diff --git a/.gitignore b/.gitignore index d9c893f..54ea20d 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1 @@ -SOURCES/freeipa-4.9.8.tar.gz +SOURCES/freeipa-4.10.0.tar.gz diff --git a/.ipa.metadata b/.ipa.metadata index 15ef586..d02b700 100644 --- a/.ipa.metadata +++ b/.ipa.metadata @@ -1 +1 @@ -38641a7f95779ba35089fcc10e25ec82a9b0248e SOURCES/freeipa-4.9.8.tar.gz +901ede9686abffef511c6477d90d5e6fd32d6fbc SOURCES/freeipa-4.10.0.tar.gz diff --git a/README.debrand b/README.debrand deleted file mode 100644 index 01c46d2..0000000 --- a/README.debrand +++ /dev/null @@ -1,2 +0,0 @@ -Warning: This package was configured for automatic debranding, but the changes -failed to apply. diff --git a/SOURCES/0001-Only-calculate-LDAP-password-grace-when-the-password.patch b/SOURCES/0001-Only-calculate-LDAP-password-grace-when-the-password.patch new file mode 100644 index 0000000..528c6c1 --- /dev/null +++ b/SOURCES/0001-Only-calculate-LDAP-password-grace-when-the-password.patch @@ -0,0 +1,56 @@ +From 22d1392a8a0d2887c389dcd78be06104cff88d30 Mon Sep 17 00:00:00 2001 +From: Rob Crittenden +Date: Wed, 29 Jun 2022 13:25:55 +0000 +Subject: [PATCH] Only calculate LDAP password grace when the password is + expired + +The user's pwd expiration was retrieved but inadvertently was never +compared to current time. So any LDAP bind, including from the +IPA API, counted against the grace period. There is no need to go +through the graceperiod code for non-expired passwords. + +https://pagure.io/freeipa/issue/1539 + +Signed-off-by: Rob Crittenden +Reviewed-By: Florence Blanc-Renaud +--- + .../ipa-graceperiod/ipa_graceperiod.c | 12 +++++++++--- + 1 file changed, 9 insertions(+), 3 deletions(-) + +diff --git a/daemons/ipa-slapi-plugins/ipa-graceperiod/ipa_graceperiod.c b/daemons/ipa-slapi-plugins/ipa-graceperiod/ipa_graceperiod.c +index 0860b5c20fc86687f80ee6f2426e23c87123130f..a3f57cb4bd7a2a66d70fae98cca0f62a8f0c017f 100644 +--- a/daemons/ipa-slapi-plugins/ipa-graceperiod/ipa_graceperiod.c ++++ b/daemons/ipa-slapi-plugins/ipa-graceperiod/ipa_graceperiod.c +@@ -359,7 +359,8 @@ static int ipagraceperiod_preop(Slapi_PBlock *pb) + Slapi_ValueSet *values = NULL; + long grace_limit = 0; + int grace_user_time; +- char *pwd_expiration = NULL; ++ char *tmpstr = NULL; ++ time_t pwd_expiration; + int pwresponse_requested = 0; + Slapi_PBlock *pbtm = NULL; + Slapi_Mods *smods = NULL; +@@ -414,12 +415,17 @@ static int ipagraceperiod_preop(Slapi_PBlock *pb) + } + slapi_value_free(&objectclass); + +- pwd_expiration = slapi_entry_attr_get_charptr(target_entry, "krbPasswordExpiration"); +- if (pwd_expiration == NULL) { ++ tmpstr = slapi_entry_attr_get_charptr(target_entry, "krbPasswordExpiration"); ++ if (tmpstr == NULL) { + /* No expiration means nothing to do */ + LOG_TRACE("No krbPasswordExpiration for %s, nothing to do\n", dn); + goto done; + } ++ pwd_expiration = ipapwd_gentime_to_time_t(tmpstr); ++ if (pwd_expiration > time(NULL)) { ++ /* Not expired, nothing to see here */ ++ goto done; ++ } + + ldrc = ipagraceperiod_getpolicy(target_entry, &policy_entry, + &values, &actual_type_name, +-- +2.36.1 + diff --git a/SOURCES/0001-ipa-kdb-issue-PAC_REQUESTER_SID-only-for-TGTs.patch b/SOURCES/0001-ipa-kdb-issue-PAC_REQUESTER_SID-only-for-TGTs.patch deleted file mode 100644 index e303e04..0000000 --- a/SOURCES/0001-ipa-kdb-issue-PAC_REQUESTER_SID-only-for-TGTs.patch +++ /dev/null @@ -1,36 +0,0 @@ -From 669f3d71161741c676ddd6a08bd08d4a4ccd495b Mon Sep 17 00:00:00 2001 -From: Alexander Bokovoy -Date: Fri, 26 Nov 2021 17:40:54 +0200 -Subject: [PATCH] ipa-kdb: issue PAC_REQUESTER_SID only for TGTs - -MS-KILE 3.3.5.6.4.8 in revision after Windows Server November 2021 -security fixes added the following requirement: - -- PAC_REQUESTER_SID is only added in TGT case (including referrals and - tickets to RODCs) - -Fixes: https://pagure.io/freeipa/issue/9031 - -Signed-off-by: Alexander Bokovoy -Reviewed-By: Rob Crittenden ---- - daemons/ipa-kdb/ipa_kdb_mspac.c | 3 ++- - 1 file changed, 2 insertions(+), 1 deletion(-) - -diff --git a/daemons/ipa-kdb/ipa_kdb_mspac.c b/daemons/ipa-kdb/ipa_kdb_mspac.c -index 6f7d1ac15daf17dfca36ebd3265c866725d24717..538cfbba958068bd2ee0aaae7a2743ae82237898 100644 ---- a/daemons/ipa-kdb/ipa_kdb_mspac.c -+++ b/daemons/ipa-kdb/ipa_kdb_mspac.c -@@ -1148,7 +1148,8 @@ static krb5_error_code ipadb_get_pac(krb5_context kcontext, - #endif - - #ifdef HAVE_PAC_REQUESTER_SID -- { -+ /* MS-KILE 3.3.5.6.4.8: add PAC_REQUESTER_SID only in TGT case */ -+ if ((flags & KRB5_KDB_FLAG_CLIENT_REFERRALS_ONLY) != 0) { - union PAC_INFO pac_requester_sid; - /* == Package PAC_REQUESTER_SID == */ - memset(&pac_requester_sid, 0, sizeof(pac_requester_sid)); --- -2.31.1 - diff --git a/SOURCES/0002-ipa-kdb-fix-requester-SID-check-according-to-MS-KILE.patch b/SOURCES/0002-ipa-kdb-fix-requester-SID-check-according-to-MS-KILE.patch deleted file mode 100644 index b220cc9..0000000 --- a/SOURCES/0002-ipa-kdb-fix-requester-SID-check-according-to-MS-KILE.patch +++ /dev/null @@ -1,122 +0,0 @@ -From 7d93bda31ce0b4e0e22c6e464c9138800dcf8b1c Mon Sep 17 00:00:00 2001 -From: Alexander Bokovoy -Date: Fri, 26 Nov 2021 11:13:51 +0200 -Subject: [PATCH] ipa-kdb: fix requester SID check according to MS-KILE and - MS-SFU updates - -New versions of MS-KILE and MS-SFU after Windows Server November 2021 -security updates add PAC_REQUESTER_SID buffer check behavior: - - - PAC_REQUESTER_SID should only be added for TGT requests - - - if PAC_REQUESTER_SID is present, KDC must verify that the cname on - the ticket resolves to the account with the same SID as the - PAC_REQUESTER_SID. If it doesn't KDC must respond with - KDC_ERR_TKT_REVOKED - -Change requester SID check to skip exact check for non-local -PAC_REQUESTER_SID but harden to ensure it comes from the trusted domains -we know about. - -If requester SID is the same as in PAC, we already do cname vs PAC SID -verification. - -With these changes FreeIPA works against Windows Server 2019 with -November 2021 security fixes in cross-realm S4U2Self operations. - -Fixes: https://pagure.io/freeipa/issue/9031 - -Signed-off-by: Alexander Bokovoy -Reviewed-By: Rob Crittenden ---- - daemons/ipa-kdb/ipa_kdb_mspac.c | 47 ++++++++++++++++++++++++--------- - 1 file changed, 34 insertions(+), 13 deletions(-) - -diff --git a/daemons/ipa-kdb/ipa_kdb_mspac.c b/daemons/ipa-kdb/ipa_kdb_mspac.c -index 538cfbba958068bd2ee0aaae7a2743ae82237898..1b972c167dd50619c7a6bd78eb5c81b0e05a4832 100644 ---- a/daemons/ipa-kdb/ipa_kdb_mspac.c -+++ b/daemons/ipa-kdb/ipa_kdb_mspac.c -@@ -1697,7 +1697,7 @@ static krb5_error_code check_logon_info_consistent(krb5_context context, - "local [%s], PAC [%s]", - dom ? dom : "", - sid ? sid : ""); -- return KRB5KDC_ERR_POLICY; -+ return KRB5KDC_ERR_TGT_REVOKED; - } - } - -@@ -1709,7 +1709,7 @@ static krb5_error_code check_logon_info_consistent(krb5_context context, - kerr = ipadb_get_principal(context, client_princ, flags, &client_actual); - if (kerr != 0) { - krb5_klog_syslog(LOG_ERR, "PAC issue: ipadb_get_principal failed."); -- return KRB5KDC_ERR_POLICY; -+ return KRB5KDC_ERR_TGT_REVOKED; - } - - ied = (struct ipadb_e_data *)client_actual->e_data; -@@ -1743,7 +1743,7 @@ static krb5_error_code check_logon_info_consistent(krb5_context context, - "local [%s] vs PAC [%s]", - local_sid ? local_sid : "", - pac_sid ? pac_sid : ""); -- kerr = KRB5KDC_ERR_POLICY; -+ kerr = KRB5KDC_ERR_TGT_REVOKED; - goto done; - } - -@@ -2005,22 +2005,43 @@ static krb5_error_code ipadb_check_logon_info(krb5_context context, - /* Check that requester SID is the same as in the PAC entry */ - if (requester_sid != NULL) { - struct dom_sid client_sid; -+ bool is_from_trusted_domain = false; - kerr = ipadb_get_sid_from_pac(tmpctx, info.info, &client_sid); - if (kerr) { - goto done; - } - result = dom_sid_check(&client_sid, requester_sid, true); - if (!result) { -- /* memctx is freed by the caller */ -- char *pac_sid = dom_sid_string(tmpctx, &client_sid); -- char *req_sid = dom_sid_string(tmpctx, requester_sid); -- krb5_klog_syslog(LOG_ERR, "PAC issue: PAC has a SID " -- "different from what PAC requester claims. " -- "PAC [%s] vs PAC requester [%s]", -- pac_sid ? pac_sid : "", -- req_sid ? req_sid : ""); -- kerr = KRB5KDC_ERR_POLICY; -- goto done; -+ struct ipadb_context *ipactx = ipadb_get_context(context); -+ if (!ipactx || !ipactx->mspac) { -+ return KRB5_KDB_DBNOTINITED; -+ } -+ /* In S4U case we might be dealing with the PAC issued by the trusted domain */ -+ if (is_s4u && (ipactx->mspac->trusts != NULL)) { -+ /* Iterate through list of trusts and check if this SID belongs to -+ * one of the domains we trust */ -+ for(int i = 0 ; i < ipactx->mspac->num_trusts ; i++) { -+ result = dom_sid_check(&ipactx->mspac->trusts[i].domsid, -+ requester_sid, false); -+ if (result) { -+ is_from_trusted_domain = true; -+ break; -+ } -+ } -+ } -+ -+ if (!is_from_trusted_domain) { -+ /* memctx is freed by the caller */ -+ char *pac_sid = dom_sid_string(tmpctx, &client_sid); -+ char *req_sid = dom_sid_string(tmpctx, requester_sid); -+ krb5_klog_syslog(LOG_ERR, "PAC issue: PAC has a SID " -+ "different from what PAC requester claims. " -+ "PAC [%s] vs PAC requester [%s]", -+ pac_sid ? pac_sid : "", -+ req_sid ? req_sid : ""); -+ kerr = KRB5KDC_ERR_TGT_REVOKED; -+ goto done; -+ } - } - } - --- -2.31.1 - diff --git a/SOURCES/0002-webui-Do-not-allow-empty-pagination-size.patch b/SOURCES/0002-webui-Do-not-allow-empty-pagination-size.patch new file mode 100644 index 0000000..15f0b8b --- /dev/null +++ b/SOURCES/0002-webui-Do-not-allow-empty-pagination-size.patch @@ -0,0 +1,67 @@ +From 02d3fb8266d8199fd1ed983de6c57b269546df82 Mon Sep 17 00:00:00 2001 +From: Armando Neto +Date: Fri, 8 Jul 2022 15:56:31 -0300 +Subject: [PATCH] webui: Do not allow empty pagination size + +Pagination size must be required, the current validators are triggered after +form is submitted, thus the only way for check if data is not empty is by making +the field required. + +Fixes: https://pagure.io/freeipa/issue/9192 + +Signed-off-by: Armando Neto +Reviewed-By: Florence Blanc-Renaud +--- + .../ui/src/freeipa/Application_controller.js | 1 + + ipatests/test_webui/test_misc_cases.py | 19 +++++++++++++++++++ + 2 files changed, 20 insertions(+) + +diff --git a/install/ui/src/freeipa/Application_controller.js b/install/ui/src/freeipa/Application_controller.js +index 46aabc9c4dd47aa3874cb3ddf27da048607b7516..140ee8fe0d7adc274396248aae0be2f4559db27a 100644 +--- a/install/ui/src/freeipa/Application_controller.js ++++ b/install/ui/src/freeipa/Application_controller.js +@@ -318,6 +318,7 @@ define([ + $type: 'text', + name: 'pagination_size', + label: '@i18n:customization.table_pagination', ++ required: true, + validators: ['positive_integer'] + } + ] +diff --git a/ipatests/test_webui/test_misc_cases.py b/ipatests/test_webui/test_misc_cases.py +index 5f7ffb54ee33e9b453d6b987b7bf84d6f4311ebd..aca9e1a99e1e2cf60790fe8c33a65430e0d535e2 100644 +--- a/ipatests/test_webui/test_misc_cases.py ++++ b/ipatests/test_webui/test_misc_cases.py +@@ -11,6 +11,11 @@ from ipatests.test_webui.ui_driver import screenshot + import pytest + import re + ++try: ++ from selenium.webdriver.common.by import By ++except ImportError: ++ pass ++ + + @pytest.mark.tier1 + class TestMiscCases(UI_driver): +@@ -26,3 +31,17 @@ class TestMiscCases(UI_driver): + ver_re = re.compile('version: .*') + assert re.search(ver_re, about_text), 'Version not found' + self.dialog_button_click('ok') ++ ++ @screenshot ++ def test_customization_pagination_input_required(self): ++ """Test if 'pagination size' is required when submitting the form.""" ++ self.init_app() ++ ++ self.profile_menu_action('configuration') ++ self.fill_input('pagination_size', '') ++ self.dialog_button_click('save') ++ ++ pagination_size_elem = self.find( ++ ".widget[name='pagination_size']", By.CSS_SELECTOR) ++ ++ self.assert_field_validation_required(parent=pagination_size_elem) +-- +2.36.1 + diff --git a/SOURCES/0003-ipatests-Fix-test_ipa_cert_fix.py-TestCertFixReplica.patch b/SOURCES/0003-ipatests-Fix-test_ipa_cert_fix.py-TestCertFixReplica.patch deleted file mode 100644 index 022ae84..0000000 --- a/SOURCES/0003-ipatests-Fix-test_ipa_cert_fix.py-TestCertFixReplica.patch +++ /dev/null @@ -1,48 +0,0 @@ -From ba7ec71ba96280da3841ebe47df2a6dc1cd6341e Mon Sep 17 00:00:00 2001 -From: Mohammad Rizwan -Date: Fri, 26 Nov 2021 12:11:21 +0530 -Subject: [PATCH] ipatests: Fix test_ipa_cert_fix.py::TestCertFixReplica - teardown - -Fixture `expire_certs` moves date back after renewing the certs. -This is causing the ipa-replica to fail. This fix first uninstalls -the server then moves back the date. - -Fixes: https://pagure.io/freeipa/issue/9052 - -Signed-off-by: Mohammad Rizwan -Reviewed-By: Florence Blanc-Renaud ---- - ipatests/test_integration/test_ipa_cert_fix.py | 9 ++++++++- - 1 file changed, 8 insertions(+), 1 deletion(-) - -diff --git a/ipatests/test_integration/test_ipa_cert_fix.py b/ipatests/test_integration/test_ipa_cert_fix.py -index 39904d5de64c59416f01646f437aabf797d57dd9..5b56054b4f16d5654ebeb61971a8775bfaf341b8 100644 ---- a/ipatests/test_integration/test_ipa_cert_fix.py -+++ b/ipatests/test_integration/test_ipa_cert_fix.py -@@ -389,6 +389,12 @@ class TestCertFixReplica(IntegrationTest): - setup_dns=False, extra_args=['--no-ntp'] - ) - -+ @classmethod -+ def uninstall(cls, mh): -+ # Uninstall method is empty as the uninstallation is done in -+ # the fixture -+ pass -+ - @pytest.fixture - def expire_certs(self): - # move system date to expire certs -@@ -398,7 +404,8 @@ class TestCertFixReplica(IntegrationTest): - yield - - # move date back on replica and master -- for host in self.master, self.replicas[0]: -+ for host in self.replicas[0], self.master: -+ tasks.uninstall_master(host) - tasks.move_date(host, 'start', '-3years-1days') - - def test_renew_expired_cert_replica(self, expire_certs): --- -2.34.1 - diff --git a/SOURCES/0003-ipatests-add-nightly-definitions-for-ipa-4-10-branch.patch b/SOURCES/0003-ipatests-add-nightly-definitions-for-ipa-4-10-branch.patch new file mode 100644 index 0000000..b6a7fc1 --- /dev/null +++ b/SOURCES/0003-ipatests-add-nightly-definitions-for-ipa-4-10-branch.patch @@ -0,0 +1,15825 @@ +From 6c6a43c9090b5f61726512182a36958cbdafc9a4 Mon Sep 17 00:00:00 2001 +From: Florence Blanc-Renaud +Date: Mon, 4 Jul 2022 18:16:21 +0200 +Subject: [PATCH] ipatests: add nightly definitions for ipa-4-10 branch + +Reviewed-By: Rob Crittenden +--- + ipatests/prci_definitions/gating.yaml | 192 +- + ...test.yaml => nightly_ipa-4-10_latest.yaml} | 1166 ++++----- + ...l => nightly_ipa-4-10_latest_selinux.yaml} | 1168 ++++----- + ...de.yaml => nightly_ipa-4-10_previous.yaml} | 1355 +++++----- + .../nightly_latest_389ds.yaml | 658 ----- + .../prci_definitions/nightly_latest_pki.yaml | 1042 -------- + .../nightly_latest_testing.yaml | 2114 --------------- + .../nightly_latest_testing_selinux.yaml | 2259 ----------------- + .../prci_definitions/nightly_previous.yaml | 1823 ------------- + ipatests/prci_definitions/temp_commit.yaml | 16 +- + 10 files changed, 1876 insertions(+), 9917 deletions(-) + rename ipatests/prci_definitions/{nightly_latest.yaml => nightly_ipa-4-10_latest.yaml} (51%) + rename ipatests/prci_definitions/{nightly_latest_selinux.yaml => nightly_ipa-4-10_latest_selinux.yaml} (54%) + rename ipatests/prci_definitions/{nightly_rawhide.yaml => nightly_ipa-4-10_previous.yaml} (50%) + delete mode 100644 ipatests/prci_definitions/nightly_latest_389ds.yaml + delete mode 100644 ipatests/prci_definitions/nightly_latest_pki.yaml + delete mode 100644 ipatests/prci_definitions/nightly_latest_testing.yaml + delete mode 100644 ipatests/prci_definitions/nightly_latest_testing_selinux.yaml + delete mode 100644 ipatests/prci_definitions/nightly_previous.yaml + +diff --git a/ipatests/prci_definitions/gating.yaml b/ipatests/prci_definitions/gating.yaml +index e0ca590809448c435588009122566058cde7bef7..4083c650a17ce76bdefa243f1a7c5924039ff0bb 100644 +--- a/ipatests/prci_definitions/gating.yaml ++++ b/ipatests/prci_definitions/gating.yaml +@@ -21,7 +21,7 @@ topologies: + memory: 2400 + + jobs: +- fedora-latest/build: ++ fedora-latest-ipa-4-10/build: + requires: [] + priority: 150 + job: +@@ -29,284 +29,284 @@ jobs: + args: + git_repo: '{git_repo}' + git_refspec: '{git_refspec}' +- template: &ci-master-latest +- name: freeipa/ci-master-f36 +- version: 0.0.7 ++ template: &ci-ipa-4-10-latest ++ name: freeipa/ci-ipa-4-10-f36 ++ version: 0.0.1 + timeout: 1800 + topology: *build + +- fedora-latest/test_installation_TestInstallMaster: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallMaster: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 100 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallMaster +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/simple_replication: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/simple_replication: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 100 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_simple_replication.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_caless_TestServerReplicaCALessToCAFull: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_caless_TestServerReplicaCALessToCAFull: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 100 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_caless.py::TestServerReplicaCALessToCAFull +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_external_ca_TestExternalCA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_external_ca_TestExternalCA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 100 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_external_ca.py::TestExternalCA test_integration/test_external_ca.py::TestExternalCAConstraints +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 4800 + topology: *master_1repl_1client + +- fedora-latest/test_external_ca_TestSelfExternalSelf: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_external_ca_TestSelfExternalSelf: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 100 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_external_ca.py::TestSelfExternalSelf test_integration/test_external_ca.py::TestExternalCAInstall +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/external_ca_templates: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/external_ca_templates: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 100 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_external_ca.py::TestExternalCAProfileScenarios +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_topologies: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_topologies: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 100 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_topologies.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_sudo: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_sudo: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 100 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_sudo.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 4800 + topology: *master_1repl_1client + +- fedora-latest/test_commands: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_commands: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 100 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_commands.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl_1client + +- fedora-latest/test_kerberos_flags: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_kerberos_flags: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 100 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_kerberos_flags.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl_1client + +- fedora-latest/test_forced_client_enrolment: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_forced_client_enrolment: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 100 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_forced_client_reenrollment.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 4800 + topology: *master_1repl_1client + +- fedora-latest/test_advise: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_advise: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 100 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_advise.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl_1client + +- fedora-latest/test_testconfig: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_testconfig: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 100 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_testconfig.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_service_permissions: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_service_permissions: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 100 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_service_permissions.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_netgroup: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_netgroup: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 100 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_netgroup.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_authconfig: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_authconfig: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 100 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_authselect.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 4800 + topology: *master_1repl_1client + +- fedora-latest/test_replica_promotion_TestSubCAkeyReplication: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replica_promotion_TestSubCAkeyReplication: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 100 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_replica_promotion.py::TestSubCAkeyReplication +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_dnssec_TestInstallDNSSECFirst: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_dnssec_TestInstallDNSSECFirst: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 100 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_dnssec.py::TestInstallDNSSECFirst +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_membermanager: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_membermanager: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 100 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_membermanager.