master_1repl_1client - - fedora-latest-ipa-4-10/test_custom_plugins: - requires: [fedora-latest-ipa-4-10/build] -diff --git a/ipatests/prci_definitions/nightly_ipa-4-10_latest_selinux.yaml b/ipatests/prci_definitions/nightly_ipa-4-10_latest_selinux.yaml -index f22cc08384b3d50e49278d38e73bf93cd7804e80..bcc17bef935666735bfb2c2e51209362a374b511 100644 ---- a/ipatests/prci_definitions/nightly_ipa-4-10_latest_selinux.yaml -+++ b/ipatests/prci_definitions/nightly_ipa-4-10_latest_selinux.yaml -@@ -1887,7 +1887,7 @@ jobs: - test_suite: test_integration/test_subids.py - template: *ci-ipa-4-10-latest - timeout: 3600 -- topology: *master_1repl -+ topology: *master_1repl_1client - - fedora-latest-ipa-4-10/test_custom_plugins: - requires: [fedora-latest-ipa-4-10/build] -diff --git a/ipatests/prci_definitions/nightly_ipa-4-10_previous.yaml b/ipatests/prci_definitions/nightly_ipa-4-10_previous.yaml -index df98a66871fd90daaebd83f063e48f1580675049..37d38762e696a6394ef146a0e2b68bbc8ced515d 100644 ---- a/ipatests/prci_definitions/nightly_ipa-4-10_previous.yaml -+++ b/ipatests/prci_definitions/nightly_ipa-4-10_previous.yaml -@@ -1748,7 +1748,7 @@ jobs: - test_suite: test_integration/test_subids.py - template: *ci-ipa-4-10-previous - timeout: 3600 -- topology: *master_1repl -+ topology: *master_1repl_1client - - fedora-previous-ipa-4-10/test_custom_plugins: - requires: [fedora-previous-ipa-4-10/build] -diff --git a/ipatests/test_integration/test_subids.py b/ipatests/test_integration/test_subids.py -index f6d8607f237bf03358baae008dd2a6ad819751c0..8158499e1a2b71bdc1a308dec0939fd0d491599d 100644 ---- a/ipatests/test_integration/test_subids.py -+++ b/ipatests/test_integration/test_subids.py -@@ -17,6 +17,7 @@ from ipatests.test_integration.base import IntegrationTest - - class TestSubordinateId(IntegrationTest): - num_replicas = 0 -+ num_clients = 1 - topology = "star" - - def _parse_result(self, result): -@@ -268,3 +269,40 @@ class TestSubordinateId(IntegrationTest): - f"--subuid={subuid}"]) - owner = self._parse_result(result)["owner"] - assert owner == uid -+ -+ def test_nsswitch_doesnot_contain_subid_entry(self): -+ """ -+ This testcase checks that when ipa-client-install -+ is installed without subid option, the nsswitch.conf -+ does not contain subid entry or does not use sss as -+ source for subid -+ """ -+ cmd = self.clients[0].run_command( -+ ["grep", "^subid", "/etc/nsswitch.conf"], -+ raiseonerr=False -+ ) -+ # a source is defined for the subid database. -+ # Ensure it is not "sss" -+ if cmd.returncode == 0: -+ assert 'sss' not in cmd.stdout_text -+ else: -+ # grep command returncode 1 means no matching line -+ # was found = no source is defined for the subid database, -+ # which is valid other return codes would -+ # mean an error occurred -+ assert cmd.returncode == 1 -+ -+ def test_nsswitch_is_updated_with_subid_entry(self): -+ """ -+ This test case checks that when ipa-client-install -+ is installed with --subid option, the nsswitch.conf -+ file is modified with the entry 'subid: sss' -+ """ -+ tasks.uninstall_client(self.clients[0]) -+ tasks.install_client(self.master, self.clients[0], -+ extra_args=['--subid']) -+ cmd = self.clients[0].run_command( -+ ["grep", "^subid", "/etc/nsswitch.conf"] -+ ) -+ subid = cmd.stdout_text.split() -+ assert ['subid:', 'sss'] == subid --- -2.37.2 - diff --git a/SOURCES/0008-doc-add-the-run-command-for-manual-job-execution.patch b/SOURCES/0008-doc-add-the-run-command-for-manual-job-execution.patch new file mode 100644 index 0000000..4dd7587 --- /dev/null +++ b/SOURCES/0008-doc-add-the-run-command-for-manual-job-execution.patch @@ -0,0 +1,138 @@ +From f10d1a0f84ed0f16ab4a1469f16ffadb3e79e59e Mon Sep 17 00:00:00 2001 +From: Rob Crittenden +Date: Fri, 27 Jan 2023 14:05:37 -0500 +Subject: [PATCH] doc: add the --run command for manual job execution + +A manual method was mentioned with no specificity. Include +the --run command. Also update the troubleshooting section +to show what failure to restart the CA after configuration +looks like. + +Import the IPA CA chain for manual execution. + +Also fix up some $ -> # to indicate root is needed. + +Related: https://pagure.io/freeipa/issue/9294 + +Signed-off-by: Rob Crittenden +Reviewed-By: Florence Blanc-Renaud +--- + doc/designs/expired_certificate_pruning.md | 46 +++++++++++++++------- + 1 file changed, 32 insertions(+), 14 deletions(-) + +diff --git a/doc/designs/expired_certificate_pruning.md b/doc/designs/expired_certificate_pruning.md +index 2c10d914020d3c12b6abb028323cd6796ec33e00..a23e452696ba2a150c4ad5a3e57360ae0a16a338 100644 +--- a/doc/designs/expired_certificate_pruning.md ++++ b/doc/designs/expired_certificate_pruning.md +@@ -139,7 +139,7 @@ No validation of setting February 31st will be done. That will be left to PKI. B + + ### Disabling pruning + +-`$ ipa-acme-manage pruning --enable=FALSE` ++`# ipa-acme-manage pruning --enable=FALSE` + + This will remove the configuration option for `jobsScheduler.job.pruning.cron` just to be sure it no longer runs. + +@@ -147,46 +147,46 @@ This will remove the configuration option for `jobsScheduler.job.pruning.cron` j + + #### Pruning certificates + +-`$ ipa-acme-manage pruning --certretention=VALUE --certretentionunit=UNIT` ++`# ipa-acme-manage pruning --certretention=VALUE --certretentionunit=UNIT` + + will be the equivalent of: + +-`$ pki-server ca-config-set jobsScheduler.job.pruning.certRetentionTime 30` ++`# pki-server ca-config-set jobsScheduler.job.pruning.certRetentionTime 30` + +-`$ pki-server ca-config-set jobsScheduler.job.pruning.certRetentionUnit day` ++`# pki-server ca-config-set jobsScheduler.job.pruning.certRetentionUnit day` + + The unit will always be required when modifying the time. + +-`$ ipa-acme-manage pruning --certsearchsizelimit=VALUE --certsearchtimelimit=VALUE` ++`# ipa-acme-manage pruning --certsearchsizelimit=VALUE --certsearchtimelimit=VALUE` + + will be the equivalent of: + +-`$ pki-server ca-config-set jobsScheduler.job.pruning.certSearchSizeLimit 1000` ++`# pki-server ca-config-set jobsScheduler.job.pruning.certSearchSizeLimit 1000` + +-`$ pki-server ca-config-set jobsScheduler.job.pruning.certSearchTimeLimit 0` ++`# pki-server ca-config-set jobsScheduler.job.pruning.certSearchTimeLimit 0` + + A value of 0 for searchtimelimit is unlimited. + + #### Pruning requests + +-`$ ipa-acme-manage pruning --requestretention=VALUE --requestretentionunit=UNIT` ++`# ipa-acme-manage pruning --requestretention=VALUE --requestretentionunit=UNIT` + + will be the equivalent of: + +-`$ pki-server ca-config-set jobsScheduler.job.pruning.requestRetentionTime 30` ++`# pki-server ca-config-set jobsScheduler.job.pruning.requestRetentionTime 30` + +-`$ pki-server ca-config-set jobsScheduler.job.pruning.requestRetentionUnit day` ++`# pki-server ca-config-set jobsScheduler.job.pruning.requestRetentionUnit day` + + The unit will always be required when modifying the time. + +-`$ ipa-acme-manage pruning --requestsearchsizelimit=VALUE --requestsearchtimelimit=VALUE` ++`# ipa-acme-manage pruning --requestsearchsizelimit=VALUE --requestsearchtimelimit=VALUE` + + + will be the equivalent of: + +-`$ pki-server ca-config-set jobsScheduler.job.pruning.requestSearchSizeLimit 1000` ++`# pki-server ca-config-set jobsScheduler.job.pruning.requestSearchSizeLimit 1000` + +-`$ pki-server ca-config-set jobsScheduler.job.pruning.requestSearchTimeLimit 0` ++`# pki-server ca-config-set jobsScheduler.job.pruning.requestSearchTimeLimit 0` + + A value of 0 for searchtimelimit is unlimited. + +@@ -212,10 +212,15 @@ Request search time limit: 0 + Cron: 0 0 1 * * + ``` + ++### Manual pruning ++ ++`# ipa-acme-manage pruning --run` ++ ++This is useful for testing the configuration or if the user wants to use the system cron or systemd timers for handling automation. ++ + ## Implementation + + For online REST operations (login, run job) we will use the `ipaserver/plugins/dogtag.py::RestClient` class to manage the requests. This will take care of the authentication cookie, etc. +- + The class uses dogtag.https_request() will can take PEM cert and key files as arguments. These will be used for authentication. + + For the non-REST operations (configuration, cron settings) the tool will fork out to pki-server ca-config-set. +@@ -239,6 +244,7 @@ Overview of the CLI commands. Example: + | ipa-acme-manage pruning | --requestretention=30 --requestretentionunit=day | + | ipa-acme-manage pruning | --requestsearchsizelimit=1000 --requestsearchtimelimit=0 | + | ipa-acme-manage pruning | --config-show | ++| ipa-acme-manage pruning | --run | + + ipa-acme-manage can only be run as root. + +@@ -295,3 +301,15 @@ The PKI debug log will contain job information. + 2022-12-08 21:15:24 [pruning] INFO: PruningJob: - filter: (&(!(requestState=complete))(requestModifyTime<=1667942124527)(!(requestModifyTime=1667942124527))) + 2022-12-08 21:15:24 [pruning] INFO: LDAPSession: Searching ou=ca, ou=requests,o=ipaca for (&(!(requestState=complete))(dateOfModify<=20221108211524Z)(!(dateOfModify=20221108211524Z))) + ``` ++ ++### Manual execution fails with Forbidden ++ ++If manually running pruning fails with a message like: ++ ++```console ++# ipa-acme-manage pruning --run ++CalledProcessError(Command ['pki', '-C', '/tmp/tmppyyd3hfq/pwdfile.txt', '-d', '/tmp/tmppyyd3hfq', '-n', 'CN=IPA RA,O=EXAMPLE.TEST', 'ca-job-start', 'pruning'] returned non-zero exit status 255: 'PKIException: Forbidden\n') ++The ipa-acme-manage command failed. ++``` ++ ++You probably forgot to restart the CA after enabling pruning. +-- +2.39.1 + diff --git a/SOURCES/0008-webui-Allow-grace-login-limit.patch b/SOURCES/0008-webui-Allow-grace-login-limit.patch deleted file mode 100644 index d5da4d3..0000000 --- a/SOURCES/0008-webui-Allow-grace-login-limit.patch +++ /dev/null @@ -1,56 +0,0 @@ -From 7a1e1d9f1cb13679c28f12d05b156a08bcc4d856 Mon Sep 17 00:00:00 2001 -From: Carla Martinez -Date: Fri, 29 Jul 2022 13:16:16 +0200 -Subject: [PATCH] webui: Allow grace login limit - -There was no support for setting the grace login limit on the WebUI. The -only way to so was only via CLI: - - `ipa pwpolicy-mod --gracelimit=2 global_policy` - -Thus, the grace login limit must be updated from the policy section and -this will reflect also on the user settings (under the 'Password Policy' -section) - -Fixes: https://pagure.io/freeipa/issue/9211 - -Signed-off-by: Carla Martinez -Reviewed-By: Florence Blanc-Renaud ---- - install/ui/src/freeipa/policy.js | 3 +++ - install/ui/src/freeipa/user.js | 5 +++++ - 2 files changed, 8 insertions(+) - -diff --git a/install/ui/src/freeipa/policy.js b/install/ui/src/freeipa/policy.js -index fa2028a52b1118b6125f91153280da0a2ffe0584..7ec103636ced0cce34997d81a02b25ba73bda33f 100644 ---- a/install/ui/src/freeipa/policy.js -+++ b/install/ui/src/freeipa/policy.js -@@ -72,6 +72,9 @@ return { - { - name: 'cospriority', - required: true -+ }, -+ { -+ name: 'passwordgracelimit' - } - ] - }] -diff --git a/install/ui/src/freeipa/user.js b/install/ui/src/freeipa/user.js -index a580db03599457eefd85f8c23d74c284946393c7..b47c97f72008f2f4e75b4cb88e9ff6756827b26e 100644 ---- a/install/ui/src/freeipa/user.js -+++ b/install/ui/src/freeipa/user.js -@@ -318,6 +318,11 @@ return { - label: '@mo-param:pwpolicy:krbpwdlockoutduration:label', - read_only: true, - measurement_unit: 'seconds' -+ }, -+ { -+ name: 'passwordgracelimit', -+ label: '@mo-param:pwpolicy:passwordgracelimit:label', -+ read_only: true - } - ] - }, --- -2.37.2 - diff --git a/SOURCES/0009-Additional-tests-for-RSN-v3.patch b/SOURCES/0009-Additional-tests-for-RSN-v3.patch deleted file mode 100644 index 283550c..0000000 --- a/SOURCES/0009-Additional-tests-for-RSN-v3.patch +++ /dev/null @@ -1,226 +0,0 @@ -From bfe074ed478c20a9537dc2a714bba50dbc2cd34f Mon Sep 17 00:00:00 2001 -From: Sumedh Sidhaye -Date: Fri, 5 Aug 2022 11:22:59 +0530 -Subject: [PATCH] Additional tests for RSN v3 - -New Tests include -TestRSNPKIConfig -TestRSNVault - -The new tests are just extending existing classes to be run -with random serial numbers enabled - -The tests also include a new method to check params set in CS.cfg for both CA and -KRA, and another test to check Random Serial Number version while -running `ipa ca-find` - -Added nightly definitions - -Related Ticket: https://pagure.io/freeipa/issue/2016 - -Signed-off-by: Sumedh Sidhaye -Reviewed-By: Rob Crittenden -Reviewed-By: Florence Blanc-Renaud ---- - .../nightly_ipa-4-10_latest.yaml | 24 +++++++++ - .../nightly_ipa-4-10_latest_selinux.yaml | 26 ++++++++++ - .../nightly_ipa-4-10_previous.yaml | 24 +++++++++ - .../test_random_serial_numbers.py | 51 ++++++++++++++++++- - ipatests/test_integration/test_vault.py | 4 +- - 5 files changed, 127 insertions(+), 2 deletions(-) - -diff --git a/ipatests/prci_definitions/nightly_ipa-4-10_latest.yaml b/ipatests/prci_definitions/nightly_ipa-4-10_latest.yaml -index 027b2a5b6c0b7ec3c3b5784ec4569661a06d4ed7..547320d258f51132266b56e9193533d2291c623c 100644 ---- a/ipatests/prci_definitions/nightly_ipa-4-10_latest.yaml -+++ b/ipatests/prci_definitions/nightly_ipa-4-10_latest.yaml -@@ -1821,3 +1821,27 @@ jobs: - template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl -+ -+ fedora-latest-ipa-4-10/test_random_serial_numbers_TestRSNPKIConfig: -+ requires: [fedora-latest-ipa-4-10/build] -+ priority: 50 -+ job: -+ class: RunPytest -+ args: -+ build_url: '{fedora-latest-ipa-4-10/build_url}' -+ test_suite: test_integration/test_random_serial_numbers.py::TestRSNPKIConfig -+ template: *ci-ipa-4-10-latest -+ timeout: 10800 -+ topology: *master_3repl_1client -+ -+ fedora-latest-ipa-4-10/test_random_serial_numbers_TestRSNVault: -+ requires: [fedora-latest-ipa-4-10/build] -+ priority: 50 -+ job: -+ class: RunPytest -+ args: -+ build_url: '{fedora-latest-ipa-4-10/build_url}' -+ test_suite: test_integration/test_random_serial_numbers.py::TestRSNVault -+ template: *ci-ipa-4-10-latest -+ timeout: 10800 -+ topology: *master_1repl -\ No newline at end of file -diff --git a/ipatests/prci_definitions/nightly_ipa-4-10_latest_selinux.yaml b/ipatests/prci_definitions/nightly_ipa-4-10_latest_selinux.yaml -index bcc17bef935666735bfb2c2e51209362a374b511..f6e5f1cff22de9db4df4577d1cd615499cf0fab3 100644 ---- a/ipatests/prci_definitions/nightly_ipa-4-10_latest_selinux.yaml -+++ b/ipatests/prci_definitions/nightly_ipa-4-10_latest_selinux.yaml -@@ -1966,3 +1966,29 @@ jobs: - template: *ci-ipa-4-10-latest - timeout: 5400 - topology: *master_1repl -+ -+ fedora-latest-ipa-4-10/test_random_serial_numbers_TestRSNPKIConfig: -+ requires: [fedora-latest-ipa-4-10/build] -+ priority: 50 -+ job: -+ class: RunPytest -+ args: -+ build_url: '{fedora-latest-ipa-4-10/build_url}' -+ selinux_enforcing: True -+ test_suite: test_integration/test_random_serial_numbers.py::TestRSNPKIConfig -+ template: *ci-ipa-4-10-latest -+ timeout: 10800 -+ topology: *master_3repl_1client -+ -+ fedora-latest-ipa-4-10/test_random_serial_numbers_TestRSNVault: -+ requires: [fedora-latest-ipa-4-10/build] -+ priority: 50 -+ job: -+ class: RunPytest -+ args: -+ build_url: '{fedora-latest-ipa-4-10/build_url}' -+ selinux_enforcing: True -+ test_suite: test_integration/test_random_serial_numbers.py::TestRSNVault -+ template: *ci-ipa-4-10-latest -+ timeout: 10800 -+ topology: *master_1repl -diff --git a/ipatests/prci_definitions/nightly_ipa-4-10_previous.yaml b/ipatests/prci_definitions/nightly_ipa-4-10_previous.yaml -index 37d38762e696a6394ef146a0e2b68bbc8ced515d..463f4b92fecc7fbc0be969de422352fb7baeb797 100644 ---- a/ipatests/prci_definitions/nightly_ipa-4-10_previous.yaml -+++ b/ipatests/prci_definitions/nightly_ipa-4-10_previous.yaml -@@ -1821,3 +1821,27 @@ jobs: - template: *ci-ipa-4-10-previous - timeout: 5400 - topology: *master_1repl -+ -+ fedora-previous-ipa-4-10/test_random_serial_numbers_TestRSNPKIConfig: -+ requires: [fedora-previous-ipa-4-10/build] -+ priority: 50 -+ job: -+ class: RunPytest -+ args: -+ build_url: '{fedora-previous-ipa-4-10/build_url}' -+ test_suite: test_integration/test_random_serial_numbers.py::TestRSNPKIConfig -+ template: *ci-ipa-4-10-previous -+ timeout: 10800 -+ topology: *master_3repl_1client -+ -+ fedora-previous-ipa-4-10/test_random_serial_numbers_TestRSNVault: -+ requires: [fedora-previous-ipa-4-10/build] -+ priority: 50 -+ job: -+ class: RunPytest -+ args: -+ build_url: '{fedora-previous-ipa-4-10/build_url}' -+ test_suite: test_integration/test_random_serial_numbers.py::TestRSNVault -+ template: *ci-ipa-4-10-previous -+ timeout: 10800 -+ topology: *master_1repl -diff --git a/ipatests/test_integration/test_random_serial_numbers.py b/ipatests/test_integration/test_random_serial_numbers.py -index c52cfa4ed50e2718791b0844d743fb240d26b365..ab58b1c622b010994ed93a17dd80cfd02095508d 100644 ---- a/ipatests/test_integration/test_random_serial_numbers.py -+++ b/ipatests/test_integration/test_random_serial_numbers.py -@@ -4,12 +4,15 @@ - - import pytest - -+from ipaplatform.paths import paths -+ -+from ipatests.pytest_ipa.integration import tasks - from ipatests.test_integration.test_installation import ( - TestInstallWithCA_DNS1, - TestInstallWithCA_KRA1, - ) - from ipatests.test_integration.test_caless import TestServerCALessToExternalCA -- -+from ipatests.test_integration.test_vault import TestInstallKRA - from ipatests.test_integration.test_commands import TestIPACommand - - -@@ -26,6 +29,18 @@ def pki_supports_RSNv3(host): - return False - - -+def check_pki_config_params(host): -+ # Check CS.cfg -+ try: -+ cs_cfg = host.get_file_contents(paths.CA_CS_CFG_PATH) -+ kra_cfg = host.get_file_contents(paths.KRA_CS_CFG_PATH) -+ assert "dbs.cert.id.generator=random".encode() in cs_cfg -+ assert "dbs.request.id.generator=random".encode() in cs_cfg -+ assert "dbs.key.id.generator=random".encode() in kra_cfg -+ except IOError: -+ pytest.skip("PKI config not present.Skipping test") -+ -+ - class TestInstallWithCA_DNS1_RSN(TestInstallWithCA_DNS1): - random_serial = True - -@@ -70,3 +85,37 @@ class TestServerCALessToExternalCA_RSN(TestServerCALessToExternalCA): - if not pki_supports_RSNv3(mh.master): - raise pytest.skip("RSNv3 not supported") - super(TestServerCALessToExternalCA_RSN, cls).uninstall(mh) -+ -+ -+class TestRSNPKIConfig(TestInstallWithCA_KRA1): -+ random_serial = True -+ num_replicas = 3 -+ -+ @classmethod -+ def install(cls, mh): -+ if not pki_supports_RSNv3(mh.master): -+ raise pytest.skip("RSNv3 not supported") -+ super(TestRSNPKIConfig, cls).install(mh) -+ -+ def test_check_pki_config(self): -+ check_pki_config_params(self.master) -+ check_pki_config_params(self.replicas[0]) -+ check_pki_config_params(self.replicas[1]) -+ -+ def test_check_rsn_version(self): -+ tasks.kinit_admin(self.master) -+ res = self.master.run_command(['ipa', 'ca-find']) -+ assert 'RSN Version: 3' in res.stdout_text -+ tasks.kinit_admin(self.replicas[0]) -+ res = self.replicas[0].run_command(['ipa', 'ca-find']) -+ assert 'RSN Version: 3' in res.stdout_text -+ -+ -+class TestRSNVault(TestInstallKRA): -+ random_serial = True -+ -+ @classmethod -+ def install(cls, mh): -+ if not pki_supports_RSNv3(mh.master): -+ raise pytest.skip("RSNv3 not supported") -+ super(TestRSNVault, cls).install(mh) -diff --git a/ipatests/test_integration/test_vault.py b/ipatests/test_integration/test_vault.py -index 548822d049070d6f9d42da772264eb24010fafda..6288e557f96cae60d031b44c49fbe830712eb7be 100644 ---- a/ipatests/test_integration/test_vault.py -+++ b/ipatests/test_integration/test_vault.py -@@ -33,7 +33,9 @@ class TestInstallKRA(IntegrationTest): - - @classmethod - def install(cls, mh): -- tasks.install_master(cls.master, setup_kra=True) -+ tasks.install_master(cls.master, -+ setup_kra=True, -+ random_serial=cls.random_serial) - # do not install KRA on replica, it is part of test - tasks.install_replica(cls.master, cls.replicas[0], setup_kra=False) - --- -2.37.2 - diff --git a/SOURCES/0009-tests-add-wrapper-around-ACME-RSNv3-test.patch b/SOURCES/0009-tests-add-wrapper-around-ACME-RSNv3-test.patch new file mode 100644 index 0000000..0137fbb --- /dev/null +++ b/SOURCES/0009-tests-add-wrapper-around-ACME-RSNv3-test.patch @@ -0,0 +1,43 @@ +From d24b69981d94fce7b1e1aa4a5c1ab88a123f96b5 Mon Sep 17 00:00:00 2001 +From: Rob Crittenden +Date: Fri, 3 Feb 2023 10:04:31 -0500 +Subject: [PATCH] tests: add wrapper around ACME RSNv3 test + +This test is located outside of the TestACMEPrune because +it enables RSNv3 while the server installed by TestACME doesn't. + +It still needs a wrapper to enforce a version of PKI that +supports pruning because that is checked first in the tool. +Re-ordering that wouldn't be a good user experience. + +https://pagure.io/freeipa/issue/9322 + +Signed-off-by: Rob Crittenden +Reviewed-By: Rob Crittenden +--- + ipatests/test_integration/test_acme.py | 9 ++++++++- + 1 file changed, 8 insertions(+), 1 deletion(-) + +diff --git a/ipatests/test_integration/test_acme.py b/ipatests/test_integration/test_acme.py +index 93e785d8febd9fa8d7b3ef87ecb3f2eb42ac5da2..5ceba05976059de69414a79634d98045c3ab68bb 100644 +--- a/ipatests/test_integration/test_acme.py ++++ b/ipatests/test_integration/test_acme.py +@@ -393,7 +393,14 @@ class TestACME(CALessBase): + + def test_acme_pruning_no_random_serial(self): + """This ACME install is configured without random serial +- numbers. Verify that we can't enable pruning on it.""" ++ numbers. Verify that we can't enable pruning on it. ++ ++ This test is located here because by default installs ++ don't enable RSNv3. ++ """ ++ if (tasks.get_pki_version(self.master) ++ < tasks.parse_version('11.3.0')): ++ raise pytest.skip("Certificate pruning is not available") + self.master.run_command(['ipa-acme-manage', 'enable']) + result = self.master.run_command( + ['ipa-acme-manage', 'pruning', '--enable'], +-- +2.39.1 + diff --git a/SOURCES/0010-automember-rebuild-add-a-notice-about-high-CPU-usage.patch b/SOURCES/0010-automember-rebuild-add-a-notice-about-high-CPU-usage.patch new file mode 100644 index 0000000..f3891fd --- /dev/null +++ b/SOURCES/0010-automember-rebuild-add-a-notice-about-high-CPU-usage.patch @@ -0,0 +1,68 @@ +From 2857bc69957bde7e59fff1c66c5a83c7f560616b Mon Sep 17 00:00:00 2001 +From: Florence Blanc-Renaud +Date: Tue, 31 Jan 2023 15:53:08 +0100 +Subject: [PATCH] automember-rebuild: add a notice about high CPU usage + +The automember-rebuild task may require high CPU usage +if many users/hosts/groups are processed. +Add a note in the ipa automember-rebuild CLI output +and in the WebUI confirmation message. + +Fixes: https://pagure.io/freeipa/issue/9320 +Signed-off-by: Florence Blanc-Renaud +Reviewed-By: Francisco Trivino +--- + install/ui/test/data/i18n_messages.json | 2 +- + ipaclient/plugins/automember.py | 8 ++++++++ + ipaserver/plugins/internal.py | 6 +++++- + 3 files changed, 14 insertions(+), 2 deletions(-) + +diff --git a/install/ui/test/data/i18n_messages.json b/install/ui/test/data/i18n_messages.json +index 49d288326d8cea192a16e93a274599805b0ea666..5b735487bf33805e8f0534d378d1497f05a11be8 100644 +--- a/install/ui/test/data/i18n_messages.json ++++ b/install/ui/test/data/i18n_messages.json +@@ -7,7 +7,7 @@ + "actions": { + "apply": "Apply", + "automember_rebuild": "Rebuild auto membership", +- "automember_rebuild_confirm": "Are you sure you want to rebuild auto membership?", ++ "automember_rebuild_confirm": "Are you sure you want to rebuild auto membership? In case of a high number of users, hosts or groups, the operation may require high CPU usage.", + "automember_rebuild_success": "Automember rebuild membership task completed", + "confirm": "Are you sure you want to proceed with the action?", + "delete_confirm": "Are you sure you want to delete ${object}?", +diff --git a/ipaclient/plugins/automember.py b/ipaclient/plugins/automember.py +index df4a2e5a01744e0ff22c74180e13c2e7dc33fbaa..7108dc948753b9f6a4439842bd75e7c5e064bda6 100644 +--- a/ipaclient/plugins/automember.py ++++ b/ipaclient/plugins/automember.py +@@ -34,3 +34,11 @@ class automember_add_condition(MethodOverride): + flags=['suppress_empty'], + ), + ) ++ ++ ++@register(override=True, no_fail=True) ++class automember_rebuild(MethodOverride): ++ def interactive_prompt_callback(self, kw): ++ msg = _('IMPORTANT: In case of a high number of users, hosts or ' ++ 'groups, the operation may require high CPU usage.') ++ self.Backend.textui.print_plain(msg) +diff --git a/ipaserver/plugins/internal.py b/ipaserver/plugins/internal.py +index 5ffa7a281548a0658386f8740dbddd96fd0bc7d6..e1e920f8bb49dd8ba8f30b727111bb1316f6a918 100644 +--- a/ipaserver/plugins/internal.py ++++ b/ipaserver/plugins/internal.py +@@ -160,7 +160,11 @@ class i18n_messages(Command): + "actions": { + "apply": _("Apply"), + "automember_rebuild": _("Rebuild auto membership"), +- "automember_rebuild_confirm": _("Are you sure you want to rebuild auto membership?"), ++ "automember_rebuild_confirm": _( ++ "Are you sure you want to rebuild auto membership? In case of " ++ "a high number of users, hosts or groups, the operation " ++ "may require high CPU usage." ++ ), + "automember_rebuild_success": _("Automember rebuild membership task completed"), + "confirm": _("Are you sure you want to proceed with the action?"), + "delete_confirm": _("Are you sure you want to delete ${object}?"), +-- +2.39.1 + diff --git a/SOURCES/0010-check_repl_update-in-progress-is-a-boolean.patch b/SOURCES/0010-check_repl_update-in-progress-is-a-boolean.patch deleted file mode 100644 index 136ad91..0000000 --- a/SOURCES/0010-check_repl_update-in-progress-is-a-boolean.patch +++ /dev/null @@ -1,35 +0,0 @@ -From 2003eb6b3d4a27a5de5eaa79418f115dd99886cd Mon Sep 17 00:00:00 2001 -From: Florence Blanc-Renaud -Date: Sun, 7 Aug 2022 12:44:47 +0200 -Subject: [PATCH] check_repl_update: in progress is a boolean - -With the fix for https://pagure.io/freeipa/issue/9171, -nsds5replicaUpdateInProgress is now handled as a boolean. -One remaining occurrence was still handling it as a string -and calling lower() on its value. - -Replace with direct boolean comparison. - -Fixes: https://pagure.io/freeipa/issue/9218 -Signed-off-by: Florence Blanc-Renaud -Reviewed-By: Alexander Bokovoy ---- - ipaserver/install/replication.py | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/ipaserver/install/replication.py b/ipaserver/install/replication.py -index 16be3760cb14bfeb1cc9a761400752071639dc7c..9d9aa1c4bfc99109c0cf1e6d1619ec1b38e20c02 100644 ---- a/ipaserver/install/replication.py -+++ b/ipaserver/install/replication.py -@@ -1152,7 +1152,7 @@ class ReplicationManager: - except (ValueError, TypeError, KeyError): - end = 0 - # incremental update is done if inprogress is false and end >= start -- done = inprogress and inprogress.lower() == 'false' and start <= end -+ done = inprogress is not None and not inprogress and start <= end - logger.info("Replication Update in progress: %s: status: %s: " - "start: %d: end: %d", - inprogress, status, start, end) --- -2.37.2 - diff --git a/SOURCES/0011-Fix-setting-values-of-0-in-ACME-pruning.patch b/SOURCES/0011-Fix-setting-values-of-0-in-ACME-pruning.patch new file mode 100644 index 0000000..55f2f0d --- /dev/null +++ b/SOURCES/0011-Fix-setting-values-of-0-in-ACME-pruning.patch @@ -0,0 +1,158 @@ +From 20ff7c16022793c707f6c2b8fb38a801870bc0e2 Mon Sep 17 00:00:00 2001 +From: Rob Crittenden +Date: Wed, 8 Feb 2023 10:42:58 -0500 +Subject: [PATCH] Fix setting values of 0 in ACME pruning + +Replace comparisons of "if value" with "if value is not None" +in order to handle 0. + +Add a short reference to the man page to indicat that a cert +or request retention time of 0 means remove at the next +execution. + +Also indicate that the search time limit is in seconds. + +Fixes: https://pagure.io/freeipa/issue/9325 + +Signed-off-by: Rob Crittenden +Reviewed-By: Francisco Trivino +--- + doc/designs/expired_certificate_pruning.md | 4 ++-- + install/tools/man/ipa-acme-manage.1 | 8 +++---- + ipaserver/install/ipa_acme_manage.py | 28 +++++++++++----------- + 3 files changed, 20 insertions(+), 20 deletions(-) + +diff --git a/doc/designs/expired_certificate_pruning.md b/doc/designs/expired_certificate_pruning.md +index a23e452696ba2a150c4ad5a3e57360ae0a16a338..35ead7b00145b5df44caf542cba277f0e6e08b6a 100644 +--- a/doc/designs/expired_certificate_pruning.md ++++ b/doc/designs/expired_certificate_pruning.md +@@ -67,11 +67,11 @@ There are four values each that can be managed for pruning certificates and requ + * expired cert/incomplete request time + * time unit + * LDAP search size limit +-* LDAP search time limit ++* LDAP search time limit (in seconds) + + The first two configure when an expired certificate or incomplete request will be deleted. The unit can be one of: minute, hour, day, year. By default it is 30 days. + +-The LDAP limits control how many entries are returned and how long the search can take. By default it is 1000 entries and unlimited time. ++The LDAP limits control how many entries are returned and how long the search can take. By default it is 1000 entries and unlimited time (0 == unlimited, unit is seconds). + + ### Configuration settings + +diff --git a/install/tools/man/ipa-acme-manage.1 b/install/tools/man/ipa-acme-manage.1 +index e6cec4e4a7fd460c514a72456a2dc9a2e3682ebd..b8383c14f482698d2bcc8b08f0c0bf5882c3c298 100644 +--- a/install/tools/man/ipa-acme-manage.1 ++++ b/install/tools/man/ipa-acme-manage.1 +@@ -79,7 +79,7 @@ For example, "0 0 1 * *" schedules the job to run at 12:00am on the first + day of each month. + .TP + \fB\-\-certretention=CERTRETENTION\fR +-Certificate retention time. The default is 30. ++Certificate retention time. The default is 30. A value of 0 will remove expired certificates with no delay. + .TP + \fB\-\-certretentionunit=CERTRETENTIONUNIT\fR + Certificate retention units. Valid units are: minute, hour, day, year. +@@ -89,10 +89,10 @@ The default is days. + LDAP search size limit searching for expired certificates. The default is 1000. This is a client-side limit. There may be additional server-side limitations. + .TP + \fB\-\-certsearchtimelimit=CERTSEARCHTIMELIMIT\fR +-LDAP search time limit searching for expired certificates. The default is 0, no limit. This is a client-side limit. There may be additional server-side limitations. ++LDAP search time limit (seconds) searching for expired certificates. The default is 0, no limit. This is a client-side limit. There may be additional server-side limitations. + .TP + \fB\-\-requestretention=REQUESTRETENTION\fR +-Request retention time. The default is 30. ++Request retention time. The default is 30. A value of 0 will remove expired requests with no delay. + .TP + \fB\-\-requestretentionunit=REQUESTRETENTIONUNIT\fR + Request retention units. Valid units are: minute, hour, day, year. +@@ -102,7 +102,7 @@ The default is days. + LDAP search size limit searching for unfulfilled requests. The default is 1000. There may be additional server-side limitations. + .TP + \fB\-\-requestsearchtimelimit=REQUESTSEARCHTIMELIMIT\fR +-LDAP search time limit searching for unfulfilled requests. The default is 0, no limit. There may be additional server-side limitations. ++LDAP search time limit (seconds) searching for unfulfilled requests. The default is 0, no limit. There may be additional server-side limitations. + .TP + \fB\-\-config\-show\fR + Show the current pruning configuration +diff --git a/ipaserver/install/ipa_acme_manage.py b/ipaserver/install/ipa_acme_manage.py +index b7b2111d9edcec2580aa4a485d7a7340146ff065..e7c35ff6fb5b7a30ac9e2c0c18f8db805cf06ee9 100644 +--- a/ipaserver/install/ipa_acme_manage.py ++++ b/ipaserver/install/ipa_acme_manage.py +@@ -207,14 +207,14 @@ class IPAACMEManage(AdminTool): + self.options.enable, + self.options.disable, + self.options.cron, +- self.options.certretention, ++ self.options.certretention is not None, + self.options.certretentionunit, +- self.options.requestretention, ++ self.options.requestretention is not None, + self.options.requestretentionunit, +- self.options.certsearchsizelimit, +- self.options.certsearchtimelimit, +- self.options.requestsearchsizelimit, +- self.options.requestsearchtimelimit, ++ self.options.certsearchsizelimit is not None, ++ self.options.certsearchtimelimit is not None, ++ self.options.requestsearchsizelimit is not None, ++ self.options.requestsearchtimelimit is not None, + ] + ) + and (self.options.config_show or self.options.run) +@@ -226,7 +226,7 @@ class IPAACMEManage(AdminTool): + elif self.options.cron: + if len(self.options.cron.split()) != 5: + self.option_parser.error("Invalid format for --cron") +- # dogtag does no validation when setting an option so ++ # dogtag does no validation when setting this option so + # do the minimum. The dogtag cron is limited compared to + # crontab(5). + opt = self.options.cron.split() +@@ -255,7 +255,7 @@ class IPAACMEManage(AdminTool): + 'pki-server', command, + f'{prefix}.{directive}' + ] +- if value: ++ if value is not None: + args.extend([str(value)]) + logger.debug(args) + result = run(args, raiseonerr=False, capture_output=True, +@@ -350,28 +350,28 @@ class IPAACMEManage(AdminTool): + + # pki-server ca-config-set can only set one option at a time so + # loop through all the options and set what is there. +- if self.options.certretention: ++ if self.options.certretention is not None: + ca_config_set('certRetentionTime', + self.options.certretention) + if self.options.certretentionunit: + ca_config_set('certRetentionUnit', + self.options.certretentionunit) +- if self.options.certsearchtimelimit: ++ if self.options.certsearchtimelimit is not None: + ca_config_set('certSearchTimeLimit', + self.options.certsearchtimelimit) +- if self.options.certsearchsizelimit: ++ if self.options.certsearchsizelimit is not None: + ca_config_set('certSearchSizeLimit', + self.options.certsearchsizelimit) +- if self.options.requestretention: ++ if self.options.requestretention is not None: + ca_config_set('requestRetentionTime', + self.options.requestretention) + if self.options.requestretentionunit: + ca_config_set('requestRetentionUnit', + self.options.requestretentionunit) +- if self.options.requestsearchsizelimit: ++ if self.options.requestsearchsizelimit is not None: + ca_config_set('requestSearchSizeLimit', + self.options.requestsearchsizelimit) +- if self.options.requestsearchtimelimit: ++ if self.options.requestsearchtimelimit is not None: + ca_config_set('requestSearchTimeLimit', + self.options.requestsearchtimelimit) + if self.options.cron: +-- +2.39.1 + diff --git a/SOURCES/0011-ipatests-Fix-expected-object-classes.patch b/SOURCES/0011-ipatests-Fix-expected-object-classes.patch deleted file mode 100644 index 58fc023..0000000 --- a/SOURCES/0011-ipatests-Fix-expected-object-classes.patch +++ /dev/null @@ -1,82 +0,0 @@ -From b6520bef2ef05dd87636d8b57e3247d451af81d8 Mon Sep 17 00:00:00 2001 -From: Florence Blanc-Renaud -Date: Tue, 14 Dec 2021 16:33:29 +0100 -Subject: [PATCH] ipatests: Fix expected object classes - -Because the sidgen plugin is a postop plugin, it is not -always triggered before the result of an ADD is returned -and the objectclasses of the user may / may not contain -ipantuserattrs. -Fix the expected object classes. - -Related: https://pagure.io/freeipa/issue/9062 -Signed-off-by: Florence Blanc-Renaud -Reviewed-By: Rob Crittenden -Reviewed-By: Alexander Bokovoy -Reviewed-By: Stanislav Levin ---- - ipatests/test_xmlrpc/test_user_plugin.py | 20 ++++++++++++++------ - 1 file changed, 14 insertions(+), 6 deletions(-) - -diff --git a/ipatests/test_xmlrpc/test_user_plugin.py b/ipatests/test_xmlrpc/test_user_plugin.py -index 74d78b0c6d75590640da1357da1f9f4570307878..c156a8793c5765df96029753f4a278e961d4e895 100644 ---- a/ipatests/test_xmlrpc/test_user_plugin.py -+++ b/ipatests/test_xmlrpc/test_user_plugin.py -@@ -125,7 +125,9 @@ def user_npg(request, group): - del tracker.attrs['mepmanagedentry'] - tracker.attrs.update( - description=[], memberof_group=[group.cn], -- objectclass=objectclasses.user_base + [u'ipantuserattrs'], -+ objectclass=fuzzy_set_optional_oc( -+ objectclasses.user_base, 'ipantuserattrs' -+ ), - ) - return tracker.make_fixture(request) - -@@ -139,7 +141,9 @@ def user_npg2(request, group): - del tracker.attrs['mepmanagedentry'] - tracker.attrs.update( - gidnumber=[u'1000'], description=[], memberof_group=[group.cn], -- objectclass=objectclasses.user_base + [u'ipantuserattrs'], -+ objectclass=fuzzy_set_optional_oc( -+ objectclasses.user_base, 'ipantuserattrs' -+ ), - ) - return tracker.make_fixture(request) - -@@ -151,8 +155,9 @@ def user_radius(request, xmlrpc_setup): - sn=u'radiususer1', - ipatokenradiususername=u'radiususer') - tracker.track_create() -- tracker.attrs.update( -- objectclass=objectclasses.user + [u'ipatokenradiusproxyuser'] -+ tracker.attrs.update(objectclass=fuzzy_set_optional_oc( -+ objectclasses.user + [u'ipatokenradiusproxyuser'], -+ 'ipantuserattrs'), - ) - return tracker.make_fixture(request) - -@@ -647,7 +652,8 @@ class TestCreate(XMLRPC_test): - testuser.attrs.update(gidnumber=[u'1000']) - testuser.attrs.update( - description=[], -- objectclass=objectclasses.user_base + [u'ipantuserattrs'] -+ objectclass=fuzzy_set_optional_oc( -+ objectclasses.user_base, 'ipantuserattrs'), - ) - command = testuser.make_create_command() - result = command() -@@ -865,7 +871,9 @@ class TestUserWithUPGDisabled(XMLRPC_test): - testuser.attrs.update(gidnumber=[u'1000']) - testuser.attrs.update( - description=[], -- objectclass=objectclasses.user_base + [u'ipantuserattrs'], -+ objectclass=fuzzy_set_optional_oc( -+ objectclasses.user_base, 'ipantuserattrs' -+ ), - ) - command = testuser.make_create_command() - result = command() --- -2.37.2 - diff --git a/SOURCES/0012-Wipe-the-ipa-ca-DNS-record-when-updating-system-reco.patch b/SOURCES/0012-Wipe-the-ipa-ca-DNS-record-when-updating-system-reco.patch new file mode 100644 index 0000000..ea70bca --- /dev/null +++ b/SOURCES/0012-Wipe-the-ipa-ca-DNS-record-when-updating-system-reco.patch @@ -0,0 +1,69 @@ +From 4e0ad96fbd9f438c884eeeaa60c2fb0c910a2b61 Mon Sep 17 00:00:00 2001 +From: Rob Crittenden +Date: Mon, 11 Jul 2022 14:20:32 -0400 +Subject: [PATCH] Wipe the ipa-ca DNS record when updating system records + +If a server with a CA has been marked as hidden and +contains the last A or AAAA address then that address +would remain in the ipa-ca entry. + +This is because update-dns-system-records did not delete +values, it just re-computed them. So if no A or AAAA +records were found then the existing value was left. + +Fixes: https://pagure.io/freeipa/issue/9195 + +Signed-off-by: Rob Crittenden +Reviewed-By: Francisco Trivino +Reviewed-By: Stanislav Levin +--- + ipaserver/dns_data_management.py | 12 +++++++++++- + 1 file changed, 11 insertions(+), 1 deletion(-) + +diff --git a/ipaserver/dns_data_management.py b/ipaserver/dns_data_management.py +index e2bc530ee8a8d7ade853652680c524ccd229205c..aaae5446856aba5e39ca9bb9c03decd434e4f71a 100644 +--- a/ipaserver/dns_data_management.py ++++ b/ipaserver/dns_data_management.py +@@ -19,6 +19,7 @@ from dns import ( + from time import sleep, time + + from ipalib import errors ++from ipalib.constants import IPA_CA_RECORD + from ipalib.dns import record_name_format + from ipapython.dnsutil import DNSName + from ipaserver.install import installutils +@@ -187,7 +188,7 @@ class IPASystemRecords: + + def __add_ca_records_from_hostname(self, zone_obj, hostname): + assert isinstance(hostname, DNSName) and hostname.is_absolute() +- r_name = DNSName('ipa-ca') + self.domain_abs ++ r_name = DNSName(IPA_CA_RECORD) + self.domain_abs + rrsets = None + end_time = time() + CA_RECORDS_DNS_TIMEOUT + while True: +@@ -210,6 +211,7 @@ class IPASystemRecords: + + for rrset in rrsets: + for rd in rrset: ++ logger.debug("Adding CA IP %s for %s", rd.to_text(), hostname) + rdataset = zone_obj.get_rdataset( + r_name, rd.rdtype, create=True) + rdataset.add(rd, ttl=self.TTL) +@@ -461,6 +463,14 @@ class IPASystemRecords: + ) + ) + ++ # Remove the ipa-ca record(s). They will be reconstructed in ++ # get_base_records(). ++ r_name = DNSName(IPA_CA_RECORD) + self.domain_abs ++ try: ++ self.api_instance.Command.dnsrecord_del( ++ self.domain_abs, r_name, del_all=True) ++ except errors.NotFound: ++ pass + base_zone = self.get_base_records() + for record_name, node in base_zone.items(): + set_cname_template = record_name in names_requiring_cname_templates +-- +2.39.1 + diff --git a/SOURCES/0012-doc-Update-LDAP-grace-period-design-with-default-val.patch b/SOURCES/0012-doc-Update-LDAP-grace-period-design-with-default-val.patch deleted file mode 100644 index 573e0ca..0000000 --- a/SOURCES/0012-doc-Update-LDAP-grace-period-design-with-default-val.patch +++ /dev/null @@ -1,50 +0,0 @@ -From 1aa39529cda4ab9620539dbad705cedd23c21b42 Mon Sep 17 00:00:00 2001 -From: Rob Crittenden -Date: Thu, 18 Aug 2022 08:21:58 -0400 -Subject: [PATCH] doc: Update LDAP grace period design with default values - -New group password policies will get -1 (unlimited) on creation -by default. - -Existing group password policies will remain untouched and -those created prior will be treated as no BIND allowed. - -Fixes: https://pagure.io/freeipa/issue/9212 - -Signed-off-by: Rob Crittenden -Reviewed-By: Florence Blanc-Renaud ---- - doc/designs/ldap_grace_period.md | 17 ++++++++++++++++- - 1 file changed, 16 insertions(+), 1 deletion(-) - -diff --git a/doc/designs/ldap_grace_period.md b/doc/designs/ldap_grace_period.md -index 4b9db34247c1446aec3f5bcce7dfa1bd8a2bd359..e26aedda976b19f3ba26593ba3b3c06c30506a21 100644 ---- a/doc/designs/ldap_grace_period.md -+++ b/doc/designs/ldap_grace_period.md -@@ -51,7 +51,22 @@ The basic flow is: - - On successful password reset (by anyone) reset the user's passwordGraceUserTime to 0. - --The default value on install/upgrade will be -1 to retail existing behavior. -+Range values for passwordgracelimit are: -+ -+-1 : password grace checking is disabled -+ 0 : no grace BIND are allowed at all post-expiration -+ 1..MAXINT: the number of BIND allowed post-expiration -+ -+The default value for the global policy on install/upgrade will be -1 to -+retain existing behavior. -+ -+New group password policies will default to -1 to retain previous -+behavior. -+ -+Existing group policies with no grace limit set are updated to use -+the default unlimited value, -1. This is done because lack of value in -+LDAP is treated as 0 so any existing group policies would not allow -+post-expiration BIND so this will avoid confusion. - - The per-user attempts will not be replicated. - --- -2.37.2 - diff --git a/SOURCES/0013-Set-default-gracelimit-on-group-password-policies-to.patch b/SOURCES/0013-Set-default-gracelimit-on-group-password-policies-to.patch deleted file mode 100644 index 5020f90..0000000 --- a/SOURCES/0013-Set-default-gracelimit-on-group-password-policies-to.patch +++ /dev/null @@ -1,74 +0,0 @@ -From 45e6d49b94da78cd82eb016b3266a17a1359a087 Mon Sep 17 00:00:00 2001 -From: Rob Crittenden -Date: Thu, 4 Aug 2022 12:04:22 -0400 -Subject: [PATCH] Set default gracelimit on group password policies to -1 - -This will retain previous behavior of unlimited LDAP BIND -post-expiration. - -Fixes: https://pagure.io/freeipa/issue/9212 - -Signed-off-by: Rob Crittenden -Reviewed-By: Florence Blanc-Renaud ---- - API.txt | 2 +- - ipaserver/plugins/pwpolicy.py | 2 ++ - ipatests/test_xmlrpc/test_pwpolicy_plugin.py | 2 ++ - 3 files changed, 5 insertions(+), 1 deletion(-) - -diff --git a/API.txt b/API.txt -index 66929b921b197e27ede847fb6b10bf1e44c3464a..210bfc4950e6a7346dbdd6e29d1096b2f8750b1e 100644 ---- a/API.txt -+++ b/API.txt -@@ -4076,7 +4076,7 @@ option: Int('krbpwdlockoutduration?', cli_name='lockouttime') - option: Int('krbpwdmaxfailure?', cli_name='maxfail') - option: Int('krbpwdmindiffchars?', cli_name='minclasses') - option: Int('krbpwdminlength?', cli_name='minlength') --option: Int('passwordgracelimit?', cli_name='gracelimit', default=-1) -+option: Int('passwordgracelimit?', autofill=True, cli_name='gracelimit', default=-1) - option: Flag('raw', autofill=True, cli_name='raw', default=False) - option: Str('setattr*', cli_name='setattr') - option: Str('version?') -diff --git a/ipaserver/plugins/pwpolicy.py b/ipaserver/plugins/pwpolicy.py -index 4428aede2dcc7a2a0b6128bf7f58eb47e4a8e07d..f4ebffd5c8f06a53b6c4d5e48ff6eeafa240e3a4 100644 ---- a/ipaserver/plugins/pwpolicy.py -+++ b/ipaserver/plugins/pwpolicy.py -@@ -408,6 +408,7 @@ class pwpolicy(LDAPObject): - minvalue=-1, - maxvalue=Int.MAX_UINT32, - default=-1, -+ autofill=True, - ), - ) - -@@ -539,6 +540,7 @@ class pwpolicy_add(LDAPCreate): - keys[-1], krbpwdpolicyreference=dn, - cospriority=options.get('cospriority') - ) -+ - return dn - - def post_callback(self, ldap, dn, entry_attrs, *keys, **options): -diff --git a/ipatests/test_xmlrpc/test_pwpolicy_plugin.py b/ipatests/test_xmlrpc/test_pwpolicy_plugin.py -index 8eee69c185b15be72870050ed247f252c72d1c66..fc785223bfe56269ad8b211e8f1c3ac9f4064c3c 100644 ---- a/ipatests/test_xmlrpc/test_pwpolicy_plugin.py -+++ b/ipatests/test_xmlrpc/test_pwpolicy_plugin.py -@@ -387,6 +387,7 @@ class test_pwpolicy_mod_cospriority(Declarative): - krbpwdhistorylength=[u'10'], - krbpwdmindiffchars=[u'3'], - krbpwdminlength=[u'8'], -+ passwordgracelimit=[u'-1'], - objectclass=objectclasses.pwpolicy, - ), - summary=None, -@@ -417,6 +418,7 @@ class test_pwpolicy_mod_cospriority(Declarative): - krbpwdhistorylength=[u'10'], - krbpwdmindiffchars=[u'3'], - krbpwdminlength=[u'8'], -+ passwordgracelimit=[u'-1'], - ), - summary=None, - value=u'ipausers', --- -2.37.2 - diff --git a/SOURCES/0013-ipa-kdb-PAC-consistency-checker-needs-to-handle-chil.patch b/SOURCES/0013-ipa-kdb-PAC-consistency-checker-needs-to-handle-chil.patch new file mode 100644 index 0000000..95d8ad1 --- /dev/null +++ b/SOURCES/0013-ipa-kdb-PAC-consistency-checker-needs-to-handle-chil.patch @@ -0,0 +1,111 @@ +From 0206369eec8530e96c66986c4ca501d8962193ce Mon Sep 17 00:00:00 2001 +From: Alexander Bokovoy +Date: Mon, 30 Jan 2023 14:22:30 +0200 +Subject: [PATCH] ipa-kdb: PAC consistency checker needs to handle child + domains as well + +When PAC check is performed, we might get a signing TGT instead of the +client DB entry. This means it is a principal from a trusted domain but +we don't know which one exactly because we only have a krbtgt for the +forest root. This happens in MIT Kerberos 1.20 or later where KDB's +issue_pac() callback never gets the original client principal directly. + +Look into known child domains as well and make pass the check if both +NetBIOS name and SID correspond to one of the trusted domains under this +forest root. Move check for the SID before NetBIOS name check because we +can use SID of the domain in PAC to find out the right child domain in +our trusted domains' topology list. + +Fixes: https://pagure.io/freeipa/issue/9316 + +Signed-off-by: Alexander Bokovoy +Reviewed-By: Rafael Guterres Jeffman +Reviewed-By: Rob Crittenden +--- + daemons/ipa-kdb/ipa_kdb_mspac.c | 51 +++++++++++++++++++++------------ + 1 file changed, 32 insertions(+), 19 deletions(-) + +diff --git a/daemons/ipa-kdb/ipa_kdb_mspac.c b/daemons/ipa-kdb/ipa_kdb_mspac.c +index a15050e2166f95c227d2e3c7d238e1ea2fe01235..476d1cb558a53420821ccfb1b794cb6bedce7794 100644 +--- a/daemons/ipa-kdb/ipa_kdb_mspac.c ++++ b/daemons/ipa-kdb/ipa_kdb_mspac.c +@@ -1827,11 +1827,43 @@ krb5_error_code filter_logon_info(krb5_context context, + bool result; + char *domstr = NULL; + ++ ipactx = ipadb_get_context(context); ++ if (!ipactx || !ipactx->mspac) { ++ return KRB5_KDB_DBNOTINITED; ++ } ++ + domain = get_domain_from_realm_update(context, realm); + if (!domain) { + return EINVAL; + } + ++ /* check exact sid */ ++ result = dom_sid_check(&domain->domsid, info->info->info3.base.domain_sid, true); ++ if (!result) { ++ struct ipadb_mspac *mspac_ctx = ipactx->mspac; ++ result = FALSE; ++ /* Didn't match but perhaps the original PAC was issued by a child domain's DC? */ ++ for (k = 0; k < mspac_ctx->num_trusts; k++) { ++ result = dom_sid_check(&mspac_ctx->trusts[k].domsid, ++ info->info->info3.base.domain_sid, true); ++ if (result) { ++ domain = &mspac_ctx->trusts[k]; ++ break; ++ } ++ } ++ if (!result) { ++ domstr = dom_sid_string(NULL, info->info->info3.base.domain_sid); ++ krb5_klog_syslog(LOG_ERR, "PAC Info mismatch: domain = %s, " ++ "expected domain SID = %s, " ++ "found domain SID = %s", ++ domain->domain_name, domain->domain_sid, ++ domstr ? domstr : ""); ++ talloc_free(domstr); ++ return EINVAL; ++ } ++ } ++ ++ /* At this point we may have changed the domain we look at, */ + /* check netbios/flat name */ + if (strcasecmp(info->info->info3.base.logon_domain.string, + domain->flat_name) != 0) { +@@ -1843,21 +1875,6 @@ krb5_error_code filter_logon_info(krb5_context context, + return EINVAL; + } + +- /* check exact sid */ +- result = dom_sid_check(&domain->domsid, info->info->info3.base.domain_sid, true); +- if (!result) { +- domstr = dom_sid_string(NULL, info->info->info3.base.domain_sid); +- if (!domstr) { +- return EINVAL; +- } +- krb5_klog_syslog(LOG_ERR, "PAC Info mismatch: domain = %s, " +- "expected domain SID = %s, " +- "found domain SID = %s", +- domain->domain_name, domain->domain_sid, domstr); +- talloc_free(domstr); +- return EINVAL; +- } +- + /* Check if this domain has been filtered out by the trust itself*/ + if (domain->parent != NULL) { + for(k = 0; k < domain->parent->len_sid_blocklist_incoming; k++) { +@@ -1944,10 +1961,6 @@ krb5_error_code filter_logon_info(krb5_context context, + * should include different possibilities into account + * */ + if (info->info->info3.sidcount != 0) { +- ipactx = ipadb_get_context(context); +- if (!ipactx || !ipactx->mspac) { +- return KRB5_KDB_DBNOTINITED; +- } + count = info->info->info3.sidcount; + i = 0; + j = 0; +-- +2.39.1 + diff --git a/SOURCES/0014-Add-test-for-SSH-with-GSSAPI-auth.patch b/SOURCES/0014-Add-test-for-SSH-with-GSSAPI-auth.patch new file mode 100644 index 0000000..00630b5 --- /dev/null +++ b/SOURCES/0014-Add-test-for-SSH-with-GSSAPI-auth.patch @@ -0,0 +1,83 @@ +From a6cb905de74da38d62f9c3bd7957018924282521 Mon Sep 17 00:00:00 2001 +From: Anuja More +Date: Mon, 30 Jan 2023 19:27:49 +0530 +Subject: [PATCH] Add test for SSH with GSSAPI auth. + +Added test for aduser with GSSAPI authentication. + +Related : https://pagure.io/freeipa/issue/9316 + +Signed-off-by: Anuja More +Reviewed-By: Rafael Guterres Jeffman +Reviewed-By: Rob Crittenden +--- + ipatests/test_integration/test_trust.py | 46 +++++++++++++++++++++++++ + 1 file changed, 46 insertions(+) + +diff --git a/ipatests/test_integration/test_trust.py b/ipatests/test_integration/test_trust.py +index c4b3b99ce1abbc16817b6530939fd9bae3f9500a..0d5b71cb0277a79eed7c34eb7e3d7eb6c09faa5e 100644 +--- a/ipatests/test_integration/test_trust.py ++++ b/ipatests/test_integration/test_trust.py +@@ -527,6 +527,35 @@ class TestTrust(BaseTestTrust): + .format(self.ad_domain, subordinate_suffix)) + self.ad.run_command(['powershell', '-c', cmd]) + ++ def test_ssh_aduser(self): ++ """Test ssh with GSSAPI is working with aduser ++ ++ When kerberos ticket is obtained for child domain user ++ and ssh with this ticket should be successful ++ with no password prompt. ++ ++ Related : https://pagure.io/freeipa/issue/9316 ++ """ ++ testuser = 'testuser@{0}'.format(self.ad_domain) ++ testusersub = 'subdomaintestuser@{0}'.format(self.ad_subdomain) ++ ++ def sshuser(host, user): ++ tasks.kdestroy_all(host) ++ try: ++ tasks.kinit_as_user(host, user, ++ host.config.ad_admin_password ++ ) ++ ssh_cmd = "ssh -q -K -l {user} {host} hostname" ++ valid_ssh = host.run_command( ++ ssh_cmd.format(user=user, host=host.hostname) ++ ) ++ assert host.hostname in valid_ssh.stdout_text ++ finally: ++ tasks.kdestroy_all(host) ++ ++ sshuser(self.master, testuser) ++ sshuser(self.master, testusersub) ++ + def test_remove_nonposix_trust(self): + self.remove_trust(self.ad) + tasks.unconfigure_dns_for_trust(self.master, self.ad) +@@ -785,6 +814,23 @@ class TestTrust(BaseTestTrust): + assert re.search( + testuser_regex, result.stdout_text), result.stdout_text + ++ def test_ssh_adtreeuser(self): ++ testuser = 'treetestuser@{0}'.format(self.ad_treedomain) ++ self.master.run_command(["id", testuser]) ++ tasks.clear_sssd_cache(self.master) ++ tasks.kdestroy_all(self.master) ++ try: ++ tasks.kinit_as_user(self.master, testuser, ++ password="Secret123456" ++ ) ++ ssh_cmd = "ssh -q -K -l {user} {host} hostname" ++ valid_ssh = self.master.run_command( ++ ssh_cmd.format(user=testuser, host=self.master.hostname) ++ ) ++ assert self.master.hostname in valid_ssh.stdout_text ++ finally: ++ tasks.kdestroy_all(self.master) ++ + def test_remove_external_treedomain_trust(self): + self.remove_trust(self.tree_ad) + tasks.unconfigure_dns_for_trust(self.master, self.ad, self.tree_ad) +-- +2.39.1 + diff --git a/SOURCES/0014-Set-default-on-group-pwpolicy-with-no-grace-limit-in.patch b/SOURCES/0014-Set-default-on-group-pwpolicy-with-no-grace-limit-in.patch deleted file mode 100644 index 7582225..0000000 --- a/SOURCES/0014-Set-default-on-group-pwpolicy-with-no-grace-limit-in.patch +++ /dev/null @@ -1,106 +0,0 @@ -From de6f074538f6641fd9d84bed204a3d4d50eccbe5 Mon Sep 17 00:00:00 2001 -From: Rob Crittenden -Date: Thu, 4 Aug 2022 12:04:41 -0400 -Subject: [PATCH] Set default on group pwpolicy with no grace limit in upgrade - -If an existing group policy lacks a password grace limit -update it to -1 on upgrade. - -Fixes: https://pagure.io/freeipa/issue/9212 - -Signed-off-by: Rob Crittenden -Reviewed-By: Florence Blanc-Renaud ---- - .../updates/90-post_upgrade_plugins.update | 1 + - ipaserver/install/plugins/update_pwpolicy.py | 66 +++++++++++++++++++ - 2 files changed, 67 insertions(+) - -diff --git a/install/updates/90-post_upgrade_plugins.update b/install/updates/90-post_upgrade_plugins.update -index c7ec71d492b0ac0e7641d586b7e7fa7501743bc2..6fe91aa6c6310a69a7f0feb1ad62243945db67f9 100644 ---- a/install/updates/90-post_upgrade_plugins.update -+++ b/install/updates/90-post_upgrade_plugins.update -@@ -26,6 +26,7 @@ plugin: update_ra_cert_store - plugin: update_mapping_Guests_to_nobody - plugin: fix_kra_people_entry - plugin: update_pwpolicy -+plugin: update_pwpolicy_grace - - # last - # DNS version 1 -diff --git a/ipaserver/install/plugins/update_pwpolicy.py b/ipaserver/install/plugins/update_pwpolicy.py -index dca44ce4369dfc11f83a412a1249bb045d46713f..4185f034313bd49ca68e86c620043af6ead5f6d6 100644 ---- a/ipaserver/install/plugins/update_pwpolicy.py -+++ b/ipaserver/install/plugins/update_pwpolicy.py -@@ -78,3 +78,69 @@ class update_pwpolicy(Updater): - return False, [] - - return False, [] -+ -+ -+@register() -+class update_pwpolicy_grace(Updater): -+ """ -+ Ensure all group policies have a grace period set. -+ """ -+ -+ def execute(self, **options): -+ ldap = self.api.Backend.ldap2 -+ -+ base_dn = DN(('cn', self.api.env.realm), ('cn', 'kerberos'), -+ self.api.env.basedn) -+ search_filter = ( -+ "(&(objectClass=krbpwdpolicy)(!(passwordgracelimit=*)))" -+ ) -+ -+ while True: -+ # Run the search in loop to avoid issues when LDAP limits are hit -+ # during update -+ -+ try: -+ (entries, truncated) = ldap.find_entries( -+ search_filter, ['objectclass'], base_dn, time_limit=0, -+ size_limit=0) -+ -+ except errors.EmptyResult: -+ logger.debug("update_pwpolicy: no policies without " -+ "passwordgracelimit set") -+ return False, [] -+ -+ except errors.ExecutionError as e: -+ logger.error("update_pwpolicy: cannot retrieve list " -+ "of policies missing passwordgracelimit: %s", e) -+ return False, [] -+ -+ logger.debug("update_pwpolicy: found %d " -+ "policies to update, truncated: %s", -+ len(entries), truncated) -+ -+ error = False -+ -+ for entry in entries: -+ # Set unlimited BIND by default -+ entry['passwordgracelimit'] = -1 -+ try: -+ ldap.update_entry(entry) -+ except (errors.EmptyModlist, errors.NotFound): -+ pass -+ except errors.ExecutionError as e: -+ logger.debug("update_pwpolicy: cannot " -+ "update policy: %s", e) -+ error = True -+ -+ if error: -+ # Exit loop to avoid infinite cycles -+ logger.error("update_pwpolicy: error(s) " -+ "detected during pwpolicy update") -+ return False, [] -+ -+ elif not truncated: -+ # All affected entries updated, exit the loop -+ logger.debug("update_pwpolicy: all policies updated") -+ return False, [] -+ -+ return False, [] --- -2.37.2 - diff --git a/SOURCES/0015-webui-tests-fix-assertion-in-test_subid.py.patch b/SOURCES/0015-webui-tests-fix-assertion-in-test_subid.py.patch new file mode 100644 index 0000000..7fc4350 --- /dev/null +++ b/SOURCES/0015-webui-tests-fix-assertion-in-test_subid.py.patch @@ -0,0 +1,36 @@ +From c411c2e7b2e400829ffac250db81609ef3c56faa Mon Sep 17 00:00:00 2001 +From: Florence Blanc-Renaud +Date: Tue, 29 Nov 2022 10:04:41 +0100 +Subject: [PATCH] webui tests: fix assertion in test_subid.py + +The test wants to check the error related to an +exception obtained inside a "with pytest.raises" instruction. +The object is an ExceptionInfo and offers a match method +to check the content of the string representation. +Use this match() method instead of str(excinfo) which now +returns +'' + +Fixes: https://pagure.io/freeipa/issue/9282 + +Signed-off-by: Florence Blanc-Renaud +Reviewed-By: Mohammad Rizwan Yusuf +--- + ipatests/test_webui/test_subid.py | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +diff --git a/ipatests/test_webui/test_subid.py b/ipatests/test_webui/test_subid.py +index 104b5692da94437880e638c0b2bc8efd41bd969e..3aaf80ac885fea08d0bac7e2f46645fe207f2cb0 100644 +--- a/ipatests/test_webui/test_subid.py ++++ b/ipatests/test_webui/test_subid.py +@@ -146,5 +146,5 @@ class test_subid(UI_driver): + with pytest.raises(NoSuchElementException) as excinfo: + self.delete_record(admin_uid, table_name="ipauniqueid") + # Ensure that the exception is really related to missing remove button +- msg = "Unable to locate element: .facet-controls button[name=remove]" +- assert msg in str(excinfo) ++ msg = r"Unable to locate element: .facet-controls button\[name=remove\]" ++ assert excinfo.match(msg) +-- +2.39.1 + diff --git a/SOURCES/0016-ipatests-mark-test_smb-as-xfail.patch b/SOURCES/0016-ipatests-mark-test_smb-as-xfail.patch new file mode 100644 index 0000000..1d4267a --- /dev/null +++ b/SOURCES/0016-ipatests-mark-test_smb-as-xfail.patch @@ -0,0 +1,29 @@ +From b5f2b0b1b213149b5bfe2653c9e40de98249dc73 Mon Sep 17 00:00:00 2001 +From: Florence Blanc-Renaud +Date: Tue, 10 Jan 2023 11:45:17 +0100 +Subject: [PATCH] ipatests: mark test_smb as xfail + +Mark the test test_smb.py::TestSMB::test_smb_service_s4u2self as xfail. + +Related: https://pagure.io/freeipa/issue/9124 +Signed-off-by: Florence Blanc-Renaud +Reviewed-By: Alexander Bokovoy +--- + ipatests/test_integration/test_smb.py | 1 + + 1 file changed, 1 insertion(+) + +diff --git a/ipatests/test_integration/test_smb.py b/ipatests/test_integration/test_smb.py +index eb3981bddb7ca9f72a0d2cb6c46e5c73de8623ac..30f8d5901afbcda95f27cd966ac03d47205dbb26 100644 +--- a/ipatests/test_integration/test_smb.py ++++ b/ipatests/test_integration/test_smb.py +@@ -349,6 +349,7 @@ class TestSMB(IntegrationTest): + @pytest.mark.skipif( + osinfo.id == 'fedora' and osinfo.version_number <= (31,), + reason='Test requires krb 1.18') ++ @pytest.mark.xfail(reason="Pagure ticket 9124", strict=True) + def test_smb_service_s4u2self(self): + """Test S4U2Self operation by IPA service + against both AD and IPA users +-- +2.39.1 + diff --git a/SOURCES/0017-Tests-force-key-type-in-ACME-tests.patch b/SOURCES/0017-Tests-force-key-type-in-ACME-tests.patch new file mode 100644 index 0000000..5ae7d8f --- /dev/null +++ b/SOURCES/0017-Tests-force-key-type-in-ACME-tests.patch @@ -0,0 +1,43 @@ +From 36cba23f3f671886f5e7fa310c25a6e500c76e0b Mon Sep 17 00:00:00 2001 +From: Florence Blanc-Renaud +Date: Mon, 16 Jan 2023 09:31:57 +0100 +Subject: [PATCH] Tests: force key type in ACME tests + +PKI can issue ACME certs only when the key type is rsa. + +With version 2.0.0, certbot defaults to ecdsa key type, +and this causes test failures. +For now, force rsa when requesting an ACME certificate. +This change can be reverted when PKI fixes the issue +on their side (https://github.com/dogtagpki/pki/issues/4273) + +Related: https://pagure.io/freeipa/issue/9298 +Signed-off-by: Florence Blanc-Renaud +Reviewed-By: Rob Crittenden +--- + ipatests/test_integration/test_acme.py | 2 ++ + 1 file changed, 2 insertions(+) + +diff --git a/ipatests/test_integration/test_acme.py b/ipatests/test_integration/test_acme.py +index a30f2fc756783c0a5c28ecf32c1e40f422c47a19..15d7543cfb0fa0fcb921166f7cd8f13d0535a41d 100644 +--- a/ipatests/test_integration/test_acme.py ++++ b/ipatests/test_integration/test_acme.py +@@ -131,6 +131,7 @@ def certbot_standalone_cert(host, acme_server): + 'certonly', + '--domain', host.hostname, + '--standalone', ++ '--key-type', 'rsa', + ] + ) + +@@ -305,6 +306,7 @@ class TestACME(CALessBase): + '--manual-public-ip-logging-ok', + '--manual-auth-hook', CERTBOT_DNS_IPA_SCRIPT, + '--manual-cleanup-hook', CERTBOT_DNS_IPA_SCRIPT, ++ '--key-type', 'rsa', + ]) + + ############## +-- +2.39.1 + diff --git a/SOURCES/0018-tests-Add-ipa_ca_name-checking-to-DNS-system-records.patch b/SOURCES/0018-tests-Add-ipa_ca_name-checking-to-DNS-system-records.patch new file mode 100644 index 0000000..7af48d9 --- /dev/null +++ b/SOURCES/0018-tests-Add-ipa_ca_name-checking-to-DNS-system-records.patch @@ -0,0 +1,36 @@ +From ff31b0c40cc5e046f839b98b80bd16bb649205ac Mon Sep 17 00:00:00 2001 +From: Rob Crittenden +Date: Mon, 30 Jan 2023 11:54:36 -0500 +Subject: [PATCH] tests: Add ipa_ca_name checking to DNS system records + +freeipa-healthcheck 0.12 includes a SUCCESS message if the +ipa-ca records are as expected so a user will know they +were checked. For that version and beyond test that it +is included. + +Related: https://pagure.io/freeipa/issue/9291 + +Signed-off-by: Rob Crittenden +Reviewed-By: Florence Blanc-Renaud +--- + ipatests/test_integration/test_ipahealthcheck.py | 4 +++- + 1 file changed, 3 insertions(+), 1 deletion(-) + +diff --git a/ipatests/test_integration/test_ipahealthcheck.py b/ipatests/test_integration/test_ipahealthcheck.py +index 49a5779307ef05617fe9ae200f7149d120977355..94b0db0b7869e722955e232e1dddb26a2dc3d41e 100644 +--- a/ipatests/test_integration/test_ipahealthcheck.py ++++ b/ipatests/test_integration/test_ipahealthcheck.py +@@ -810,7 +810,9 @@ class TestIpaHealthCheck(IntegrationTest): + + [str(ip) for ip in