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 1800 + topology: *master_1repl + +- fedora-latest/test_adtrust_install: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_adtrust_install: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 100 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_adtrust_install.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_cert: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_cert: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 100 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_cert.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl_1client + +- fedora-latest/test_upgrade: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_upgrade: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 100 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_upgrade.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_subids: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_subids: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 100 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_subids.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl +diff --git a/ipatests/prci_definitions/nightly_latest.yaml b/ipatests/prci_definitions/nightly_ipa-4-10_latest.yaml +similarity index 51% +rename from ipatests/prci_definitions/nightly_latest.yaml +rename to ipatests/prci_definitions/nightly_ipa-4-10_latest.yaml +index 86be5f30468d049b9a214432e3258060cea6d98a..f5c9faa9333c6e4dfd7764ebbc5ef25679e1b10f 100644 +--- a/ipatests/prci_definitions/nightly_latest.yaml ++++ b/ipatests/prci_definitions/nightly_ipa-4-10_latest.yaml +@@ -41,7 +41,7 @@ topologies: + memory: 14500 + + jobs: +- fedora-latest/build: ++ fedora-latest-ipa-4-10/build: + requires: [] + priority: 100 + job: +@@ -49,1775 +49,1775 @@ jobs: + args: + git_repo: '{git_repo}' + git_refspec: '{git_refspec}' +- template: &ci-master-latest ++ template: &ci-ipa-4-10-latest + name: freeipa/ci-master-f36 +- version: 0.0.7 ++ version: 0.0.1 + timeout: 1800 + topology: *build + +- fedora-latest/simple_replication: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/simple_replication: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_simple_replication.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_external_ca_TestExternalCA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_external_ca_TestExternalCA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_external_ca.py::TestExternalCA test_integration/test_external_ca.py::TestExternalCAConstraints +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 4800 + topology: *master_1repl_1client + +- fedora-latest/test_external_ca_TestSelfExternalSelf: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_external_ca_TestSelfExternalSelf: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_external_ca.py::TestSelfExternalSelf test_integration/test_external_ca.py::TestExternalCAInstall +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/external_ca_templates: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/external_ca_templates: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_external_ca.py::TestExternalCAProfileScenarios +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_topologies: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_topologies: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_topologies.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_sudo: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_sudo: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_sudo.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 4800 + topology: *master_1repl_1client + +- fedora-latest/test_commands: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_commands: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_commands.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl_1client + +- fedora-latest/test_kerberos_flags: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_kerberos_flags: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_kerberos_flags.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl_1client + +- fedora-latest/test_http_kdc_proxy: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_http_kdc_proxy: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunADTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_http_kdc_proxy.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *ad_master_2client + +- fedora-latest/test_fips: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_fips: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_fips.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl_1client + +- fedora-latest/test_forced_client_enrolment: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_forced_client_enrolment: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_forced_client_reenrollment.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 4800 + topology: *master_1repl_1client + +- fedora-latest/test_advise: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_advise: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_advise.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl_1client + +- fedora-latest/test_testconfig: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_testconfig: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_testconfig.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_service_permissions: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_service_permissions: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_service_permissions.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_netgroup: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_netgroup: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_netgroup.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_vault: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_vault: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_vault.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 6300 + topology: *master_1repl + +- fedora-latest/test_authconfig: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_authconfig: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_authselect.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 4800 + topology: *master_1repl_1client + +- fedora-latest/test_smb: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_smb: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunADTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_smb.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *ad_master_2client + +- fedora-latest/test_server_del: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_server_del: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_server_del.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_2repl_1client + +- fedora-latest/test_installation_TestInstallWithCA1: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA1: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallWithCA1 +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_installation_TestInstallWithCA2: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA2: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallWithCA2 +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_installation_TestInstallCA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallCA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallCA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_2repl_1client + +- fedora-latest/test_installation_TestInstallWithCA_KRA1: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_KRA1: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA1 +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_installation_TestInstallWithCA_KRA2: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_KRA2: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA2 +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_installation_TestInstallWithCA_DNS1: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_DNS1: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS1 +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_installation_TestInstallWithCA_DNS2: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_DNS2: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS2 +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_installation_TestInstallWithCA_DNS3: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_DNS3: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS3 +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_installation_TestInstallWithCA_DNS4: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_DNS4: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS4 +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_installation_TestInstallWithCA_KRA_DNS1: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_KRA_DNS1: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS1 +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_installation_TestInstallWithCA_KRA_DNS2: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_KRA_DNS2: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS2 +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_installation_TestInstallMaster: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallMaster: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallMaster +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_1repl + +- fedora-latest/test_installation_TestInstallMasterKRA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallMasterKRA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallMasterKRA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_1repl + +- fedora-latest/test_installation_TestInstallMasterDNS: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallMasterDNS: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallMasterDNS +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_1repl + +- fedora-latest/test_installation_TestInstallMasterDNSRepeatedly: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallMasterDNSRepeatedly: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallMasterDNSRepeatedly +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_1repl + +- fedora-latest/test_installation_TestInstallMasterReservedIPasForwarder: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallMasterReservedIPasForwarder: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallMasterReservedIPasForwarder +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_1repl + +- fedora-latest/test_installation_TestInstallMasterReplica: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallMasterReplica: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallMasterReplica +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_1repl + +- fedora-latest/test_installation_TestInstallReplicaAgainstSpecificServer: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallReplicaAgainstSpecificServer: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallReplicaAgainstSpecificServer +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_2repl_1client + +- fedora-latest/test_installation_TestADTrustInstall: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestADTrustInstall: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestADTrustInstall +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_2repl_1client + +- fedora-latest/test_installation_TestADTrustInstallWithDNS_KRA_ADTrust: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestADTrustInstallWithDNS_KRA_ADTrust: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestADTrustInstallWithDNS_KRA_ADTrust +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_2repl_1client + +- fedora-latest/test_installation_TestKRAinstallAfterCertRenew: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestKRAinstallAfterCertRenew: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestKRAinstallAfterCertRenew +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_1repl + +- fedora-latest/test_installation_TestInstallWithoutSudo: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallWithoutSudo: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallWithoutSudo +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 4800 + topology: *master_1repl_1client + +- fedora-latest/test_installation_TestInstallWithoutNamed: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallWithoutNamed: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallWithoutNamed +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 4800 + topology: *master_1repl + +- fedora-latest/test_installation_TestInstallwithSHA384withRSA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallwithSHA384withRSA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallwithSHA384withRSA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_idviews: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_idviews: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunADTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_idviews.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *ad_master_2client + +- fedora-latest/test_caless_TestServerInstall: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_caless_TestServerInstall: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_caless.py::TestServerInstall +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 12000 + topology: *master_1repl + +- fedora-latest/test_caless_TestReplicaInstall: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_caless_TestReplicaInstall: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_caless.py::TestReplicaInstall +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_caless_TestClientInstall: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_caless_TestClientInstall: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_caless.py::TestClientInstall +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + # actually master_1client + topology: *master_1repl_1client + +- fedora-latest/test_caless_TestIPACommands: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_caless_TestIPACommands: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_caless.py::TestIPACommands +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl + +- fedora-latest/test_caless_TestCertInstall: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_caless_TestCertInstall: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_caless.py::TestCertInstall +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl + +- fedora-latest/test_caless_TestPKINIT: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_caless_TestPKINIT: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_caless.py::TestPKINIT +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl + +- fedora-latest/test_caless_TestServerReplicaCALessToCAFull: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_caless_TestServerReplicaCALessToCAFull: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_caless.py::TestServerReplicaCALessToCAFull +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl + +- fedora-latest/test_caless_TestReplicaCALessToCAFull: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_caless_TestReplicaCALessToCAFull: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_caless.py::TestReplicaCALessToCAFull +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl + +- fedora-latest/test_caless_TestServerCALessToExternalCA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_caless_TestServerCALessToExternalCA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_caless.py::TestServerCALessToExternalCA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl + +- fedora-latest/test_backup_and_restore_TestUserRootFilesOwnershipPermission: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestUserRootFilesOwnershipPermission: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestUserRootFilesOwnershipPermission +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_backup_and_restore_TestBackupAndRestore: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestore: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestore +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_backup_and_restore_TestBackupAndRestoreWithDNSSEC: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreWithDNSSEC: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNSSEC +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_backup_and_restore_TestBackupReinstallRestoreWithDNSSEC: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupReinstallRestoreWithDNSSEC: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNSSEC +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_backup_and_restore_TestBackupAndRestoreWithDNS: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreWithDNS: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNS +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_backup_and_restore_TestBackupReinstallRestoreWithDNS: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupReinstallRestoreWithDNS: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNS +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_backup_and_restore_TestBackupAndRestoreWithKRA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreWithKRA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithKRA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_backup_and_restore_TestBackupReinstallRestoreWithKRA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupReinstallRestoreWithKRA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithKRA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_backup_and_restore_TestBackupAndRestoreWithReplica: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreWithReplica: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithReplica +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_2repl_1client + +- fedora-latest/test_backup_and_restore_TestBackupAndRestoreDMPassword: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreDMPassword: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreDMPassword +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_backup_and_restore_TestReplicaInstallAfterRestore: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestReplicaInstallAfterRestore: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestReplicaInstallAfterRestore +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_2repl_1client + +- fedora-latest/test_backup_and_restore_TestBackupRoles: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupRoles: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestBackupRoles +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_dnssec: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_dnssec: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_dnssec.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_2repl_1client + +- fedora-latest/test_replica_promotion_TestReplicaPromotionLevel1: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replica_promotion_TestReplicaPromotionLevel1: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_replica_promotion.py::TestReplicaPromotionLevel1 +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_replica_promotion_TestUnprivilegedUserPermissions: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replica_promotion_TestUnprivilegedUserPermissions: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_replica_promotion.py::TestUnprivilegedUserPermissions +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_replica_promotion_TestProhibitReplicaUninstallation: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replica_promotion_TestProhibitReplicaUninstallation: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_replica_promotion.py::TestProhibitReplicaUninstallation +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_2repl_1client + +- fedora-latest/test_replica_promotion_TestWrongClientDomain: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replica_promotion_TestWrongClientDomain: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_replica_promotion.py::TestWrongClientDomain +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_replica_promotion_TestRenewalMaster: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replica_promotion_TestRenewalMaster: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_replica_promotion.py::TestRenewalMaster +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_replica_promotion_TestReplicaInstallWithExistingEntry: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replica_promotion_TestReplicaInstallWithExistingEntry: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallWithExistingEntry +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_replica_promotion_TestSubCAkeyReplication: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replica_promotion_TestSubCAkeyReplication: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_replica_promotion.py::TestSubCAkeyReplication +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_replica_promotion_TestReplicaInstallCustodia: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replica_promotion_TestReplicaInstallCustodia: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallCustodia +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_2repl_1client + +- fedora-latest/test_replica_promotion_TestReplicaInForwardZone: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replica_promotion_TestReplicaInForwardZone: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_replica_promotion.py::TestReplicaInForwardZone +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_replica_promotion_TestHiddenReplicaPromotion: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replica_promotion_TestHiddenReplicaPromotion: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaPromotion +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_2repl_1client + +- fedora-latest/test_replica_promotion_TestHiddenReplicaKRA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replica_promotion_TestHiddenReplicaKRA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaKRA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_2repl_1client + +- fedora-latest/test_upgrade: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_upgrade: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_upgrade.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_topology_TestCASpecificRUVs: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_topology_TestCASpecificRUVs: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_topology.py::TestCASpecificRUVs +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_3repl_1client + +- fedora-latest/test_topology_TestTopologyOptions: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_topology_TestTopologyOptions: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_topology.py::TestTopologyOptions +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_3repl_1client + +- fedora-latest/test_replication_layouts_TestLineTopologyWithoutCA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replication_layouts_TestLineTopologyWithoutCA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithoutCA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_3repl_1client + +- fedora-latest/test_replication_layouts_TestLineTopologyWithCA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replication_layouts_TestLineTopologyWithCA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_replication_layouts_TestLineTopologyWithCAKRA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replication_layouts_TestLineTopologyWithCAKRA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCAKRA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_replication_layouts.py_TestStarTopologyWithoutCA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replication_layouts.py_TestStarTopologyWithoutCA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithoutCA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_3repl_1client + +- fedora-latest/test_replication_layouts_TestStarTopologyWithCA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replication_layouts_TestStarTopologyWithCA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_3repl_1client + +- fedora-latest/test_replication_layouts_TestStarTopologyWithCAKRA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replication_layouts_TestStarTopologyWithCAKRA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCAKRA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_replication_layouts_TestCompleteTopologyWithoutCA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replication_layouts_TestCompleteTopologyWithoutCA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithoutCA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_3repl_1client + +- fedora-latest/test_replication_layouts_TestCompleteTopologyWithCA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replication_layouts_TestCompleteTopologyWithCA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_3repl_1client + +- fedora-latest/test_replication_layouts_TestCompleteTopologyWithCAKRA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replication_layouts_TestCompleteTopologyWithCAKRA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCAKRA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_3repl_1client + +- fedora-latest/test_client_uninstallation: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_client_uninstallation: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_uninstallation.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl_1client + +- fedora-latest/test_installation_client: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_client: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation_client.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_3client + +- fedora-latest/test_user_permissions: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_user_permissions: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_user_permissions.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl_1client + +- fedora-latest/test_webui_cert: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_webui_cert: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_webui/test_cert.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 2400 + topology: *ipaserver + +- fedora-latest/test_webui_general: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_webui_general: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: >- + test_webui/test_loginscreen.py + test_webui/test_misc_cases.py + test_webui/test_navigation.py + test_webui/test_translation.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *ipaserver + +- fedora-latest/test_webui_host: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_webui_host: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_webui/test_host.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *ipaserver + +- fedora-latest/test_webui_host_net_groups: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_webui_host_net_groups: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: >- + test_webui/test_hostgroup.py + test_webui/test_netgroup.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *ipaserver + +- fedora-latest/test_webui_identity: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_webui_identity: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: >- + test_webui/test_automember.py + test_webui/test_idviews.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *ipaserver + +- fedora-latest/test_webui_network: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_webui_network: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: >- + test_webui/test_automount.py + test_webui/test_dns.py + test_webui/test_vault.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *ipaserver + +- fedora-latest/test_webui_policy: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_webui_policy: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: >- + test_webui/test_hbac.py + test_webui/test_krbtpolicy.py + test_webui/test_pwpolicy.py + test_webui/test_selinuxusermap.py + test_webui/test_sudo.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *ipaserver + +- fedora-latest/test_webui_rbac: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_webui_rbac: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: >- + test_webui/test_delegation.py + test_webui/test_rbac.py + test_webui/test_selfservice.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *ipaserver + +- fedora-latest/test_webui_server: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_webui_server: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: >- + test_webui/test_config.py + test_webui/test_range.py + test_webui/test_realmdomains.py + test_webui/test_topology.py + test_webui/test_trust.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *ipaserver + +- fedora-latest/test_webui_service: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_webui_service: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_webui/test_service.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 2400 + topology: *ipaserver + +- fedora-latest/test_webui_users: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_webui_users: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: >- + test_webui/test_group.py + test_webui/test_user.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 4800 + topology: *ipaserver + +- fedora-latest/test_webui_subid: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_webui_subid: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_webui/test_subid.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 2400 + topology: *ipaserver + +- fedora-latest/customized_ds_config_install: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/customized_ds_config_install: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_customized_ds_config_install.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/dns_locations: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/dns_locations: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_dns_locations.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_2repl_1client + +- fedora-latest/external_ca_TestExternalCAdirsrvStop: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/external_ca_TestExternalCAdirsrvStop: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_external_ca.py::TestExternalCAdirsrvStop +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/external_ca_TestExternalCAInvalidCert: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/external_ca_TestExternalCAInvalidCert: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_external_ca.py::TestExternalCAInvalidCert test_integration/test_external_ca.py::TestExternalCAInvalidIntermediate +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/external_ca_TestMultipleExternalCA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/external_ca_TestMultipleExternalCA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_external_ca.py::TestMultipleExternalCA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_ipahealthcheck: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_ipahealthcheck: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheck +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl_1client + +- fedora-latest/test_ipahealthcheck_nodns_extca_file: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_ipahealthcheck_nodns_extca_file: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithoutDNS test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithExternalCA test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFileCheck +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl + +- fedora-latest/test_ipahealthcheck_cli_fsspace: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_ipahealthcheck_cli_fsspace: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCLI test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFilesystemSpace +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_ipahealthcheck_adtrust: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_ipahealthcheck_adtrust: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunADTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithADtrust +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 4800 + topology: *adroot_adchild_adtree_master_1client + +- fedora-latest/test_ntp_options: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_ntp_options: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_ntp_options.py::TestNTPoptions +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_1repl_1client + +- fedora-latest/test_otp: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_otp: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_otp.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_pkinit_manage: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_pkinit_manage: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_pkinit_manage.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_pki_config_override: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_pki_config_override: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_pki_config_override.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +-# fedora-latest/nfs: +-# requires: [fedora-latest/build] ++# fedora-latest-ipa-4-10/nfs: ++# requires: [fedora-latest-ipa-4-10/build] + # priority: 50 + # job: + # class: RunPytest + # args: +-# build_url: '{fedora-latest/build_url}' ++# build_url: '{fedora-latest-ipa-4-10/build_url}' + # test_suite: test_integration/test_nfs.py::TestNFS +-# template: *ci-master-latest ++# template: *ci-ipa-4-10-latest + # timeout: 9000 + # topology: *master_3client + +- fedora-latest/nfs_nsswitch_restore: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/nfs_nsswitch_restore: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_nfs.py::TestIpaClientAutomountFileRestore +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_3client + +- fedora-latest/mask: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/mask: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestMaskInstall +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/hostname_validator: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/hostname_validator: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestHostnameValidator +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/automember: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/automember: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_automember.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_crlgen_manage: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_crlgen_manage: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_crlgen_manage.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_integration_TestIPANotConfigured: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_integration_TestIPANotConfigured: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_cli_ipa_not_configured.py::TestIPANotConfigured +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_1repl + +- fedora-latest/test_sssd: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_sssd: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunADTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_sssd.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *adroot_adchild_adtree_master_1client + +- fedora-latest/test_ca_custom_sdn: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_ca_custom_sdn: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_ca_custom_sdn.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_membermanager: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_membermanager: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_membermanager.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 1800 + topology: *master_1repl + +- fedora-latest/krbtpolicy: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/krbtpolicy: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_krbtpolicy.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 4800 + topology: *master_1repl + +- fedora-latest/test_winsyncmigrate: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_winsyncmigrate: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunADTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_winsyncmigrate.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 4800 + topology: *ad_master + +- fedora-latest/test_trust: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_trust: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunADTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_trust.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10000 + topology: *adroot_adchild_adtree_master_1client + +- fedora-latest/test_backup_and_restore_TestBackupAndRestoreTrust: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreTrust: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreTrust +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_adtrust_install: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_adtrust_install: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_adtrust_install.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_cert: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_cert: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_cert.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl_1client + +- fedora-latest/test_epn: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_epn: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_epn.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_3client + +- fedora-latest/test_acme: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_acme: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_acme.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl_1client + +- fedora-latest/test_dns: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_dns: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_dns.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_pwpolicy: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_pwpolicy: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_pwpolicy.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_cert_fix: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_cert_fix: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_ipa_cert_fix.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_1repl + +- fedora-latest/test_subids: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_subids: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_subids.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_custom_plugins: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_custom_plugins: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_custom_plugins.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_external_idp: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_external_idp: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_idp.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5000 + topology: *master_2repl_1client + +- fedora-latest/test_random_serial_numbers_TestInstallWithCA_DNS1_RSN: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_random_serial_numbers_TestInstallWithCA_DNS1_RSN: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_DNS1_RSN +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_random_serial_numbers_TestInstallWithCA_KRA1_RSN: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_random_serial_numbers_TestInstallWithCA_KRA1_RSN: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_KRA1_RSN +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_random_serial_numbers_test_commands_RSN: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_random_serial_numbers_test_commands_RSN: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_random_serial_numbers.py::TestIPACommand_RSN::test_certificate_out_write_to_file +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl_1client + +- fedora-latest/test_caless_TestServerCALessToExternalCA_RSN: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_caless_TestServerCALessToExternalCA_RSN: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_random_serial_numbers.py::TestServerCALessToExternalCA_RSN +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl +diff --git a/ipatests/prci_definitions/nightly_latest_selinux.yaml b/ipatests/prci_definitions/nightly_ipa-4-10_latest_selinux.yaml +similarity index 54% +rename from ipatests/prci_definitions/nightly_latest_selinux.yaml +rename to ipatests/prci_definitions/nightly_ipa-4-10_latest_selinux.yaml +index cef8f5ef0cc350d2597fe46bdb45d8fd50211a10..f22cc08384b3d50e49278d38e73bf93cd7804e80 100644 +--- a/ipatests/prci_definitions/nightly_latest_selinux.yaml ++++ b/ipatests/prci_definitions/nightly_ipa-4-10_latest_selinux.yaml +@@ -41,7 +41,7 @@ topologies: + memory: 14500 + + jobs: +- fedora-latest/build: ++ fedora-latest-ipa-4-10/build: + requires: [] + priority: 100 + job: +@@ -49,1305 +49,1305 @@ jobs: + args: + git_repo: '{git_repo}' + git_refspec: '{git_refspec}' +- template: &ci-master-latest +- name: freeipa/ci-master-f36 +- version: 0.0.7 ++ template: &ci-ipa-4-10-latest ++ name: freeipa/ci-ipa-4-10-f36 ++ version: 0.0.1 + timeout: 1800 + topology: *build + +- fedora-latest/simple_replication: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/simple_replication: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_simple_replication.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_external_ca_TestExternalCA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_external_ca_TestExternalCA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_external_ca.py::TestExternalCA test_integration/test_external_ca.py::TestExternalCAConstraints +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 4800 + topology: *master_1repl_1client + +- fedora-latest/test_external_ca_TestSelfExternalSelf: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_external_ca_TestSelfExternalSelf: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_external_ca.py::TestSelfExternalSelf test_integration/test_external_ca.py::TestExternalCAInstall +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/external_ca_templates: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/external_ca_templates: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_external_ca.py::TestExternalCAProfileScenarios +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_topologies: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_topologies: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_topologies.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_sudo: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_sudo: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_sudo.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 4800 + topology: *master_1repl_1client + +- fedora-latest/test_commands: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_commands: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_commands.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl_1client + +- fedora-latest/test_kerberos_flags: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_kerberos_flags: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_kerberos_flags.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl_1client + +- fedora-latest/test_http_kdc_proxy: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_http_kdc_proxy: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunADTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_http_kdc_proxy.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *ad_master_2client + +- fedora-latest/test_fips: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_fips: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_fips.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl_1client + +- fedora-latest/test_forced_client_enrolment: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_forced_client_enrolment: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_forced_client_reenrollment.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 4800 + topology: *master_1repl_1client + +- fedora-latest/test_advise: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_advise: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_advise.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl_1client + +- fedora-latest/test_testconfig: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_testconfig: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_testconfig.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_service_permissions: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_service_permissions: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_service_permissions.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_netgroup: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_netgroup: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_netgroup.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_vault: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_vault: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_vault.