resolve_ip_addresses_nss(h.external_hostname)] + ] + SYSTEM_RECORDS.append(f'"{self.master.domain.realm.upper()}"') +- ++ version = tasks.get_healthcheck_version(self.master) ++ if parse_version(version) >= parse_version("0.12"): ++ SYSTEM_RECORDS.append('ipa_ca_check') + + returncode, data = run_healthcheck( + self.master, +-- +2.39.1 + diff --git a/SOURCES/0019-tests-Add-new-ipa-ca-error-messages-to-IPADNSSystemR.patch b/SOURCES/0019-tests-Add-new-ipa-ca-error-messages-to-IPADNSSystemR.patch new file mode 100644 index 0000000..53aca9c --- /dev/null +++ b/SOURCES/0019-tests-Add-new-ipa-ca-error-messages-to-IPADNSSystemR.patch @@ -0,0 +1,53 @@ +From 6ca119686aadfa72c0474f72758b63cd671952d4 Mon Sep 17 00:00:00 2001 +From: Rob Crittenden +Date: Mon, 30 Jan 2023 12:00:03 -0500 +Subject: [PATCH] tests: Add new ipa-ca error messages to + IPADNSSystemRecordsCheck + +freeipa-healthcheck changed some messages related to ipa-ca +DNS record validation in IPADNSSystemRecordsCheck. Include support +for it and retain backwards compatibility. + +Fixes: https://pagure.io/freeipa/issue/9291 + +Signed-off-by: Rob Crittenden +Reviewed-By: Florence Blanc-Renaud +--- + .../test_integration/test_ipahealthcheck.py | 21 +++++++++++++------ + 1 file changed, 15 insertions(+), 6 deletions(-) + +diff --git a/ipatests/test_integration/test_ipahealthcheck.py b/ipatests/test_integration/test_ipahealthcheck.py +index 94b0db0b7869e722955e232e1dddb26a2dc3d41e..47f64f2cb36904ef61211423de7cf33d21a199c3 100644 +--- a/ipatests/test_integration/test_ipahealthcheck.py ++++ b/ipatests/test_integration/test_ipahealthcheck.py +@@ -1614,12 +1614,21 @@ class TestIpaHealthCheckWithoutDNS(IntegrationTest): + Test checks the result of IPADNSSystemRecordsCheck + when ipa-server is configured without DNS. + """ +- expected_msgs = { +- "Expected SRV record missing", +- "Got {count} ipa-ca A records, expected {expected}", +- "Got {count} ipa-ca AAAA records, expected {expected}", +- "Expected URI record missing", +- } ++ version = tasks.get_healthcheck_version(self.master) ++ if (parse_version(version) < parse_version('0.12')): ++ expected_msgs = { ++ "Expected SRV record missing", ++ "Got {count} ipa-ca A records, expected {expected}", ++ "Got {count} ipa-ca AAAA records, expected {expected}", ++ "Expected URI record missing", ++ } ++ else: ++ expected_msgs = { ++ "Expected SRV record missing", ++ "Unexpected ipa-ca address {ipaddr}", ++ "expected ipa-ca to contain {ipaddr} for {server}", ++ "Expected URI record missing", ++ } + + tasks.install_packages(self.master, HEALTHCHECK_PKG) + returncode, data = run_healthcheck( +-- +2.39.1 + diff --git a/SOURCES/0020-ipatests-tests-for-certificate-pruning.patch b/SOURCES/0020-ipatests-tests-for-certificate-pruning.patch new file mode 100644 index 0000000..8095d99 --- /dev/null +++ b/SOURCES/0020-ipatests-tests-for-certificate-pruning.patch @@ -0,0 +1,445 @@ +From 0f77b359e241fc4055fb8d785e18f96338451ebf Mon Sep 17 00:00:00 2001 +From: Mohammad Rizwan +Date: Mon, 6 Feb 2023 15:31:27 +0530 +Subject: [PATCH] ipatests: tests for certificate pruning + +1. Test to prune the expired certificate by manual run +2. Test to prune expired certificate by cron job +3. Test to prune expired certificate with retention unit option +4. Test to prune expired certificate with search size limit option +5. Test to check config-show command shows set param +6. Test prune command shows proper status after disabling the pruning + +related: https://pagure.io/freeipa/issue/9294 + +Signed-off-by: Mohammad Rizwan +Reviewed-By: Rob Crittenden +--- + ipatests/test_integration/test_acme.py | 306 +++++++++++++++++++++---- + 1 file changed, 260 insertions(+), 46 deletions(-) + +diff --git a/ipatests/test_integration/test_acme.py b/ipatests/test_integration/test_acme.py +index 5ceba05976059de69414a79634d98045c3ab68bb..1334be52f4530dd8b2a4207744146cd0eb5477a3 100644 +--- a/ipatests/test_integration/test_acme.py ++++ b/ipatests/test_integration/test_acme.py +@@ -122,21 +122,23 @@ def certbot_register(host, acme_server): + ) + + +-def certbot_standalone_cert(host, acme_server): ++def certbot_standalone_cert(host, acme_server, no_of_cert=1): + """method to issue a certbot's certonly standalone cert""" + # Get a cert from ACME service using HTTP challenge and Certbot's + # standalone HTTP server mode + host.run_command(['systemctl', 'stop', 'httpd']) +- host.run_command( +- [ +- 'certbot', +- '--server', acme_server, +- 'certonly', +- '--domain', host.hostname, +- '--standalone', +- '--key-type', 'rsa', +- ] +- ) ++ for _i in range(0, no_of_cert): ++ host.run_command( ++ [ ++ 'certbot', ++ '--server', acme_server, ++ 'certonly', ++ '--domain', host.hostname, ++ '--standalone', ++ '--key-type', 'rsa', ++ '--force-renewal' ++ ] ++ ) + + + class TestACME(CALessBase): +@@ -573,43 +575,41 @@ class TestACMEwithExternalCA(TestACME): + tasks.install_replica(cls.master, cls.replicas[0]) + + +-class TestACMERenew(IntegrationTest): +- +- num_clients = 1 ++@pytest.fixture ++def issue_and_expire_acme_cert(): ++ """Fixture to expire cert by moving date past expiry of acme cert""" ++ hosts = [] + +- @classmethod +- def install(cls, mh): +- +- # install packages before client install in case of IPA DNS problems +- cls.acme_server = prepare_acme_client(cls.master, cls.clients[0]) ++ def _issue_and_expire_acme_cert( ++ master, client, ++ acme_server_url, no_of_cert=1 ++ ): + +- tasks.install_master(cls.master, setup_dns=True) +- tasks.install_client(cls.master, cls.clients[0]) ++ hosts.append(master) ++ hosts.append(client) + +- @pytest.fixture +- def issue_and_expire_cert(self): +- """Fixture to expire cert by moving date past expiry of acme cert""" + # enable the ACME service on master +- self.master.run_command(['ipa-acme-manage', 'enable']) ++ master.run_command(['ipa-acme-manage', 'enable']) + + # register the account with certbot +- certbot_register(self.clients[0], self.acme_server) ++ certbot_register(client, acme_server_url) + + # request a standalone acme cert +- certbot_standalone_cert(self.clients[0], self.acme_server) ++ certbot_standalone_cert(client, acme_server_url, no_of_cert) + + # move system date to expire acme cert +- for host in self.clients[0], self.master: ++ for host in hosts: + tasks.kdestroy_all(host) + tasks.move_date(host, 'stop', '+90days') + ++ time.sleep(10) + tasks.get_kdcinfo(host) + # Note raiseonerr=False: + # the assert is located after kdcinfo retrieval. +- result = host.run_command( ++ result = master.run_command( + "KRB5_TRACE=/dev/stdout kinit admin", + stdin_text='{0}\n{0}\n{0}\n'.format( +- self.clients[0].config.admin_password ++ master.config.admin_password + ), + raiseonerr=False + ) +@@ -618,16 +618,28 @@ class TestACMERenew(IntegrationTest): + tasks.get_kdcinfo(host) + assert result.returncode == 0 + +- yield ++ yield _issue_and_expire_acme_cert + +- # move back date +- for host in self.clients[0], self.master: +- tasks.kdestroy_all(host) +- tasks.move_date(host, 'start', '-90days') +- tasks.kinit_admin(host) ++ # move back date ++ for host in hosts: ++ tasks.move_date(host, 'start', '-90days') ++ ++ ++class TestACMERenew(IntegrationTest): ++ ++ num_clients = 1 ++ ++ @classmethod ++ def install(cls, mh): ++ ++ # install packages before client install in case of IPA DNS problems ++ cls.acme_server = prepare_acme_client(cls.master, cls.clients[0]) ++ ++ tasks.install_master(cls.master, setup_dns=True) ++ tasks.install_client(cls.master, cls.clients[0]) + + @pytest.mark.skipif(skip_certbot_tests, reason='certbot not available') +- def test_renew(self, issue_and_expire_cert): ++ def test_renew(self, issue_and_expire_acme_cert): + """Test if ACME renews the issued cert with cerbot + + This test is to check if ACME certificate renews upon +@@ -635,6 +647,8 @@ class TestACMERenew(IntegrationTest): + + related: https://pagure.io/freeipa/issue/4751 + """ ++ issue_and_expire_acme_cert( ++ self.master, self.clients[0], self.acme_server) + data = self.clients[0].get_file_contents( + f'/etc/letsencrypt/live/{self.clients[0].hostname}/cert.pem' + ) +@@ -656,6 +670,7 @@ class TestACMEPrune(IntegrationTest): + """Validate that ipa-acme-manage configures dogtag for pruning""" + + random_serial = True ++ num_clients = 1 + + @classmethod + def install(cls, mh): +@@ -663,6 +678,8 @@ class TestACMEPrune(IntegrationTest): + raise pytest.skip("RNSv3 not supported") + tasks.install_master(cls.master, setup_dns=True, + random_serial=True) ++ cls.acme_server = prepare_acme_client(cls.master, cls.clients[0]) ++ tasks.install_client(cls.master, cls.clients[0]) + + @classmethod + def uninstall(cls, mh): +@@ -718,7 +735,7 @@ class TestACMEPrune(IntegrationTest): + ['ipa-acme-manage', 'pruning', + '--requestretention=60', + '--requestretentionunit=minute', +- '--requestresearchsizelimit=2000', ++ '--requestsearchsizelimit=2000', + '--requestsearchtimelimit=5',] + ) + cs_cfg = self.master.get_file_contents(paths.CA_CS_CFG_PATH) +@@ -741,7 +758,7 @@ class TestACMEPrune(IntegrationTest): + + self.master.run_command( + ['ipa-acme-manage', 'pruning', +- '--cron="0 23 1 * *',] ++ '--cron=0 23 1 * *',] + ) + cs_cfg = self.master.get_file_contents(paths.CA_CS_CFG_PATH) + assert ( +@@ -760,7 +777,7 @@ class TestACMEPrune(IntegrationTest): + '--enable', '--disable'], + raiseonerr=False + ) +- assert result.returncode == 1 ++ assert result.returncode == 2 + assert "Cannot both enable and disable" in result.stderr_text + + for cmd in ('--config-show', '--run'): +@@ -769,20 +786,20 @@ class TestACMEPrune(IntegrationTest): + cmd, '--enable'], + raiseonerr=False + ) +- assert result.returncode == 1 ++ assert result.returncode == 2 + assert "Cannot change and show config" in result.stderr_text + + result = self.master.run_command( + ['ipa-acme-manage', 'pruning', +- '--cron="* *"'], ++ '--cron=* *'], + raiseonerr=False + ) +- assert result.returncode == 1 +- assert "Invalid format format --cron" in result.stderr_text ++ assert result.returncode == 2 ++ assert "Invalid format for --cron" in result.stderr_text + + result = self.master.run_command( + ['ipa-acme-manage', 'pruning', +- '--cron="100 * * * *"'], ++ '--cron=100 * * * *'], + raiseonerr=False + ) + assert result.returncode == 1 +@@ -790,8 +807,205 @@ class TestACMEPrune(IntegrationTest): + + result = self.master.run_command( + ['ipa-acme-manage', 'pruning', +- '--cron="10 1-5 * * *"'], ++ '--cron=10 1-5 * * *'], + raiseonerr=False + ) + assert result.returncode == 1 + assert "1-5 ranges are not supported" in result.stderr_text ++ ++ def test_prune_cert_manual(self, issue_and_expire_acme_cert): ++ """Test to prune expired certificate by manual run""" ++ if (tasks.get_pki_version(self.master) ++ < tasks.parse_version('11.3.0')): ++ raise pytest.skip("Certificate pruning is not available") ++ ++ issue_and_expire_acme_cert( ++ self.master, self.clients[0], self.acme_server) ++ ++ # check that the certificate issued for the client ++ result = self.master.run_command( ++ ['ipa', 'cert-find', '--subject', self.clients[0].hostname] ++ ) ++ assert f'CN={self.clients[0].hostname}' in result.stdout_text ++ ++ # run prune command manually ++ self.master.run_command(['ipa-acme-manage', 'pruning', '--enable']) ++ self.master.run_command(['ipactl', 'restart']) ++ self.master.run_command(['ipa-acme-manage', 'pruning', '--run']) ++ # wait for cert to get prune ++ time.sleep(50) ++ ++ # check if client cert is removed ++ result = self.master.run_command( ++ ['ipa', 'cert-find', '--subject', self.clients[0].hostname], ++ raiseonerr=False ++ ) ++ assert f'CN={self.clients[0].hostname}' not in result.stdout_text ++ ++ def test_prune_cert_cron(self, issue_and_expire_acme_cert): ++ """Test to prune expired certificate by cron job""" ++ if (tasks.get_pki_version(self.master) ++ < tasks.parse_version('11.3.0')): ++ raise pytest.skip("Certificate pruning is not available") ++ ++ issue_and_expire_acme_cert( ++ self.master, self.clients[0], self.acme_server) ++ ++ # check that the certificate issued for the client ++ result = self.master.run_command( ++ ['ipa', 'cert-find', '--subject', self.clients[0].hostname] ++ ) ++ assert f'CN={self.clients[0].hostname}' in result.stdout_text ++ ++ # enable pruning ++ self.master.run_command(['ipa-acme-manage', 'pruning', '--enable']) ++ ++ # cron would be set to run the next minute ++ cron_minute = self.master.run_command( ++ [ ++ "python3", ++ "-c", ++ ( ++ "from datetime import datetime; " ++ "print(int(datetime.now().strftime('%M')) + 