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 6300 + topology: *master_1repl + +- fedora-latest/test_authconfig: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_authconfig: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_authselect.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 4800 + topology: *master_1repl_1client + +- fedora-latest/test_smb: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_smb: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunADTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_smb.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *ad_master_2client + +- fedora-latest/test_server_del: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_server_del: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_server_del.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_2repl_1client + +- fedora-latest/test_installation_TestInstallWithCA1: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA1: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestInstallWithCA1 +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_installation_TestInstallWithCA2: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA2: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestInstallWithCA2 +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_installation_TestInstallCA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallCA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestInstallCA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_2repl_1client + +- fedora-latest/test_installation_TestInstallWithCA_KRA1: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_KRA1: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA1 +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_installation_TestInstallWithCA_KRA2: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_KRA2: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA2 +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_installation_TestInstallWithCA_DNS1: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_DNS1: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS1 +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_installation_TestInstallWithCA_DNS2: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_DNS2: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS2 +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_installation_TestInstallWithCA_DNS3: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_DNS3: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS3 +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_installation_TestInstallWithCA_DNS4: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_DNS4: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS4 +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_installation_TestInstallWithCA_KRA_DNS1: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_KRA_DNS1: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS1 +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_installation_TestInstallWithCA_KRA_DNS2: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallWithCA_KRA_DNS2: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS2 +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_installation_TestInstallMaster: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallMaster: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestInstallMaster +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_1repl + +- fedora-latest/test_installation_TestInstallMasterKRA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallMasterKRA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestInstallMasterKRA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_1repl + +- fedora-latest/test_installation_TestInstallMasterDNS: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallMasterDNS: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestInstallMasterDNS +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_1repl + +- fedora-latest/test_installation_TestInstallMasterDNSRepeatedly: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallMasterDNSRepeatedly: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestInstallMasterDNSRepeatedly +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_1repl + +- fedora-latest/test_installation_TestInstallMasterReservedIPasForwarder: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallMasterReservedIPasForwarder: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestInstallMasterReservedIPasForwarder +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_1repl + +- fedora-latest/test_installation_TestInstallMasterReplica: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallMasterReplica: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestInstallMasterReplica +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_1repl + +- fedora-latest/test_installation_TestInstallReplicaAgainstSpecificServer: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallReplicaAgainstSpecificServer: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestInstallReplicaAgainstSpecificServer +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_2repl_1client + +- fedora-latest/test_installation_TestADTrustInstall: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestADTrustInstall: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestADTrustInstall +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_2repl_1client + +- fedora-latest/test_installation_TestADTrustInstallWithDNS_KRA_ADTrust: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestADTrustInstallWithDNS_KRA_ADTrust: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestADTrustInstallWithDNS_KRA_ADTrust +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_2repl_1client + +- fedora-latest/test_installation_TestKRAinstallAfterCertRenew: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestKRAinstallAfterCertRenew: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestKRAinstallAfterCertRenew +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_1repl + +- fedora-latest/test_installation_TestInstallWithoutSudo: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallWithoutSudo: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestInstallWithoutSudo +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 4800 + topology: *master_1repl_1client + +- fedora-latest/test_installation_TestInstallWithoutNamed: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallWithoutNamed: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestInstallWithoutNamed +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 4800 + topology: *master_1repl + +- fedora-latest/test_installation_TestInstallwithSHA384withRSA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_TestInstallwithSHA384withRSA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestInstallwithSHA384withRSA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_idviews: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_idviews: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunADTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_idviews.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *ad_master_2client + +- fedora-latest/test_caless_TestServerInstall: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_caless_TestServerInstall: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_caless.py::TestServerInstall +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 12000 + topology: *master_1repl + +- fedora-latest/test_caless_TestReplicaInstall: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_caless_TestReplicaInstall: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_caless.py::TestReplicaInstall +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_caless_TestClientInstall: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_caless_TestClientInstall: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_caless.py::TestClientInstall +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + # actually master_1client + topology: *master_1repl_1client + +- fedora-latest/test_caless_TestIPACommands: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_caless_TestIPACommands: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_caless.py::TestIPACommands +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl + +- fedora-latest/test_caless_TestCertInstall: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_caless_TestCertInstall: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_caless.py::TestCertInstall +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl + +- fedora-latest/test_caless_TestPKINIT: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_caless_TestPKINIT: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_caless.py::TestPKINIT +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl + +- fedora-latest/test_caless_TestServerReplicaCALessToCAFull: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_caless_TestServerReplicaCALessToCAFull: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_caless.py::TestServerReplicaCALessToCAFull +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl + +- fedora-latest/test_caless_TestReplicaCALessToCAFull: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_caless_TestReplicaCALessToCAFull: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_caless.py::TestReplicaCALessToCAFull +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl + +- fedora-latest/test_caless_TestServerCALessToExternalCA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_caless_TestServerCALessToExternalCA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_caless.py::TestServerCALessToExternalCA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl + +- fedora-latest/test_backup_and_restore_TestUserRootFilesOwnershipPermission: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestUserRootFilesOwnershipPermission: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_backup_and_restore.py::TestUserRootFilesOwnershipPermission +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_backup_and_restore_TestBackupAndRestore: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestore: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestore +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_backup_and_restore_TestBackupAndRestoreWithDNSSEC: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreWithDNSSEC: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNSSEC +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_backup_and_restore_TestBackupReinstallRestoreWithDNSSEC: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupReinstallRestoreWithDNSSEC: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNSSEC +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_backup_and_restore_TestBackupAndRestoreWithDNS: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreWithDNS: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNS +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_backup_and_restore_TestBackupReinstallRestoreWithDNS: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupReinstallRestoreWithDNS: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNS +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_backup_and_restore_TestBackupAndRestoreWithKRA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreWithKRA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithKRA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_backup_and_restore_TestBackupReinstallRestoreWithKRA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupReinstallRestoreWithKRA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithKRA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_backup_and_restore_TestBackupAndRestoreWithReplica: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreWithReplica: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithReplica +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_2repl_1client + +- fedora-latest/test_backup_and_restore_TestBackupAndRestoreDMPassword: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreDMPassword: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreDMPassword +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_backup_and_restore_TestReplicaInstallAfterRestore: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestReplicaInstallAfterRestore: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_backup_and_restore.py::TestReplicaInstallAfterRestore +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_2repl_1client + +- fedora-latest/test_backup_and_restore_TestBackupRoles: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupRoles: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_backup_and_restore.py::TestBackupRoles +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_dnssec: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_dnssec: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_dnssec.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_2repl_1client + +- fedora-latest/test_replica_promotion_TestReplicaPromotionLevel1: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replica_promotion_TestReplicaPromotionLevel1: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_replica_promotion.py::TestReplicaPromotionLevel1 +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_replica_promotion_TestUnprivilegedUserPermissions: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replica_promotion_TestUnprivilegedUserPermissions: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_replica_promotion.py::TestUnprivilegedUserPermissions +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_replica_promotion_TestProhibitReplicaUninstallation: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replica_promotion_TestProhibitReplicaUninstallation: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_replica_promotion.py::TestProhibitReplicaUninstallation +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_2repl_1client + +- fedora-latest/test_replica_promotion_TestWrongClientDomain: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replica_promotion_TestWrongClientDomain: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_replica_promotion.py::TestWrongClientDomain +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_replica_promotion_TestRenewalMaster: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replica_promotion_TestRenewalMaster: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_replica_promotion.py::TestRenewalMaster +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_replica_promotion_TestReplicaInstallWithExistingEntry: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replica_promotion_TestReplicaInstallWithExistingEntry: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallWithExistingEntry +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_replica_promotion_TestSubCAkeyReplication: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replica_promotion_TestSubCAkeyReplication: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_replica_promotion.py::TestSubCAkeyReplication +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_replica_promotion_TestReplicaInstallCustodia: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replica_promotion_TestReplicaInstallCustodia: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallCustodia +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_2repl_1client + +- fedora-latest/test_replica_promotion_TestReplicaInForwardZone: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replica_promotion_TestReplicaInForwardZone: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_replica_promotion.py::TestReplicaInForwardZone +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_replica_promotion_TestHiddenReplicaPromotion: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replica_promotion_TestHiddenReplicaPromotion: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaPromotion +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_2repl_1client + +- fedora-latest/test_replica_promotion_TestHiddenReplicaKRA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replica_promotion_TestHiddenReplicaKRA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaKRA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_2repl_1client + +- fedora-latest/test_upgrade: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_upgrade: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_upgrade.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_topology_TestCASpecificRUVs: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_topology_TestCASpecificRUVs: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_topology.py::TestCASpecificRUVs +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_3repl_1client + +- fedora-latest/test_topology_TestTopologyOptions: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_topology_TestTopologyOptions: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_topology.py::TestTopologyOptions +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_3repl_1client + +- fedora-latest/test_replication_layouts_TestLineTopologyWithoutCA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replication_layouts_TestLineTopologyWithoutCA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithoutCA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_3repl_1client + +- fedora-latest/test_replication_layouts_TestLineTopologyWithCA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replication_layouts_TestLineTopologyWithCA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_replication_layouts_TestLineTopologyWithCAKRA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replication_layouts_TestLineTopologyWithCAKRA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCAKRA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_replication_layouts.py_TestStarTopologyWithoutCA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replication_layouts.py_TestStarTopologyWithoutCA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithoutCA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_3repl_1client + +- fedora-latest/test_replication_layouts_TestStarTopologyWithCA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replication_layouts_TestStarTopologyWithCA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_3repl_1client + +- fedora-latest/test_replication_layouts_TestStarTopologyWithCAKRA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replication_layouts_TestStarTopologyWithCAKRA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCAKRA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_replication_layouts_TestCompleteTopologyWithoutCA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replication_layouts_TestCompleteTopologyWithoutCA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithoutCA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_3repl_1client + +- fedora-latest/test_replication_layouts_TestCompleteTopologyWithCA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replication_layouts_TestCompleteTopologyWithCA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_3repl_1client + +- fedora-latest/test_replication_layouts_TestCompleteTopologyWithCAKRA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_replication_layouts_TestCompleteTopologyWithCAKRA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCAKRA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_3repl_1client + +- fedora-latest/test_client_uninstallation: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_client_uninstallation: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_uninstallation.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl_1client + +- fedora-latest/test_installation_client: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_installation_client: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation_client.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_3client + +- fedora-latest/test_user_permissions: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_user_permissions: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_user_permissions.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl_1client + +- fedora-latest/test_webui_cert: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_webui_cert: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_webui/test_cert.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 2400 + topology: *ipaserver + +- fedora-latest/test_webui_general: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_webui_general: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: >- + test_webui/test_loginscreen.py + test_webui/test_misc_cases.py + test_webui/test_navigation.py + test_webui/test_translation.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *ipaserver + +- fedora-latest/test_webui_host: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_webui_host: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_webui/test_host.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *ipaserver + +- fedora-latest/test_webui_host_net_groups: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_webui_host_net_groups: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: >- + test_webui/test_hostgroup.py + test_webui/test_netgroup.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *ipaserver + +- fedora-latest/test_webui_identity: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_webui_identity: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: >- + test_webui/test_automember.py + test_webui/test_idviews.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *ipaserver + +- fedora-latest/test_webui_network: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_webui_network: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: >- + test_webui/test_automount.py + test_webui/test_dns.py + test_webui/test_vault.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *ipaserver + +- fedora-latest/test_webui_policy: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_webui_policy: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: >- + test_webui/test_hbac.py +@@ -1355,33 +1355,33 @@ jobs: + test_webui/test_pwpolicy.py + test_webui/test_selinuxusermap.py + test_webui/test_sudo.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *ipaserver + +- fedora-latest/test_webui_rbac: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_webui_rbac: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: >- + test_webui/test_delegation.py + test_webui/test_rbac.py + test_webui/test_selfservice.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *ipaserver + +- fedora-latest/test_webui_server: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_webui_server: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: >- + test_webui/test_config.py +@@ -1389,580 +1389,580 @@ jobs: + test_webui/test_realmdomains.py + test_webui/test_topology.py + test_webui/test_trust.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *ipaserver + +- fedora-latest/test_webui_service: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_webui_service: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_webui/test_service.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 2400 + topology: *ipaserver + +- fedora-latest/test_webui_users: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_webui_users: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: >- + test_webui/test_group.py + test_webui/test_user.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 4800 + topology: *ipaserver + +- fedora-latest/test_webui_subid: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_webui_subid: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_webui/test_subid.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 2400 + topology: *ipaserver + +- fedora-latest/customized_ds_config_install: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/customized_ds_config_install: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_customized_ds_config_install.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/dns_locations: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/dns_locations: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_dns_locations.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_2repl_1client + +- fedora-latest/external_ca_TestExternalCAdirsrvStop: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/external_ca_TestExternalCAdirsrvStop: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_external_ca.py::TestExternalCAdirsrvStop +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/external_ca_TestExternalCAInvalidCert: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/external_ca_TestExternalCAInvalidCert: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_external_ca.py::TestExternalCAInvalidCert test_integration/test_external_ca.py::TestExternalCAInvalidIntermediate +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/external_ca_TestMultipleExternalCA: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/external_ca_TestMultipleExternalCA: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_external_ca.py::TestMultipleExternalCA +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_ipahealthcheck: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_ipahealthcheck: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheck +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl_1client + +- fedora-latest/test_ipahealthcheck_nodns_extca_file: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_ipahealthcheck_nodns_extca_file: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithoutDNS test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithExternalCA test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFileCheck +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl + +- fedora-latest/test_ipahealthcheck_cli_fsspace: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_ipahealthcheck_cli_fsspace: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCLI test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFilesystemSpace +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_ipahealthcheck_adtrust: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_ipahealthcheck_adtrust: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunADTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithADtrust +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 4800 + topology: *adroot_adchild_adtree_master_1client + +- fedora-latest/test_ntp_options: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_ntp_options: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_ntp_options.py::TestNTPoptions +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_1repl_1client + +- fedora-latest/test_otp: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_otp: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_otp.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_pkinit_manage: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_pkinit_manage: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_pkinit_manage.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_pki_config_override: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_pki_config_override: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_pki_config_override.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +-# fedora-latest/nfs: +-# requires: [fedora-latest/build] ++# fedora-latest-ipa-4-10/nfs: ++# requires: [fedora-latest-ipa-4-10/build] + # priority: 50 + # job: + # class: RunPytest + # args: +-# build_url: '{fedora-latest/build_url}' ++# build_url: '{fedora-latest-ipa-4-10/build_url}' + # selinux_enforcing: True + # test_suite: test_integration/test_nfs.py::TestNFS +-# template: *ci-master-latest ++# template: *ci-ipa-4-10-latest + # timeout: 9000 + # topology: *master_3client + +- fedora-latest/nfs_nsswitch_restore: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/nfs_nsswitch_restore: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_nfs.py::TestIpaClientAutomountFileRestore +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_3client + +- fedora-latest/mask: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/mask: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestMaskInstall +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/hostname_validator: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/hostname_validator: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_installation.py::TestHostnameValidator +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/automember: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/automember: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_automember.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_crlgen_manage: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_crlgen_manage: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_crlgen_manage.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_integration_TestIPANotConfigured: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_integration_TestIPANotConfigured: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_cli_ipa_not_configured.py::TestIPANotConfigured +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_1repl + +- fedora-latest/test_sssd: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_sssd: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunADTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_sssd.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *adroot_adchild_adtree_master_1client + +- fedora-latest/test_ca_custom_sdn: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_ca_custom_sdn: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_ca_custom_sdn.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_membermanager: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_membermanager: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_membermanager.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 1800 + topology: *master_1repl + +- fedora-latest/krbtpolicy: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/krbtpolicy: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_krbtpolicy.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 4800 + topology: *master_1repl + +- fedora-latest/test_winsyncmigrate: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_winsyncmigrate: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunADTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_winsyncmigrate.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 4800 + topology: *ad_master + +- fedora-latest/test_trust: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_trust: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunADTests + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_trust.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10000 + topology: *adroot_adchild_adtree_master_1client + +- fedora-latest/test_backup_and_restore_TestBackupAndRestoreTrust: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreTrust: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreTrust +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl + +- fedora-latest/test_adtrust_install: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_adtrust_install: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_adtrust_install.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_cert: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_cert: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_cert.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl_1client + +- fedora-latest/test_epn: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_epn: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_epn.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_3client + +- fedora-latest/test_acme: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_acme: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_acme.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 7200 + topology: *master_1repl_1client + +- fedora-latest/test_dns: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_dns: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_dns.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_pwpolicy: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_pwpolicy: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_pwpolicy.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_cert_fix: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_cert_fix: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_ipa_cert_fix.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_1repl + +- fedora-latest/test_subids: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_subids: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_subids.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_custom_plugins: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_custom_plugins: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_custom_plugins.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl + +- fedora-latest/test_external_idp: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_external_idp: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_idp.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5000 + topology: *master_2repl_1client + +- fedora-latest/test_random_serial_numbers_TestInstallWithCA_DNS1_RSN: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_random_serial_numbers_TestInstallWithCA_DNS1_RSN: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_DNS1_RSN +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_random_serial_numbers_TestInstallWithCA_KRA1_RSN: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_random_serial_numbers_TestInstallWithCA_KRA1_RSN: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_KRA1_RSN +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 10800 + topology: *master_3repl_1client + +- fedora-latest/test_random_serial_numbers_test_commands_RSN: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_random_serial_numbers_test_commands_RSN: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_random_serial_numbers.py::TestIPACommand_RSN::test_certificate_out_write_to_file +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl_1client + +- fedora-latest/test_caless_TestServerCALessToExternalCA_RSN: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/test_caless_TestServerCALessToExternalCA_RSN: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + selinux_enforcing: True + test_suite: test_integration/test_random_serial_numbers.py::TestServerCALessToExternalCA_RSN +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl +diff --git a/ipatests/prci_definitions/nightly_rawhide.yaml b/ipatests/prci_definitions/nightly_ipa-4-10_previous.yaml +similarity index 50% +rename from ipatests/prci_definitions/nightly_rawhide.yaml +rename to ipatests/prci_definitions/nightly_ipa-4-10_previous.yaml +index 60a0d5f22369d2aa5fb4892a3e32d0772d1ab0da..df98a66871fd90daaebd83f063e48f1580675049 100644 +--- a/ipatests/prci_definitions/nightly_rawhide.yaml ++++ b/ipatests/prci_definitions/nightly_ipa-4-10_previous.yaml +@@ -41,7 +41,7 @@ topologies: + memory: 14500 + + jobs: +- fedora-rawhide/build: ++ fedora-previous-ipa-4-10/build: + requires: [] + priority: 100 + job: +@@ -49,1920 +49,1775 @@ jobs: + args: + git_repo: '{git_repo}' + git_refspec: '{git_refspec}' +- template: &ci-master-frawhide +- name: freeipa/ci-master-frawhide +- version: 0.7.0 ++ template: &ci-ipa-4-10-previous ++ name: freeipa/ci-ipa-4-10-f35 ++ version: 0.0.1 + timeout: 1800 + topology: *build + +- fedora-rawhide/simple_replication: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/simple_replication: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_simple_replication.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl + +- fedora-rawhide/test_external_ca_TestExternalCA: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_external_ca_TestExternalCA: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_external_ca.py::TestExternalCA test_integration/test_external_ca.py::TestExternalCAConstraints +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 4800 + topology: *master_1repl_1client + +- fedora-rawhide/test_external_ca_TestSelfExternalSelf: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_external_ca_TestSelfExternalSelf: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_external_ca.py::TestSelfExternalSelf test_integration/test_external_ca.py::TestExternalCAInstall +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl + +- fedora-rawhide/external_ca_templates: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/external_ca_templates: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_external_ca.py::TestExternalCAProfileScenarios +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl + +- fedora-rawhide/test_topologies: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_topologies: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_topologies.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl + +- fedora-rawhide/test_sudo: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_sudo: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_sudo.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 4800 + topology: *master_1repl_1client + +- fedora-rawhide/test_commands: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_commands: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_commands.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 5400 + topology: *master_1repl_1client + +- fedora-rawhide/test_kerberos_flags: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_kerberos_flags: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_kerberos_flags.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl_1client + +- fedora-rawhide/test_http_kdc_proxy: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_http_kdc_proxy: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunADTests + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_http_kdc_proxy.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *ad_master_2client + +- fedora-rawhide/test_fips: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_fips: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_fips.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_1repl_1client + +- fedora-rawhide/test_forced_client_enrolment: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_forced_client_enrolment: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_forced_client_reenrollment.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 4800 + topology: *master_1repl_1client + +- fedora-rawhide/test_advise: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_advise: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_advise.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl_1client + +- fedora-rawhide/test_testconfig: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_testconfig: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_testconfig.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl + +- fedora-rawhide/test_service_permissions: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_service_permissions: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_service_permissions.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl + +- fedora-rawhide/test_netgroup: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_netgroup: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_netgroup.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl + +- fedora-rawhide/test_vault: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_vault: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_vault.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 6300 + topology: *master_1repl + +- fedora-rawhide/test_authconfig: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_authconfig: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_authselect.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 4800 + topology: *master_1repl_1client + +- fedora-rawhide/test_smb: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_smb: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunADTests + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_smb.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *ad_master_2client + +- fedora-rawhide/test_server_del: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_server_del: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_server_del.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_2repl_1client + +- fedora-rawhide/test_installation_TestInstallWithCA1: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_installation_TestInstallWithCA1: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallWithCA1 +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_3repl_1client + +- fedora-rawhide/test_installation_TestInstallWithCA2: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_installation_TestInstallWithCA2: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallWithCA2 +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_3repl_1client + +- fedora-rawhide/test_installation_TestInstallCA: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_installation_TestInstallCA: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallCA +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_2repl_1client + +- fedora-rawhide/test_installation_TestInstallWithCA_KRA1: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_installation_TestInstallWithCA_KRA1: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA1 +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_3repl_1client + +- fedora-rawhide/test_installation_TestInstallWithCA_KRA2: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_installation_TestInstallWithCA_KRA2: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA2 +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_3repl_1client + +- fedora-rawhide/test_installation_TestInstallWithCA_DNS1: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_installation_TestInstallWithCA_DNS1: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS1 +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_3repl_1client + +- fedora-rawhide/test_installation_TestInstallWithCA_DNS2: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_installation_TestInstallWithCA_DNS2: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS2 +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_3repl_1client + +- fedora-rawhide/test_installation_TestInstallWithCA_DNS3: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_installation_TestInstallWithCA_DNS3: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS3 +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl + +- fedora-rawhide/test_installation_TestInstallWithCA_DNS4: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_installation_TestInstallWithCA_DNS4: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS4 +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl + +- fedora-rawhide/test_installation_TestInstallWithCA_KRA_DNS1: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_installation_TestInstallWithCA_KRA_DNS1: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS1 +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_3repl_1client + +- fedora-rawhide/test_installation_TestInstallWithCA_KRA_DNS2: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_installation_TestInstallWithCA_KRA_DNS2: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS2 +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_3repl_1client + +- fedora-rawhide/test_installation_TestInstallMaster: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_installation_TestInstallMaster: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallMaster +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_1repl + +- fedora-rawhide/test_installation_TestInstallMasterKRA: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_installation_TestInstallMasterKRA: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallMasterKRA +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_1repl + +- fedora-rawhide/test_installation_TestInstallMasterDNS: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_installation_TestInstallMasterDNS: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallMasterDNS +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_1repl + +- fedora-rawhide/test_installation_TestInstallMasterDNSRepeatedly: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_installation_TestInstallMasterDNSRepeatedly: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallMasterDNSRepeatedly +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_1repl + +- fedora-rawhide/test_installation_TestInstallMasterReservedIPasForwarder: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_installation_TestInstallMasterReservedIPasForwarder: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallMasterReservedIPasForwarder +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_1repl + +- fedora-rawhide/test_installation_TestInstallMasterReplica: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_installation_TestInstallMasterReplica: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallMasterReplica +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_1repl + +- fedora-rawhide/test_installation_TestInstallReplicaAgainstSpecificServer: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_installation_TestInstallReplicaAgainstSpecificServer: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallReplicaAgainstSpecificServer +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_2repl_1client + +- fedora-rawhide/test_installation_TestADTrustInstall: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_installation_TestADTrustInstall: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestADTrustInstall +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_2repl_1client + +- fedora-rawhide/test_installation_TestADTrustInstallWithDNS_KRA_ADTrust: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_installation_TestADTrustInstallWithDNS_KRA_ADTrust: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestADTrustInstallWithDNS_KRA_ADTrust +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_2repl_1client + +- fedora-rawhide/test_installation_TestKRAinstallAfterCertRenew: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_installation_TestKRAinstallAfterCertRenew: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestKRAinstallAfterCertRenew +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_1repl + +- fedora-rawhide/test_installation_TestInstallWithoutSudo: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_installation_TestInstallWithoutSudo: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallWithoutSudo +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 4800 + topology: *master_1repl_1client + +- fedora-rawhide/test_installation_TestInstallWithoutNamed: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_installation_TestInstallWithoutNamed: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallWithoutNamed +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 4800 + topology: *master_1repl + +- fedora-rawhide/test_installation_TestInstallwithSHA384withRSA: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_installation_TestInstallwithSHA384withRSA: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_installation.py::TestInstallwithSHA384withRSA +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl + +- fedora-rawhide/test_idviews: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_idviews: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunADTests + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_idviews.