5)" ++ ), ++ ] ++ ).stdout_text.strip() ++ self.master.run_command( ++ ['ipa-acme-manage', 'pruning', ++ f'--cron={cron_minute} * * * *'] ++ ) ++ self.master.run_command(['ipactl', 'restart']) ++ # wait for 5 minutes to cron to execute and 20 sec for just in case ++ time.sleep(320) ++ ++ # check if client cert is removed ++ result = self.master.run_command( ++ ['ipa', 'cert-find', '--subject', self.clients[0].hostname], ++ raiseonerr=False ++ ) ++ assert f'CN={self.clients[0].hostname}' not in result.stdout_text ++ ++ def test_prune_cert_retention_unit(self, issue_and_expire_acme_cert): ++ """Test to prune expired certificate with retention unit option""" ++ if (tasks.get_pki_version(self.master) ++ < tasks.parse_version('11.3.0')): ++ raise pytest.skip("Certificate pruning is not available") ++ issue_and_expire_acme_cert( ++ self.master, self.clients[0], self.acme_server) ++ ++ # check that the certificate issued for the client ++ result = self.master.run_command( ++ ['ipa', 'cert-find', '--subject', self.clients[0].hostname] ++ ) ++ assert f'CN={self.clients[0].hostname}' in result.stdout_text ++ ++ # enable pruning ++ self.master.run_command(['ipa-acme-manage', 'pruning', '--enable']) ++ ++ # certretention set to 5 min ++ self.master.run_command( ++ ['ipa-acme-manage', 'pruning', ++ '--certretention=5', '--certretentionunit=minute'] ++ ) ++ self.master.run_command(['ipactl', 'restart']) ++ ++ # wait for 5 min and check if expired cert is removed ++ time.sleep(310) ++ self.master.run_command(['ipa-acme-manage', 'pruning', '--run']) ++ result = self.master.run_command( ++ ['ipa', 'cert-find', '--subject', self.clients[0].hostname], ++ raiseonerr=False ++ ) ++ assert f'CN={self.clients[0].hostname}' not in result.stdout_text ++ ++ def test_prune_cert_search_size_limit(self, issue_and_expire_acme_cert): ++ """Test to prune expired certificate with search size limit option""" ++ if (tasks.get_pki_version(self.master) ++ < tasks.parse_version('11.3.0')): ++ raise pytest.skip("Certificate pruning is not available") ++ no_of_cert = 10 ++ search_size_limit = 5 ++ issue_and_expire_acme_cert( ++ self.master, self.clients[0], self.acme_server, no_of_cert) ++ ++ # check that the certificate issued for the client ++ result = self.master.run_command( ++ ['ipa', 'cert-find', '--subject', self.clients[0].hostname] ++ ) ++ assert f'CN={self.clients[0].hostname}' in result.stdout_text ++ assert f'Number of entries returned {no_of_cert}' ++ ++ # enable pruning ++ self.master.run_command(['ipa-acme-manage', 'pruning', '--enable']) ++ ++ # certretention set to 5 min ++ self.master.run_command( ++ ['ipa-acme-manage', 'pruning', ++ f'--certsearchsizelimit={search_size_limit}', ++ '--certsearchtimelimit=100'] ++ ) ++ self.master.run_command(['ipactl', 'restart']) ++ ++ # prune the certificates ++ self.master.run_command(['ipa-acme-manage', 'pruning', '--run']) ++ ++ # check if 5 expired cert is removed ++ result = self.master.run_command( ++ ['ipa', 'cert-find', '--subject', self.clients[0].hostname] ++ ) ++ assert f'Number of entries returned {no_of_cert - search_size_limit}' ++ ++ def test_prune_config_show(self, issue_and_expire_acme_cert): ++ """Test to check config-show command shows set param""" ++ if (tasks.get_pki_version(self.master) ++ < tasks.parse_version('11.3.0')): ++ raise pytest.skip("Certificate pruning is not available") ++ ++ self.master.run_command(['ipa-acme-manage', 'pruning', '--enable']) ++ self.master.run_command( ++ ['ipa-acme-manage', 'pruning', ++ '--cron=0 0 1 * *'] ++ ) ++ self.master.run_command( ++ ['ipa-acme-manage', 'pruning', ++ '--certretention=30', '--certretentionunit=day'] ++ ) ++ self.master.run_command( ++ ['ipa-acme-manage', 'pruning', ++ '--certsearchsizelimit=1000', '--certsearchtimelimit=0'] ++ ) ++ self.master.run_command( ++ ['ipa-acme-manage', 'pruning', ++ '--requestretention=30', '--requestretentionunit=day'] ++ ) ++ self.master.run_command( ++ ['ipa-acme-manage', 'pruning', ++ '--requestsearchsizelimit=1000', '--requestsearchtimelimit=0'] ++ ) ++ result = self.master.run_command( ++ ['ipa-acme-manage', 'pruning', '--config-show'] ++ ) ++ assert 'Status: enabled' in result.stdout_text ++ assert 'Certificate Retention Time: 30' in result.stdout_text ++ assert 'Certificate Retention Unit: day' in result.stdout_text ++ assert 'Certificate Search Size Limit: 1000' in result.stdout_text ++ assert 'Certificate Search Time Limit: 100' in result.stdout_text ++ assert 'Request Retention Time: 30' in result.stdout_text ++ assert 'Request Retention Unit: day' in result.stdout_text ++ assert 'Request Search Size Limit' in result.stdout_text ++ assert 'Request Search Time Limit: 100' in result.stdout_text ++ assert 'cron Schedule: 0 0 1 * *' in result.stdout_text ++ ++ def test_prune_disable(self, issue_and_expire_acme_cert): ++ """Test prune command throw error after disabling the pruning""" ++ if (tasks.get_pki_version(self.master) ++ < tasks.parse_version('11.3.0')): ++ raise pytest.skip("Certificate pruning is not available") ++ ++ self.master.run_command(['ipa-acme-manage', 'pruning', '--disable']) ++ result = self.master.run_command( ++ ['ipa-acme-manage', 'pruning', ++ '--cron=0 0 1 * *'] ++ ) ++ assert 'Status: disabled' in result.stdout_text +-- +2.39.1 + diff --git a/SOURCES/0021-ipatests-ensure-that-ipa-automember-rebuild-prints-a.patch b/SOURCES/0021-ipatests-ensure-that-ipa-automember-rebuild-prints-a.patch new file mode 100644 index 0000000..f9281bf --- /dev/null +++ b/SOURCES/0021-ipatests-ensure-that-ipa-automember-rebuild-prints-a.patch @@ -0,0 +1,65 @@ +From 88b9be29036a3580a8bccd31986fc30faa9852df Mon Sep 17 00:00:00 2001 +From: mbhalodi +Date: Tue, 14 Feb 2023 15:04:58 +0530 +Subject: [PATCH] ipatests: ensure that ipa automember-rebuild prints a warning + +ipa automember-rebuild now prints a warning about CPU usage. +Ensure that the warning is properly displayed. + +Related: https://pagure.io/freeipa/issue/9320 + +Signed-off-by: mbhalodi +Reviewed-By: Florence Blanc-Renaud +--- + ipatests/test_integration/test_automember.py | 13 ++++++++++--- + 1 file changed, 10 insertions(+), 3 deletions(-) + +diff --git a/ipatests/test_integration/test_automember.py b/ipatests/test_integration/test_automember.py +index f013964140714db046a1aa6a92409244b2137727..7acd0d7bf895fec970f2bda8b54f4496280525b6 100644 +--- a/ipatests/test_integration/test_automember.py ++++ b/ipatests/test_integration/test_automember.py +@@ -10,6 +10,9 @@ from ipapython.dn import DN + from ipatests.pytest_ipa.integration import tasks + from ipatests.test_integration.base import IntegrationTest + ++msg = ('IMPORTANT: In case of a high number of users, hosts or ' ++ 'groups, the operation may require high CPU usage.') ++ + + class TestAutounmembership(IntegrationTest): + """Tests for autounmembership feature. +@@ -206,11 +209,13 @@ class TestAutounmembership(IntegrationTest): + assert self.is_user_member_of_group(user2, group1) + + # Running automember-build so that user is part of correct group +- self.master.run_command(['ipa', 'automember-rebuild', +- '--users=%s' % user2]) ++ result = self.master.run_command(['ipa', 'automember-rebuild', ++ '--users=%s' % user2]) + assert self.is_user_member_of_group(user2, group2) + assert not self.is_user_member_of_group(user2, group1) + ++ assert msg in result.stdout_text ++ + finally: + # testcase cleanup + self.remove_user_automember(user2, raiseonerr=False) +@@ -240,12 +245,14 @@ class TestAutounmembership(IntegrationTest): + assert self.is_host_member_of_hostgroup(host2, hostgroup1) + + # Running the automember-build so host is part of correct hostgroup +- self.master.run_command( ++ result = self.master.run_command( + ['ipa', 'automember-rebuild', '--hosts=%s' % host2] + ) + assert self.is_host_member_of_hostgroup(host2, hostgroup2) + assert not self.is_host_member_of_hostgroup(host2, hostgroup1) + ++ assert msg in result.stdout_text ++ + finally: + # testcase cleanup + self.remove_host_automember(host2, raiseonerr=False) +-- +2.39.1 + diff --git a/SOURCES/0022-ipatests-fix-tests-in-TestACMEPrune.patch b/SOURCES/0022-ipatests-fix-tests-in-TestACMEPrune.patch new file mode 100644 index 0000000..c757a68 --- /dev/null +++ b/SOURCES/0022-ipatests-fix-tests-in-TestACMEPrune.patch @@ -0,0 +1,74 @@ +From e76b219c21d53b6bccce4ea3d18e2b61ac835e1f Mon Sep 17 00:00:00 2001 +From: Mohammad Rizwan +Date: Mon, 20 Feb 2023 15:33:09 +0530 +Subject: [PATCH] ipatests: fix tests in TestACMEPrune + +When cron_minute + 5 > 59, cron job throwing error for it. +i.e 58 + 5 = 63 which is not acceptable value for cron minute. + +Second fix is related to mismatch of confing setting and corresponding +assert. + +Third fix is related to extending time by 60 minutes to properly +expire the certs. + +related: https://pagure.io/freeipa/issue/9294 + +Signed-off-by: Mohammad Rizwan +Reviewed-By: Florence Blanc-Renaud +--- + ipatests/test_integration/test_acme.py | 15 ++++++++------- + 1 file changed, 8 insertions(+), 7 deletions(-) + +diff --git a/ipatests/test_integration/test_acme.py b/ipatests/test_integration/test_acme.py +index 1334be52f4530dd8b2a4207744146cd0eb5477a3..49b173060f88d4b8e876d8e3461a935938518b44 100644 +--- a/ipatests/test_integration/test_acme.py ++++ b/ipatests/test_integration/test_acme.py +@@ -600,7 +600,7 @@ def issue_and_expire_acme_cert(): + # move system date to expire acme cert + for host in hosts: + tasks.kdestroy_all(host) +- tasks.move_date(host, 'stop', '+90days') ++ tasks.move_date(host, 'stop', '+90days+60minutes') + + time.sleep(10) + tasks.get_kdcinfo(host) +@@ -622,7 +622,7 @@ def issue_and_expire_acme_cert(): + + # move back date + for host in hosts: +- tasks.move_date(host, 'start', '-90days') ++ tasks.move_date(host, 'start', '-90days-60minutes') + + + class TestACMERenew(IntegrationTest): +@@ -866,8 +866,9 @@ class TestACMEPrune(IntegrationTest): + "python3", + "-c", + ( +- "from datetime import datetime; " +- "print(int(datetime.now().strftime('%M')) + 5)" ++ "from datetime import datetime, timedelta; " ++ "print(int((datetime.now() + " ++ "timedelta(minutes=5)).strftime('%M')))" + ), + ] + ).stdout_text.strip() +@@ -990,11 +991,11 @@ class TestACMEPrune(IntegrationTest): + assert 'Certificate Retention Time: 30' in result.stdout_text + assert 'Certificate Retention Unit: day' in result.stdout_text + assert 'Certificate Search Size Limit: 1000' in result.stdout_text +- assert 'Certificate Search Time Limit: 100' in result.stdout_text ++ assert 'Certificate Search Time Limit: 0' in result.stdout_text + assert 'Request Retention Time: 30' in result.stdout_text + assert 'Request Retention Unit: day' in result.stdout_text +- assert 'Request Search Size Limit' in result.stdout_text +- assert 'Request Search Time Limit: 100' in result.stdout_text ++ assert 'Request Search Size Limit: 1000' in result.stdout_text ++ assert 'Request Search Time Limit: 0' in result.stdout_text + assert 'cron Schedule: 0 0 1 * *' in result.stdout_text + + def test_prune_disable(self, issue_and_expire_acme_cert): +-- +2.39.1 + diff --git a/SOURCES/freeipa-4.10.0.tar.gz.asc b/SOURCES/freeipa-4.10.0.tar.gz.asc deleted file mode 100644 index e8eaec1..0000000 --- a/SOURCES/freeipa-4.10.0.tar.gz.asc +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQIzBAABCAAdFiEE11Z2TU1+KXxtrRFyaYdvcqbi008FAmK8aYIACgkQaYdvcqbi -00/mYQ/9GsTlD3aiAVvkTn+PLngLdsg3zFSDXUUI/I4ylOeoubzYmdWrX2yWJfvk -soVcxtHeLkrI/uLo44iiZkxYILxMY56dPzoUn6I46VQFppdoOzwlvdYhlOXYtvtB -yYIZhMdCsTkCORMlZ/RR8qNH8iZ1Zjzd4sf6CMWDdxK6ruAfPzaKAMm4EMa1+Rv7 -67OfSJKqfNksfeKNndYyNki1FmZo7ukKqcA5/lE+ZaN3/yg6IMydqJVD462OJizF -aHyYZDEaUQv3Or9d8V5G/qJpUz6wCjvzLGvNp3nn4goyX2RG1yY6AX6W8P5/FGiN -A5emCV2LmufWE02CGHZ/9i88BIRqh0laPYJianEw/4iJa3BVYDjnlCTWxjDqVfv/ -WBlEnZm/bQkHJITEe6hIwmnHJIFPrhuPxsaBIRUNU1oLTIoU+VFnPRyGGeFuKPSX -girFx1ip3roB6ChoXhYprS1eJ8CjP61ffjT+GLXl9b8OyqFmbxLCMRp19uFt96L1 -DHWZv9ytfcwoZW7zzKlCwcGcLsui4PCmriSS8uaGUNvouBfeshHU4OgilwJnjQMP -kPvqagQCF7xe1ZoOdgoKgYvhXI+jABrZ0LVQoj4QMHGjCxkdFmhNNM37xtHogae9 -NwfSWqa9UZO+LHy4tNiHrv9W0WnDoPjLFrod2yxIfhh/reYs3GU= -=Zzx6 ------END PGP SIGNATURE----- diff --git a/SOURCES/freeipa-4.10.1.tar.gz.asc b/SOURCES/freeipa-4.10.1.tar.gz.asc new file mode 100644 index 0000000..1e67a5b --- /dev/null +++ b/SOURCES/freeipa-4.10.1.tar.gz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCAAdFiEE11Z2TU1+KXxtrRFyaYdvcqbi008FAmN/lzsACgkQaYdvcqbi +00+f7w//a5Y4tgTD2A52fQdihv/Q2ZZqhPlSt8rP7bTLtGSjvANHpuF2u0FcjmtB +tADL4zljBGGMGONGt1qMF3d0BkAXhyVp8YNIBcL+abEhgeKL++3egOrI/8iyl4FB +Sr8Gvr1T4AJXjz+yZ/SsPNKerqFrJwi3flavZ7Bk1c2W2V3rJubSAvK9XwO7Cyxs +4afYpLAiknPh999q3zt7NyviivBTYXirif2T45Lelln9sQaB1ksqDA7oYYAfhV0B +wmUJMTtDoaMAcsLT29aC8wGSB5dttI5GmrF60gnbq/t5Tr+7x9ch8VYE60qkynU9 +n1WcouuIwvcwfPpYSONak0vFrnMV2USNQj5OnzlKXl1HnHsSqoaQWRUA6bbBPjdb +xQLdQRrZiYtjG5YcwuZyg8TRP2ph1aY3yL2gAR1ZI13yJeNV0pwU+IwouJDiVPvS +dwiG8en1jUxYCeXFKjPX3A8/2ei+LvLTVY65qZKT+BsXyE2CymmUx7P20lFN5Ksb +RN+g37mJI8CwqmlemdTZiF+wJnlswS9SOS5zxhpVRiJHAV1sfxu66515c9+n890A +Hlm9sZn9UBQN5nLwuak8jaOr73E+d8uieXsSCA4wTtXKQSJs67fNY6ldeUmNximc +fq6Yh+lDau14rDlPZUkXx0Jd/oPEWDrtnJzfHECeoRn3KoNzezU= +=pxPY +-----END PGP SIGNATURE----- diff --git a/SPECS/freeipa.spec b/SPECS/freeipa.spec index a386ef9..97b5b00 100644 --- a/SPECS/freeipa.spec +++ b/SPECS/freeipa.spec @@ -66,33 +66,34 @@ %if 0%{?rhel} %global package_name ipa %global alt_name freeipa -%global krb5_version 1.19.1-15 -%global krb5_kdb_version 8.0 +%global krb5_version 1.20.1-1 +%global krb5_kdb_version 9.0 # 0.7.16: https://github.com/drkjam/netaddr/issues/71 %global python_netaddr_version 0.7.19 -# Require 4.7.0 which brings Python 3 bindings -%global samba_version 4.15.2-2 -%global selinux_policy_version 3.14.3-52 +%global samba_version 4.17.4-101 %global slapi_nis_version 0.56.4 %global python_ldap_version 3.1.0-1 %if 0%{?rhel} < 9 # Bug 1929067 - PKI instance creation failed with new 389-ds-base build %global ds_version 1.4.3.16-12 +%global selinux_policy_version 3.14.3-107 %else # DNA interval enabled %global ds_version 2.0.5-1 +%global selinux_policy_version 38.1.1-1 %endif # Fix for TLS 1.3 PHA, RHBZ#1775158 %global httpd_version 2.4.37-21 %global bind_version 9.11.20-6 +# Fix for https://github.com/SSSD/sssd/issues/6331 +%global sssd_version 2.8.0 + %else # Fedora %global package_name freeipa %global alt_name ipa -# Fix for CVE-2020-28196 -%global krb5_version 1.18.2-29 # 0.7.16: https://github.com/drkjam/netaddr/issues/71 %global python_netaddr_version 0.7.16 # Require 4.7.0 which brings Python 3 bindings @@ -100,10 +101,23 @@ %global samba_version 2:4.12.10 # 3.14.5-45 or later includes a number of interfaces fixes for IPA interface +# 36.16-1 fixes BZ#2115691 +%if 0%{?fedora} < 36 %global selinux_policy_version 3.14.5-45 +%else +%global selinux_policy_version 36.16-1 +%endif %global slapi_nis_version 0.56.5 +%if 0%{?fedora} < 38 +# Fix for CVE-2020-28196 +%global krb5_version 1.18.2-29 %global krb5_kdb_version 8.0 +%else +# Fix for CVE-2020-28196 +%global krb5_version 1.20.1-3 +%global krb5_kdb_version 9.0 +%endif # fix for segfault in python3-ldap, https://pagure.io/freeipa/issue/7324 %global python_ldap_version 3.1.0-1 @@ -119,11 +133,25 @@ # Fix for TLS 1.3 PHA, RHBZ#1775146 %global httpd_version 2.4.41-9 +# Fix for RHBZ#2117342 +%if 0%{?fedora} < 37 %global bind_version 9.11.24-1 +%else +%global bind_version 32:9.18.7-1 +%endif # Don't use Fedora's Python dependency generator on Fedora 30/rawhide yet. # Some packages don't provide new dist aliases. # https://docs.fedoraproject.org/en-US/packaging-guidelines/Python/ %{?python_disable_dependency_generator} + +%if 0%{?fedora} < 37 +# F35+, adds IdP integration +%global sssd_version 2.7.0 +%else +# Fix for https://github.com/SSSD/sssd/issues/6331 +%global sssd_version 2.8.0 +%endif + # Fedora %endif @@ -150,9 +178,6 @@ # RHEL 8.2+, F32+ has 3.58 %global nss_version 3.44.0-4 -# RHEL 8.7+, F35+, adds IdP integration -%global sssd_version 2.7.0 - %define krb5_base_version %(LC_ALL=C /usr/bin/pkgconf --modversion krb5 | grep -Eo '^[^.]+\.[^.]+' || echo %krb5_version) %global kdcproxy_version 0.4-3 @@ -185,7 +210,7 @@ # Work-around fact that RPM SPEC parser does not accept # "Version: @VERSION@" in freeipa.spec.in used for Autoconf string replacement -%define IPA_VERSION 4.10.0 +%define IPA_VERSION 4.10.1 # Release candidate version -- uncomment with one percent for RC versions #%%global rc_version %%nil %define AT_SIGN @ @@ -217,29 +242,38 @@ Source1: https://releases.pagure.org/freeipa/freeipa-%{version}%{?rc_vers # RHEL spec file only: START %if %{NON_DEVELOPER_BUILD} -%if 0%{?rhel} >= 8 -Patch0001: 0001-Only-calculate-LDAP-password-grace-when-the-password.patch -Patch0002: 0002-webui-Do-not-allow-empty-pagination-size.patch -Patch0003: 0003-ipatests-add-nightly-definitions-for-ipa-4-10-branch.patch -Patch0004: 0004-Added-a-check-while-removing-cert_dir-.-The-teardown.patch -Patch0005: 0005-ipatests-healthcheck-test-if-system-is-FIPS-enabled.patch -Patch0006: 0006-Disabling-gracelimit-does-not-prevent-LDAP-binds.patch -Patch0007: 0007-ipatests-ipa-client-install-subid-adds-entry-in-nssw.patch -Patch0008: 0008-webui-Allow-grace-login-limit.patch -Patch0009: 0009-Additional-tests-for-RSN-v3.patch -Patch0010: 0010-check_repl_update-in-progress-is-a-boolean.patch -Patch0011: 0011-ipatests-Fix-expected-object-classes.patch -Patch0012: 0012-doc-Update-LDAP-grace-period-design-with-default-val.patch -Patch0013: 0013-Set-default-gracelimit-on-group-password-policies-to.patch -Patch0014: 0014-Set-default-on-group-pwpolicy-with-no-grace-limit-in.patch +%if 0%{?rhel} == 8 +Patch1001: 1001-Change-branding-to-IPA-and-Identity-Management.patch +Patch1002: 1002-Revert-freeipa.spec-depend-on-bind-dnssec-utils.patch +%endif +%if 0%{?rhel} == 9 +Patch0001: 0001-updates-fix-memberManager-ACI-to-allow-managers-from.patch +Patch0002: 0002-Spec-file-ipa-client-depends-on-krb5-pkinit-openssl.patch +Patch0003: 0003-server-install-remove-error-log-about-missing-bkup-f.patch +Patch0004: 0004-ipa-tests-Add-LANG-before-kinit-command-to-fix-issue.patch +Patch0005: 0005-trust-add-handle-missing-msSFU30MaxGidNumber.patch +Patch0006: 0006-doc-Design-for-certificate-pruning.patch +Patch0007: 0007-ipa-acme-manage-add-certificate-request-pruning-mana.patch +Patch0008: 0008-doc-add-the-run-command-for-manual-job-execution.patch +Patch0009: 0009-tests-add-wrapper-around-ACME-RSNv3-test.patch +Patch0010: 0010-automember-rebuild-add-a-notice-about-high-CPU-usage.patch +Patch0011: 0011-Fix-setting-values-of-0-in-ACME-pruning.patch +Patch0012: 0012-Wipe-the-ipa-ca-DNS-record-when-updating-system-reco.patch +Patch0013: 0013-ipa-kdb-PAC-consistency-checker-needs-to-handle-chil.patch +Patch0014: 0014-Add-test-for-SSH-with-GSSAPI-auth.patch +Patch0015: 0015-webui-tests-fix-assertion-in-test_subid.py.patch +Patch0016: 0016-ipatests-mark-test_smb-as-xfail.patch +Patch0017: 0017-Tests-force-key-type-in-ACME-tests.patch +Patch0018: 0018-tests-Add-ipa_ca_name-checking-to-DNS-system-records.patch +Patch0019: 0019-tests-Add-new-ipa-ca-error-messages-to-IPADNSSystemR.patch +Patch0020: 0020-ipatests-tests-for-certificate-pruning.patch +Patch0021: 0021-ipatests-ensure-that-ipa-automember-rebuild-prints-a.patch +Patch0022: 0022-ipatests-fix-tests-in-TestACMEPrune.patch Patch1001: 1001-Change-branding-to-IPA-and-Identity-Management.patch %endif %endif # RHEL spec file only: END -# For the timestamp trick in patch application -BuildRequires: diffstat - BuildRequires: openldap-devel # For KDB DAL version, make explicit dependency so that increase of version # will cause the build to fail due to unsatisfied dependencies. @@ -376,7 +410,6 @@ BuildRequires: python3-libsss_nss_idmap BuildRequires: python3-lxml BuildRequires: python3-netaddr >= %{python_netaddr_version} BuildRequires: python3-netifaces -BuildRequires: python3-paste BuildRequires: python3-pki >= %{pki_version} BuildRequires: python3-polib BuildRequires: python3-pyasn1 @@ -436,7 +469,6 @@ Requires: nss-tools >= %{nss_version} Requires(post): krb5-server >= %{krb5_version} Requires(post): krb5-server >= %{krb5_base_version} Requires: krb5-kdb-version = %{krb5_kdb_version} -Requires: krb5-pkinit-openssl >= %{krb5_version} Requires: cyrus-sasl-gssapi%{?_isa} Requires: chrony Requires: httpd >= %{httpd_version} @@ -662,6 +694,8 @@ Requires: python3-sssdconfig >= %{sssd_version} Requires: cyrus-sasl-gssapi%{?_isa} Requires: chrony Requires: krb5-workstation >= %{krb5_version} +# support pkinit with client install +Requires: krb5-pkinit-openssl >= %{krb5_version} # authselect: sssd profile with-subid %if 0%{?fedora} >= 36 Requires: authselect >= 1.4.0 @@ -962,22 +996,7 @@ Custom SELinux policy module for FreeIPA %prep -# Update timestamps on the files touched by a patch, to avoid non-equal -# .pyc/.pyo files across the multilib peers within a build, where "Level" -# is the patch prefix option (e.g. -p1) -# Taken from specfile for sssd and python-simplejson -UpdateTimestamps() { - Level=$1 - PatchFile=$2 - - # Locate the affected files: - for f in $(diffstat $Level -l $PatchFile); do - # Set the files to have the same timestamp as that of the patch: - touch -c -r $PatchFile $f - done -} - -%setup -n freeipa-%{version}%{?rc_version} -q +%autosetup -n freeipa-%{version}%{?rc_version} -N -p1 # To allow proper application patches to the stripped po files, strip originals pushd po @@ -987,10 +1006,7 @@ for i in *.po ; do done popd -for p in %patches ; do - %__patch -p1 -i $p - UpdateTimestamps -p1 $p -done +%autopatch -p1 %build # PATH is workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1005235 @@ -1735,11 +1751,51 @@ fi %if %{with selinux} %files selinux %{_datadir}/selinux/packages/%{selinuxtype}/%{modulename}.pp.* -%ghost %{_sharedstatedir}/selinux/%{selinuxtype}/active/modules/200/%{modulename} +%ghost %verify(not md5 size mode mtime) %{_sharedstatedir}/selinux/%{selinuxtype}/active/modules/200/%{modulename} # with selinux %endif %changelog +* Wed Feb 22 2023 Florence Blanc-Renaud - 4.10.1-6 +- Resolves: rhbz#2169632 Backport latest test fixes in python3-ipatests + +* Mon Feb 13 2023 Florence Blanc-Renaud - 4.10.1-5 +- Resolves: rhbz#2162656 Passwordless (GSSAPI) SSH not working for subdomain +- Resolves: rhbz#2166326 Removing the last DNS type for ipa-ca does not work +- Resolves: rhbz#2167473 RFE - Add a warning note about possible performance impact of the Auto Member rebuild task +- Resolves: rhbz#2168244 requestsearchtimelimit=0 doesn't seems to be work with ipa-acme-manage pruning command + +* Mon Feb 06 2023 Florence Blanc-Renaud - 4.10.1-4 +- Resolves: rhbz#2161284 'ERROR Could not remove /tmp/tmpbkw6hawo.ipabkp' can be seen prior to 'ipa-client-install' command was successful +- Resolves: rhbz#2164403 ipa-trust-add with --range-type=ipa-ad-trust-posix fails while creating an ID range +- Resolves: rhbz#2162677 RFE: Implement support for PKI certificate and request pruning +- Resolves: rhbz#2167312 - Backport latest test fixes in python3-ipatests + +* Wed Dec 21 2022 Alexander Bokovoy - 4.10.1-3 +- Rebuild against krb5 1.20.1 ABI +- Resolves: rhbz#2155425 + +* Fri Dec 9 2022 Florence Blanc-Renaud - 4.10.1-2 +- Resolves: rhbz#2148887 MemberManager with groups fails +- Resolves: rhbz#2150335 idm:client is missing dependency on krb5-pkinit + +* Fri Nov 25 2022 Florence Blanc-Renaud - 4.10.1-1 +- Resolves: rhbz#2141315 [Rebase] Rebase ipa to latest 4.10.x release for RHEL 9.2 +- Resolves: rhbz#2094673 ipa-client-install should just use system wide CA store and do not specify TLS_CACERT in ldap.conf +- Resolves: rhbz#2117167 After leapp upgrade on ipa-client ipa-server package installation failed. (`REQ_FULL_WITH_MEMBERS` returns object from wrong domain) +- Resolves: rhbz#2127833 Password Policy Grace login limit allows invalid maximum value +- Resolves: rhbz#2143224 [RFE] add certificate support to ipa-client instead of one time password +- Resolves: rhbz#2144736 vault interoperability with older RHEL systems is broken +- Resolves: rhbz#2148258 ipa-client-install does not maintain server affinity during installation +- Resolves: rhbz#2148379 Add warning for empty targetattr when creating ACI with RBAC +- Resolves: rhbz#2148380 OTP token sync always returns OK even with random numbers +- Resolves: rhbz#2148381 Deprecated feature idnssoaserial in IdM appears when creating reverse dns zones +- Resolves: rhbz#2148382 Introduction of URI records for kerberos breaks location functionality + +* Tue Oct 25 2022 Rafael Jeffman - 4.10.0-7 +- Resolves: rhbz#2124547 Attempt to log in as "root" user with admin's password in Web UI does not properly fail +- Resolves: rhbz#2137555 Attempt to log in as "root" user with admin's password in Web UI does not properly fail [rhel-9.1.0.z] + * Fri Aug 19 2022 Florence Blanc-Renaud - 4.10.0-6 - Resolves: rhbz#2110014 ldap bind occurs when admin user changes password with gracelimit=0 - Resolves: rhbz#2112901 RFE: Allow grace login limit to be set in IPA WebUI