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *ad_master_2client + +- fedora-rawhide/test_caless_TestServerInstall: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_caless_TestServerInstall: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_caless.py::TestServerInstall +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 12000 + topology: *master_1repl + +- fedora-rawhide/test_caless_TestReplicaInstall: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_caless_TestReplicaInstall: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_caless.py::TestReplicaInstall +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_1repl + +- fedora-rawhide/test_caless_TestClientInstall: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_caless_TestClientInstall: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_caless.py::TestClientInstall +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 5400 + # actually master_1client + topology: *master_1repl_1client + +- fedora-rawhide/test_caless_TestIPACommands: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_caless_TestIPACommands: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_caless.py::TestIPACommands +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 5400 + topology: *master_1repl + +- fedora-rawhide/test_caless_TestCertInstall: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_caless_TestCertInstall: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_caless.py::TestCertInstall +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 5400 + topology: *master_1repl + +- fedora-rawhide/test_caless_TestPKINIT: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_caless_TestPKINIT: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_caless.py::TestPKINIT +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 5400 + topology: *master_1repl + +- fedora-rawhide/test_caless_TestServerReplicaCALessToCAFull: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_caless_TestServerReplicaCALessToCAFull: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_caless.py::TestServerReplicaCALessToCAFull +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 5400 + topology: *master_1repl + +- fedora-rawhide/test_caless_TestReplicaCALessToCAFull: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_caless_TestReplicaCALessToCAFull: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_caless.py::TestReplicaCALessToCAFull +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 5400 + topology: *master_1repl + +- fedora-rawhide/test_caless_TestServerCALessToExternalCA: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_caless_TestServerCALessToExternalCA: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_caless.py::TestServerCALessToExternalCA +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 5400 + topology: *master_1repl + +- fedora-rawhide/test_backup_and_restore_TestUserRootFilesOwnershipPermission: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_backup_and_restore_TestUserRootFilesOwnershipPermission: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestUserRootFilesOwnershipPermission +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_1repl + +- fedora-rawhide/test_backup_and_restore_TestBackupAndRestore: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_backup_and_restore_TestBackupAndRestore: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestore +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_1repl + +- fedora-rawhide/test_backup_and_restore_TestBackupAndRestoreWithDNSSEC: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreWithDNSSEC: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNSSEC +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_1repl + +- fedora-rawhide/test_backup_and_restore_TestBackupReinstallRestoreWithDNSSEC: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_backup_and_restore_TestBackupReinstallRestoreWithDNSSEC: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNSSEC +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_1repl + +- fedora-rawhide/test_backup_and_restore_TestBackupAndRestoreWithDNS: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreWithDNS: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNS +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_1repl + +- fedora-rawhide/test_backup_and_restore_TestBackupReinstallRestoreWithDNS: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_backup_and_restore_TestBackupReinstallRestoreWithDNS: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNS +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_1repl + +- fedora-rawhide/test_backup_and_restore_TestBackupAndRestoreWithKRA: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreWithKRA: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithKRA +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_1repl + +- fedora-rawhide/test_backup_and_restore_TestBackupReinstallRestoreWithKRA: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_backup_and_restore_TestBackupReinstallRestoreWithKRA: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithKRA +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_1repl + +- fedora-rawhide/test_backup_and_restore_TestBackupAndRestoreWithReplica: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreWithReplica: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithReplica +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_2repl_1client + +- fedora-rawhide/test_backup_and_restore_TestBackupAndRestoreDMPassword: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreDMPassword: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreDMPassword +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_1repl + +- fedora-rawhide/test_backup_and_restore_TestReplicaInstallAfterRestore: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_backup_and_restore_TestReplicaInstallAfterRestore: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestReplicaInstallAfterRestore +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_2repl_1client + +- fedora-rawhide/test_backup_and_restore_TestBackupRoles: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_backup_and_restore_TestBackupRoles: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestBackupRoles +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_1repl + +- fedora-rawhide/test_dnssec: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_dnssec: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_dnssec.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_2repl_1client + +- fedora-rawhide/test_replica_promotion_TestReplicaPromotionLevel1: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_replica_promotion_TestReplicaPromotionLevel1: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_replica_promotion.py::TestReplicaPromotionLevel1 +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_1repl + +- fedora-rawhide/test_replica_promotion_TestUnprivilegedUserPermissions: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_replica_promotion_TestUnprivilegedUserPermissions: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_replica_promotion.py::TestUnprivilegedUserPermissions +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_1repl + +- fedora-rawhide/test_replica_promotion_TestProhibitReplicaUninstallation: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_replica_promotion_TestProhibitReplicaUninstallation: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_replica_promotion.py::TestProhibitReplicaUninstallation +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_2repl_1client + +- fedora-rawhide/test_replica_promotion_TestWrongClientDomain: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_replica_promotion_TestWrongClientDomain: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_replica_promotion.py::TestWrongClientDomain +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_1repl + +- fedora-rawhide/test_replica_promotion_TestRenewalMaster: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_replica_promotion_TestRenewalMaster: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_replica_promotion.py::TestRenewalMaster +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_1repl + +- fedora-rawhide/test_replica_promotion_TestReplicaInstallWithExistingEntry: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_replica_promotion_TestReplicaInstallWithExistingEntry: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallWithExistingEntry +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_1repl + +- fedora-rawhide/test_replica_promotion_TestSubCAkeyReplication: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_replica_promotion_TestSubCAkeyReplication: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_replica_promotion.py::TestSubCAkeyReplication +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_1repl + +- fedora-rawhide/test_replica_promotion_TestReplicaInstallCustodia: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_replica_promotion_TestReplicaInstallCustodia: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallCustodia +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_2repl_1client + +- fedora-rawhide/test_replica_promotion_TestReplicaInForwardZone: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_replica_promotion_TestReplicaInForwardZone: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_replica_promotion.py::TestReplicaInForwardZone +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_1repl + +- fedora-rawhide/test_replica_promotion_TestHiddenReplicaPromotion: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_replica_promotion_TestHiddenReplicaPromotion: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaPromotion +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_2repl_1client + +- fedora-rawhide/test_replica_promotion_TestHiddenReplicaKRA: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_replica_promotion_TestHiddenReplicaKRA: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaKRA +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_2repl_1client + +- fedora-rawhide/test_upgrade: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_upgrade: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_upgrade.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_1repl + +- fedora-rawhide/test_topology_TestCASpecificRUVs: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_topology_TestCASpecificRUVs: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_topology.py::TestCASpecificRUVs +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_3repl_1client + +- fedora-rawhide/test_topology_TestTopologyOptions: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_topology_TestTopologyOptions: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_topology.py::TestTopologyOptions +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_3repl_1client + +- fedora-rawhide/test_replication_layouts_TestLineTopologyWithoutCA: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_replication_layouts_TestLineTopologyWithoutCA: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithoutCA +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_3repl_1client + +- fedora-rawhide/test_replication_layouts_TestLineTopologyWithCA: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_replication_layouts_TestLineTopologyWithCA: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCA +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_3repl_1client + +- fedora-rawhide/test_replication_layouts_TestLineTopologyWithCAKRA: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_replication_layouts_TestLineTopologyWithCAKRA: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCAKRA +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_3repl_1client + +- fedora-rawhide/test_replication_layouts.py_TestStarTopologyWithoutCA: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_replication_layouts.py_TestStarTopologyWithoutCA: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithoutCA +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_3repl_1client + +- fedora-rawhide/test_replication_layouts_TestStarTopologyWithCA: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_replication_layouts_TestStarTopologyWithCA: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCA +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_3repl_1client + +- fedora-rawhide/test_replication_layouts_TestStarTopologyWithCAKRA: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_replication_layouts_TestStarTopologyWithCAKRA: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCAKRA +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_3repl_1client + +- fedora-rawhide/test_replication_layouts_TestCompleteTopologyWithoutCA: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_replication_layouts_TestCompleteTopologyWithoutCA: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithoutCA +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_3repl_1client + +- fedora-rawhide/test_replication_layouts_TestCompleteTopologyWithCA: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_replication_layouts_TestCompleteTopologyWithCA: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCA +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_3repl_1client + +- fedora-rawhide/test_replication_layouts_TestCompleteTopologyWithCAKRA: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_replication_layouts_TestCompleteTopologyWithCAKRA: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCAKRA +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_3repl_1client + +- fedora-rawhide/test_client_uninstallation: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_client_uninstallation: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_uninstallation.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_1repl_1client + +- fedora-rawhide/test_installation_client: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_installation_client: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_installation_client.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_3client + +- fedora-rawhide/test_user_permissions: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_user_permissions: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_user_permissions.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl_1client + +- fedora-rawhide/test_webui_cert: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_webui_cert: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_webui/test_cert.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 2400 + topology: *ipaserver + +- fedora-rawhide/test_webui_general: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_webui_general: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: >- + test_webui/test_loginscreen.py + test_webui/test_misc_cases.py + test_webui/test_navigation.py + test_webui/test_translation.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *ipaserver + +- fedora-rawhide/test_webui_host: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_webui_host: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_webui/test_host.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *ipaserver + +- fedora-rawhide/test_webui_host_net_groups: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_webui_host_net_groups: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: >- + test_webui/test_hostgroup.py + test_webui/test_netgroup.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *ipaserver + +- fedora-rawhide/test_webui_identity: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_webui_identity: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: >- + test_webui/test_automember.py + test_webui/test_idviews.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *ipaserver + +- fedora-rawhide/test_webui_network: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_webui_network: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: >- + test_webui/test_automount.py + test_webui/test_dns.py + test_webui/test_vault.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *ipaserver + +- fedora-rawhide/test_webui_policy: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_webui_policy: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: >- + test_webui/test_hbac.py + test_webui/test_krbtpolicy.py + test_webui/test_pwpolicy.py + test_webui/test_selinuxusermap.py + test_webui/test_sudo.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *ipaserver + +- fedora-rawhide/test_webui_rbac: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_webui_rbac: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: >- + test_webui/test_delegation.py + test_webui/test_rbac.py + test_webui/test_selfservice.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *ipaserver + +- fedora-rawhide/test_webui_server: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_webui_server: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: >- + test_webui/test_config.py + test_webui/test_range.py + test_webui/test_realmdomains.py + test_webui/test_topology.py + test_webui/test_trust.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *ipaserver + +- fedora-rawhide/test_webui_service: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_webui_service: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_webui/test_service.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 2400 + topology: *ipaserver + +- fedora-rawhide/test_webui_users: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_webui_users: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: >- + test_webui/test_group.py + test_webui/test_user.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 4800 + topology: *ipaserver + +- fedora-rawhide/test_webui_subid: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_webui_subid: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunWebuiTests + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_webui/test_subid.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 2400 + topology: *ipaserver + +- fedora-rawhide/customized_ds_config_install: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/customized_ds_config_install: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_customized_ds_config_install.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl + +- fedora-rawhide/dns_locations: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/dns_locations: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_dns_locations.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_2repl_1client + +- fedora-rawhide/external_ca_TestExternalCAdirsrvStop: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/external_ca_TestExternalCAdirsrvStop: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_external_ca.py::TestExternalCAdirsrvStop +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl + +- fedora-rawhide/external_ca_TestExternalCAInvalidCert: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/external_ca_TestExternalCAInvalidCert: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_external_ca.py::TestExternalCAInvalidCert test_integration/test_external_ca.py::TestExternalCAInvalidIntermediate +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl + +- fedora-rawhide/external_ca_TestMultipleExternalCA: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/external_ca_TestMultipleExternalCA: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_external_ca.py::TestMultipleExternalCA +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl + +- fedora-rawhide/test_ipahealthcheck: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_ipahealthcheck: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheck +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 5400 + topology: *master_1repl_1client + +- fedora-rawhide/test_ipahealthcheck_nodns_extca_file: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_ipahealthcheck_nodns_extca_file: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithoutDNS test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithExternalCA test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFileCheck +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 5400 + topology: *master_1repl + +- fedora-rawhide/test_ipahealthcheck_cli_fsspace: +- requires: [fedora-rawhide/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True +- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCLI test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFilesystemSpace +- template: *ci-master-frawhide +- timeout: 3600 +- topology: *master_1repl ++ fedora-previous-ipa-4-10/test_ipahealthcheck_cli_fsspace: ++ requires: [fedora-previous-ipa-4-10/build] ++ priority: 50 ++ job: ++ class: RunPytest ++ args: ++ build_url: '{fedora-previous-ipa-4-10/build_url}' ++ test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCLI test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFilesystemSpace ++ template: *ci-ipa-4-10-previous ++ timeout: 3600 ++ topology: *master_1repl + +- fedora-rawhide/test_ipahealthcheck_adtrust: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_ipahealthcheck_adtrust: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunADTests + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithADtrust +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 4800 + topology: *adroot_adchild_adtree_master_1client + +- fedora-rawhide/test_ntp_options: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_ntp_options: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_ntp_options.py::TestNTPoptions +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_1repl_1client + +- fedora-rawhide/test_otp: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_otp: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_otp.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl + +- fedora-rawhide/test_pkinit_manage: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_pkinit_manage: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_pkinit_manage.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl + +- fedora-rawhide/test_pki_config_override: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_pki_config_override: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_pki_config_override.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl + +- fedora-rawhide/mask: +- requires: [fedora-rawhide/build] ++# fedora-previous-ipa-4-10/nfs: ++# requires: [fedora-previous-ipa-4-10/build] ++# priority: 50 ++# job: ++# class: RunPytest ++# args: ++# build_url: '{fedora-previous-ipa-4-10/build_url}' ++# test_suite: test_integration/test_nfs.py::TestNFS ++# template: *ci-ipa-4-10-previous ++# timeout: 9000 ++# topology: *master_3client ++ ++ fedora-previous-ipa-4-10/nfs_nsswitch_restore: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True +- test_suite: test_integration/test_installation.py::TestMaskInstall +- template: *ci-master-frawhide ++ build_url: '{fedora-previous-ipa-4-10/build_url}' ++ test_suite: test_integration/test_nfs.py::TestIpaClientAutomountFileRestore ++ template: *ci-ipa-4-10-previous + timeout: 3600 +- topology: *master_1repl ++ topology: *master_3client + +- fedora-rawhide/hostname_validator: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/mask: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True +- test_suite: test_integration/test_installation.py::TestHostnameValidator +- template: *ci-master-frawhide ++ build_url: '{fedora-previous-ipa-4-10/build_url}' ++ test_suite: test_integration/test_installation.py::TestMaskInstall ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl + +-# fedora-rawhide/nfs: +-# requires: [fedora-rawhide/build] +-# priority: 50 +-# job: +-# class: RunPytest +-# args: +-# build_url: '{fedora-rawhide/build_url}' +-# update_packages: True +-# test_suite: test_integration/test_nfs.py::TestNFS +-# template: *ci-master-frawhide +-# timeout: 9000 +-# topology: *master_3client +- +- fedora-rawhide/nfs_nsswitch_restore: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/hostname_validator: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True +- test_suite: test_integration/test_nfs.py::TestIpaClientAutomountFileRestore +- template: *ci-master-frawhide +- timeout: 9000 +- topology: *master_3client ++ build_url: '{fedora-previous-ipa-4-10/build_url}' ++ test_suite: test_integration/test_installation.py::TestHostnameValidator ++ template: *ci-ipa-4-10-previous ++ timeout: 3600 ++ topology: *master_1repl + +- fedora-rawhide/automember: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/automember: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_automember.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl + +- fedora-rawhide/test_crlgen_manage: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_crlgen_manage: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_crlgen_manage.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl + +- fedora-rawhide/test_integration_TestIPANotConfigured: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_integration_TestIPANotConfigured: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_cli_ipa_not_configured.py::TestIPANotConfigured +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_1repl + +- fedora-rawhide/test_sssd: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_sssd: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunADTests + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_sssd.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *adroot_adchild_adtree_master_1client + +- fedora-rawhide/test_ca_custom_sdn: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_ca_custom_sdn: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_ca_custom_sdn.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_1repl + +- fedora-rawhide/test_membermanager: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_membermanager: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_membermanager.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 1800 + topology: *master_1repl + +- fedora-rawhide/krbtpolicy: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/krbtpolicy: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_krbtpolicy.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 4800 + topology: *master_1repl + +- fedora-rawhide/test_winsyncmigrate: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_winsyncmigrate: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunADTests + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_winsyncmigrate.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 4800 + topology: *ad_master + +- fedora-rawhide/test_trust: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_trust: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunADTests + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_trust.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10000 + topology: *adroot_adchild_adtree_master_1client + +- fedora-rawhide/test_backup_and_restore_TestBackupAndRestoreTrust: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_backup_and_restore_TestBackupAndRestoreTrust: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreTrust +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_1repl + +- fedora-rawhide/test_adtrust_install: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_adtrust_install: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_adtrust_install.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl + +- fedora-rawhide/test_cert: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_cert: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_cert.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 5400 + topology: *master_1repl_1client + +- fedora-rawhide/test_epn: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_epn: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_epn.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_3client + +- fedora-rawhide/test_acme: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_acme: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_acme.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 7200 + topology: *master_1repl_1client + +- fedora-rawhide/test_dns: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_dns: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_dns.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl + +- fedora-rawhide/test_pwpolicy: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_pwpolicy: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_pwpolicy.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl + +- fedora-rawhide/test_cert_fix: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_cert_fix: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_ipa_cert_fix.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_1repl + +- fedora-rawhide/test_subids: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_subids: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_subids.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl + +- fedora-rawhide/test_custom_plugins: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_custom_plugins: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_custom_plugins.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 3600 + topology: *master_1repl + +- fedora-rawhide/test_external_idp: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_external_idp: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_idp.py +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 5000 + topology: *master_2repl_1client + +- fedora-rawhide/test_random_serial_numbers_TestInstallWithCA_DNS1_RSN: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_random_serial_numbers_TestInstallWithCA_DNS1_RSN: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_DNS1_RSN +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_3repl_1client + +- fedora-rawhide/test_random_serial_numbers_TestInstallWithCA_KRA1_RSN: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_random_serial_numbers_TestInstallWithCA_KRA1_RSN: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_KRA1_RSN +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 10800 + topology: *master_3repl_1client + +- fedora-rawhide/test_random_serial_numbers_test_commands_RSN: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_random_serial_numbers_test_commands_RSN: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_random_serial_numbers.py::TestIPACommand_RSN::test_certificate_out_write_to_file +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 5400 + topology: *master_1repl_1client + +- fedora-rawhide/test_caless_TestServerCALessToExternalCA_RSN: +- requires: [fedora-rawhide/build] ++ fedora-previous-ipa-4-10/test_caless_TestServerCALessToExternalCA_RSN: ++ requires: [fedora-previous-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-rawhide/build_url}' +- update_packages: True ++ build_url: '{fedora-previous-ipa-4-10/build_url}' + test_suite: test_integration/test_random_serial_numbers.py::TestServerCALessToExternalCA_RSN +- template: *ci-master-frawhide ++ template: *ci-ipa-4-10-previous + timeout: 5400 + topology: *master_1repl +diff --git a/ipatests/prci_definitions/nightly_latest_389ds.yaml b/ipatests/prci_definitions/nightly_latest_389ds.yaml +deleted file mode 100644 +index 1a2912ef1fca1576e64d6c8b20cf5fd8366e893a..0000000000000000000000000000000000000000 +--- a/ipatests/prci_definitions/nightly_latest_389ds.yaml ++++ /dev/null +@@ -1,658 +0,0 @@ +-topologies: +- build: &build +- name: build +- cpu: 2 +- memory: 3800 +- master_1repl: &master_1repl +- name: master_1repl +- cpu: 4 +- memory: 6450 +- master_1repl_1client: &master_1repl_1client +- name: master_1repl_1client +- cpu: 4 +- memory: 7400 +- ipaserver: &ipaserver +- name: ipaserver +- cpu: 2 +- memory: 2400 +- master_2repl_1client: &master_2repl_1client +- name: master_2repl_1client +- cpu: 5 +- memory: 10150 +- master_3repl_1client: &master_3repl_1client +- name: master_3repl_1client +- cpu: 6 +- memory: 12900 +- +-jobs: +- 389ds-fedora/build: +- requires: [] +- priority: 100 +- job: +- class: Build +- args: +- copr: '@389ds/389-ds-base-nightly' +- git_repo: '{git_repo}' +- git_refspec: '{git_refspec}' +- template: &ci-master-latest +- name: freeipa/ci-master-f36 +- version: 0.0.7 +- timeout: 1800 +- topology: *build +- +- 389ds-fedora/simple_replication: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_simple_replication.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- 389ds-fedora/test_commands: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_commands.py +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl_1client +- +- 389ds-fedora/test_server_del: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_server_del.py +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_2repl_1client +- +- 389ds-fedora/test_installation_TestInstallWithCA1: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_installation.py::TestInstallWithCA1 +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- 389ds-fedora/test_caless_TestServerInstall: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_caless.py::TestServerInstall +- template: *ci-master-latest +- timeout: 12000 +- topology: *master_1repl +- +- 389ds-fedora/test_caless_TestReplicaInstall: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_caless.py::TestReplicaInstall +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- 389ds-fedora/test_caless_TestClientInstall: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_caless.py::TestClientInstall +- template: *ci-master-latest +- timeout: 5400 +- # actually master_1client +- topology: *master_1repl_1client +- +- 389ds-fedora/test_caless_TestCertInstall: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_caless.py::TestCertInstall +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl +- +- 389ds-fedora/test_backup_and_restore_TestUserRootFilesOwnershipPermission: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_backup_and_restore.py::TestUserRootFilesOwnershipPermission +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- 389ds-fedora/test_backup_and_restore_TestBackupAndRestore: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestore +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- 389ds-fedora/test_backup_and_restore_TestBackupAndRestoreWithDNSSEC: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNSSEC +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- 389ds-fedora/test_backup_and_restore_TestBackupReinstallRestoreWithDNSSEC: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNSSEC +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- 389ds-fedora/test_backup_and_restore_TestBackupAndRestoreWithDNS: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNS +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- 389ds-fedora/test_backup_and_restore_TestBackupReinstallRestoreWithDNS: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNS +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- 389ds-fedora/test_backup_and_restore_TestBackupAndRestoreWithKRA: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithKRA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- 389ds-fedora/test_backup_and_restore_TestBackupReinstallRestoreWithKRA: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithKRA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- 389ds-fedora/test_backup_and_restore_TestBackupAndRestoreWithReplica: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithReplica +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_2repl_1client +- +- 389ds-fedora/test_backup_and_restore_TestBackupAndRestoreDMPassword: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreDMPassword +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- 389ds-fedora/test_backup_and_restore_TestReplicaInstallAfterRestore: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_backup_and_restore.py::TestReplicaInstallAfterRestore +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_2repl_1client +- +- 389ds-fedora/test_dnssec: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_dnssec.py +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_2repl_1client +- +- 389ds-fedora/test_replica_promotion_TestReplicaPromotionLevel1: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_replica_promotion.py::TestReplicaPromotionLevel1 +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- 389ds-fedora/test_replica_promotion_TestProhibitReplicaUninstallation: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_replica_promotion.py::TestProhibitReplicaUninstallation +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_2repl_1client +- +- 389ds-fedora/test_replica_promotion_TestHiddenReplicaPromotion: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaPromotion +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_2repl_1client +- +- 389ds-fedora/test_upgrade: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_upgrade.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- 389ds-fedora/test_topology_TestCASpecificRUVs: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_topology.py::TestCASpecificRUVs +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- 389ds-fedora/test_topology_TestTopologyOptions: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_topology.py::TestTopologyOptions +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- 389ds-fedora/test_replication_layouts_TestLineTopologyWithoutCA: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithoutCA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- 389ds-fedora/test_replication_layouts_TestLineTopologyWithCA: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCA +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- 389ds-fedora/test_replication_layouts_TestLineTopologyWithCAKRA: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCAKRA +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- 389ds-fedora/test_replication_layouts.py_TestStarTopologyWithoutCA: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithoutCA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- 389ds-fedora/test_replication_layouts_TestStarTopologyWithCA: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- 389ds-fedora/test_replication_layouts_TestStarTopologyWithCAKRA: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCAKRA +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- 389ds-fedora/test_replication_layouts_TestCompleteTopologyWithoutCA: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithoutCA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- 389ds-fedora/test_replication_layouts_TestCompleteTopologyWithCA: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- 389ds-fedora/test_replication_layouts_TestCompleteTopologyWithCAKRA: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCAKRA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- 389ds-fedora/test_client_uninstallation: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_uninstallation.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl_1client +- +- 389ds-fedora/customized_ds_config_install: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_customized_ds_config_install.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- 389ds-fedora/dns_locations: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_dns_locations.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_2repl_1client +- +- 389ds-fedora/external_ca_TestExternalCAdirsrvStop: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_external_ca.py::TestExternalCAdirsrvStop +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- 389ds-fedora/mask: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_installation.py::TestMaskInstall +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- 389ds-fedora/automember: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_automember.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- 389ds-fedora/test_fips: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_fips.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl_1client +- +- 389ds-fedora/test_pwpolicy: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_pwpolicy.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- 389ds-fedora/test_external_idp: +- requires: [389ds-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{389ds-fedora/build_url}' +- update_packages: True +- copr: '@389ds/389-ds-base-nightly' +- test_suite: test_integration/test_idp.py +- template: *ci-master-latest +- timeout: 5000 +- topology: *master_2repl_1client +diff --git a/ipatests/prci_definitions/nightly_latest_pki.yaml b/ipatests/prci_definitions/nightly_latest_pki.yaml +deleted file mode 100644 +index 217823679444e3fac7f894e4f937fb3457fc5c39..0000000000000000000000000000000000000000 +--- a/ipatests/prci_definitions/nightly_latest_pki.yaml ++++ /dev/null +@@ -1,1042 +0,0 @@ +-topologies: +- build: &build +- name: build +- cpu: 2 +- memory: 3800 +- master_1repl: &master_1repl +- name: master_1repl +- cpu: 4 +- memory: 6450 +- master_1repl_1client: &master_1repl_1client +- name: master_1repl_1client +- cpu: 4 +- memory: 7400 +- ipaserver: &ipaserver +- name: ipaserver +- cpu: 2 +- memory: 2400 +- master_2repl_1client: &master_2repl_1client +- name: master_2repl_1client +- cpu: 5 +- memory: 10150 +- master_3repl_1client: &master_3repl_1client +- name: master_3repl_1client +- cpu: 6 +- memory: 12900 +- ad_master: &ad_master +- name: ad_master +- cpu: 4 +- memory: 12000 +- +-jobs: +- pki-fedora/build: +- requires: [] +- priority: 100 +- job: +- class: Build +- args: +- copr: '@pki/master' +- git_repo: '{git_repo}' +- git_refspec: '{git_refspec}' +- template: &ci-master-latest +- name: freeipa/ci-master-f36 +- version: 0.0.7 +- timeout: 1800 +- topology: *build +- +- pki-fedora/simple_replication: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_simple_replication.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- pki-fedora/test_external_ca_TestExternalCA: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_external_ca.py::TestExternalCA +- template: *ci-master-latest +- timeout: 4800 +- topology: *master_1repl_1client +- +- pki-fedora/test_external_ca_TestSelfExternalSelf: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_external_ca.py::TestSelfExternalSelf test_integration/test_external_ca.py::TestExternalCAInstall +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- pki-fedora/external_ca_templates: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_external_ca.py::TestExternalCAProfileScenarios +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- pki-fedora/test_vault: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_vault.py +- template: *ci-master-latest +- timeout: 6300 +- topology: *master_1repl +- +- pki-fedora/test_forced_client_enrolment: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_forced_client_reenrollment.py +- template: *ci-master-latest +- timeout: 4800 +- topology: *master_1repl_1client +- +- pki-fedora/test_installation_TestInstallWithCA1: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_installation.py::TestInstallWithCA1 +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- pki-fedora/test_installation_TestInstallWithCA2: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_installation.py::TestInstallWithCA2 +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- pki-fedora/test_installation_TestInstallCA: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_installation.py::TestInstallCA +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_2repl_1client +- +- pki-fedora/test_installation_TestInstallWithCA_KRA1: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA1 +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- pki-fedora/test_installation_TestInstallWithCA_KRA2: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA2 +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- pki-fedora/test_installation_TestInstallWithCA_DNS1: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS1 +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- pki-fedora/test_installation_TestInstallWithCA_DNS2: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS2 +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- pki-fedora/test_installation_TestInstallWithCA_DNS3: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS3 +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- pki-fedora/test_installation_TestInstallWithCA_DNS4: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS4 +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- pki-fedora/test_installation_TestInstallWithCA_KRA_DNS1: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS1 +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- pki-fedora/test_installation_TestInstallWithCA_KRA_DNS2: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS2 +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- pki-fedora/test_installation_TestInstallMaster: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_installation.py::TestInstallMaster +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl +- +- pki-fedora/test_installation_TestInstallMasterKRA: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_installation.py::TestInstallMasterKRA +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl +- +- pki-fedora/test_installation_TestInstallMasterDNS: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_installation.py::TestInstallMasterDNS +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl +- +- pki-fedora/test_installation_TestInstallMasterDNSRepeatedly: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_installation.py::TestInstallMasterDNSRepeatedly +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl +- +- pki-fedora/test_installation_TestInstallMasterReservedIPasForwarder: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_installation.py::TestInstallMasterReservedIPasForwarder +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl +- +- pki-fedora/test_installation_TestInstallwithSHA384withRSA: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_installation.py::TestInstallwithSHA384withRSA +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- pki-fedora/test_caless_TestServerInstall: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_caless.py::TestServerInstall +- template: *ci-master-latest +- timeout: 12000 +- topology: *master_1repl +- +- pki-fedora/test_caless_TestReplicaInstall: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_caless.py::TestReplicaInstall +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- pki-fedora/test_caless_TestClientInstall: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_caless.py::TestClientInstall +- template: *ci-master-latest +- timeout: 5400 +- # actually master_1client +- topology: *master_1repl_1client +- +- pki-fedora/test_caless_TestIPACommands: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_caless.py::TestIPACommands +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl +- +- pki-fedora/test_caless_TestCertInstall: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_caless.py::TestCertInstall +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl +- +- pki-fedora/test_caless_TestPKINIT: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_caless.py::TestPKINIT +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl +- +- pki-fedora/test_caless_TestServerReplicaCALessToCAFull: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_caless.py::TestServerReplicaCALessToCAFull +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl +- +- pki-fedora/test_caless_TestReplicaCALessToCAFull: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_caless.py::TestReplicaCALessToCAFull +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl +- +- pki-fedora/test_caless_TestServerCALessToExternalCA: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_caless.py::TestServerCALessToExternalCA +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl +- +- pki-fedora/test_backup_and_restore_TestBackupAndRestoreWithKRA: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithKRA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- pki-fedora/test_backup_and_restore_TestBackupReinstallRestoreWithKRA: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithKRA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- pki-fedora/test_backup_and_restore_TestBackupAndRestoreWithReplica: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithReplica +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_2repl_1client +- +- pki-fedora/test_backup_and_restore_TestReplicaInstallAfterRestore: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_backup_and_restore.py::TestReplicaInstallAfterRestore +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_2repl_1client +- +- pki-fedora/test_replica_promotion_TestReplicaPromotionLevel1: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_replica_promotion.py::TestReplicaPromotionLevel1 +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- pki-fedora/test_replica_promotion_TestRenewalMaster: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_replica_promotion.py::TestRenewalMaster +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- pki-fedora/test_replica_promotion_TestSubCAkeyReplication: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_replica_promotion.py::TestSubCAkeyReplication +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- pki-fedora/test_replica_promotion_TestReplicaInstallCustodia: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallCustodia +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_2repl_1client +- +- pki-fedora/test_upgrade: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_upgrade.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- pki-fedora/test_topology_TestCASpecificRUVs: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_topology.py::TestCASpecificRUVs +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- pki-fedora/test_replication_layouts_TestLineTopologyWithoutCA: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithoutCA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- pki-fedora/test_replication_layouts_TestLineTopologyWithCA: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCA +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- pki-fedora/test_replication_layouts_TestLineTopologyWithCAKRA: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCAKRA +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- pki-fedora/test_replication_layouts.py_TestStarTopologyWithoutCA: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithoutCA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- pki-fedora/test_replication_layouts_TestStarTopologyWithCA: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- pki-fedora/test_replication_layouts_TestStarTopologyWithCAKRA: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCAKRA +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- pki-fedora/test_replication_layouts_TestCompleteTopologyWithoutCA: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithoutCA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- pki-fedora/test_replication_layouts_TestCompleteTopologyWithCA: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- pki-fedora/test_replication_layouts_TestCompleteTopologyWithCAKRA: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCAKRA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- pki-fedora/test_client_uninstallation: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_uninstallation.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl_1client +- +- pki-fedora/test_webui_cert: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_webui/test_cert.py +- template: *ci-master-latest +- timeout: 2400 +- topology: *ipaserver +- +- pki-fedora/test_webui_identity: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: >- +- test_webui/test_automember.py +- test_webui/test_idviews.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *ipaserver +- +- pki-fedora/dns_locations: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_dns_locations.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_2repl_1client +- +- pki-fedora/external_ca_TestExternalCAdirsrvStop: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_external_ca.py::TestExternalCAdirsrvStop +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- pki-fedora/external_ca_TestExternalCAInvalidCert: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_external_ca.py::TestExternalCAInvalidCert +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- pki-fedora/external_ca_TestMultipleExternalCA: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_external_ca.py::TestMultipleExternalCA +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- pki-fedora/test_ipahealthcheck: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheck +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl_1client +- +- pki-fedora/test_ipahealthcheck_nodns_extca_file: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithoutDNS test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithExternalCA test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFileCheck +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl +- +- pki-fedora/test_pkinit_manage: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_pkinit_manage.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- pki-fedora/test_crlgen_manage: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_crlgen_manage.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- pki-fedora/test_ca_custom_sdn: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_ca_custom_sdn.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- pki-fedora/test_fips: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_fips.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl_1client +- +- pki-fedora/test_acme: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_acme.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl_1client +- +- pki-fedora/test_cert_fix: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_ipa_cert_fix.py +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl +- +- pki-fedora/test_external_idp: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_idp.py +- template: *ci-master-latest +- timeout: 5000 +- topology: *master_2repl_1client +- +- pki-fedora/test_random_serial_numbers_TestInstallWithCA_DNS1_RSN: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_DNS1_RSN +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- pki-fedora/test_random_serial_numbers_TestInstallWithCA_KRA1_RSN: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_KRA1_RSN +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- pki-fedora/test_random_serial_numbers_test_commands_RSN: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_random_serial_numbers.py::TestIPACommand_RSN::test_certificate_out_write_to_file +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl_1client +- +- pki-fedora/test_caless_TestServerCALessToExternalCA_RSN: +- requires: [pki-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{pki-fedora/build_url}' +- update_packages: True +- copr: '@pki/master' +- test_suite: test_integration/test_random_serial_numbers.py::TestServerCALessToExternalCA_RSN +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl +diff --git a/ipatests/prci_definitions/nightly_latest_testing.yaml b/ipatests/prci_definitions/nightly_latest_testing.yaml +deleted file mode 100644 +index 02d311d27598503c035ba7ff99e5bf311075419a..0000000000000000000000000000000000000000 +--- a/ipatests/prci_definitions/nightly_latest_testing.yaml ++++ /dev/null +@@ -1,2114 +0,0 @@ +-topologies: +- build: &build +- name: build +- cpu: 2 +- memory: 3800 +- master_3client: &master_3client +- name: master_3client +- cpu: 5 +- memory: 10150 +- master_1repl: &master_1repl +- name: master_1repl +- cpu: 4 +- memory: 6450 +- master_1repl_1client: &master_1repl_1client +- name: master_1repl_1client +- cpu: 4 +- memory: 7400 +- ipaserver: &ipaserver +- name: ipaserver +- cpu: 2 +- memory: 2400 +- master_2repl_1client: &master_2repl_1client +- name: master_2repl_1client +- cpu: 5 +- memory: 10150 +- master_3repl_1client: &master_3repl_1client +- name: master_3repl_1client +- cpu: 6 +- memory: 12900 +- ad_master_2client: &ad_master_2client +- name: ad_master_2client +- cpu: 4 +- memory: 12000 +- ad_master: &ad_master +- name: ad_master +- cpu: 4 +- memory: 12000 +- adroot_adchild_adtree_master_1client: &adroot_adchild_adtree_master_1client +- name: adroot_adchild_adtree_master_1client +- cpu: 8 +- memory: 14500 +- +-jobs: +- testing-fedora/build: +- requires: [] +- priority: 100 +- job: +- class: Build +- args: +- enable_testing_repo: True +- git_repo: '{git_repo}' +- git_refspec: '{git_refspec}' +- template: &ci-master-latest +- name: freeipa/ci-master-f36 +- version: 0.0.7 +- timeout: 1800 +- topology: *build +- +- testing-fedora/simple_replication: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_simple_replication.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_external_ca_TestExternalCA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_external_ca.py::TestExternalCA test_integration/test_external_ca.py::TestExternalCAConstraints +- template: *ci-master-latest +- timeout: 4800 +- topology: *master_1repl_1client +- +- testing-fedora/test_external_ca_TestSelfExternalSelf: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_external_ca.py::TestSelfExternalSelf test_integration/test_external_ca.py::TestExternalCAInstall +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/external_ca_templates: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_external_ca.py::TestExternalCAProfileScenarios +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_topologies: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_topologies.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_sudo: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_sudo.py +- template: *ci-master-latest +- timeout: 4800 +- topology: *master_1repl_1client +- +- testing-fedora/test_commands: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_commands.py +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl_1client +- +- testing-fedora/test_kerberos_flags: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_kerberos_flags.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl_1client +- +- testing-fedora/test_http_kdc_proxy: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunADTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_http_kdc_proxy.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *ad_master_2client +- +- testing-fedora/test_fips: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_fips.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl_1client +- +- testing-fedora/test_forced_client_enrolment: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_forced_client_reenrollment.py +- template: *ci-master-latest +- timeout: 4800 +- topology: *master_1repl_1client +- +- testing-fedora/test_advise: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_advise.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl_1client +- +- testing-fedora/test_testconfig: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_testconfig.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_service_permissions: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_service_permissions.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_netgroup: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_netgroup.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_vault: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_vault.py +- template: *ci-master-latest +- timeout: 6300 +- topology: *master_1repl +- +- testing-fedora/test_authconfig: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_authselect.py +- template: *ci-master-latest +- timeout: 4800 +- topology: *master_1repl_1client +- +- testing-fedora/test_smb: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunADTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_smb.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *ad_master_2client +- +- testing-fedora/test_server_del: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_server_del.py +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_2repl_1client +- +- testing-fedora/test_installation_TestInstallWithCA1: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallWithCA1 +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_installation_TestInstallWithCA2: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallWithCA2 +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_installation_TestInstallCA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallCA +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_2repl_1client +- +- testing-fedora/test_installation_TestInstallWithCA_KRA1: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA1 +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_installation_TestInstallWithCA_KRA2: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA2 +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_installation_TestInstallWithCA_DNS1: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS1 +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_installation_TestInstallWithCA_DNS2: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS2 +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_installation_TestInstallWithCA_DNS3: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS3 +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_installation_TestInstallWithCA_DNS4: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS4 +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_installation_TestInstallWithCA_KRA_DNS1: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS1 +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_installation_TestInstallWithCA_KRA_DNS2: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS2 +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_installation_TestInstallMaster: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallMaster +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl +- +- testing-fedora/test_installation_TestInstallMasterKRA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallMasterKRA +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl +- +- testing-fedora/test_installation_TestInstallMasterDNS: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallMasterDNS +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl +- +- testing-fedora/test_installation_TestInstallMasterDNSRepeatedly: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallMasterDNSRepeatedly +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl +- +- testing-fedora/test_installation_TestInstallMasterReservedIPasForwarder: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallMasterReservedIPasForwarder +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl +- +- testing-fedora/test_installation_TestInstallMasterReplica: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallMasterReplica +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl +- +- testing-fedora/test_installation_TestInstallReplicaAgainstSpecificServer: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallReplicaAgainstSpecificServer +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_2repl_1client +- +- testing-fedora/test_installation_TestADTrustInstall: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestADTrustInstall +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_2repl_1client +- +- testing-fedora/test_installation_TestADTrustInstallWithDNS_KRA_ADTrust: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestADTrustInstallWithDNS_KRA_ADTrust +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_2repl_1client +- +- testing-fedora/test_installation_TestKRAinstallAfterCertRenew: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestKRAinstallAfterCertRenew +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl +- +- testing-fedora/test_installation_TestInstallWithoutSudo: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallWithoutSudo +- template: *ci-master-latest +- timeout: 4800 +- topology: *master_1repl_1client +- +- testing-fedora/test_installation_TestInstallWithoutNamed: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallWithoutNamed +- template: *ci-master-latest +- timeout: 4800 +- topology: *master_1repl +- +- testing-fedora/test_installation_TestInstallwithSHA384withRSA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallwithSHA384withRSA +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_idviews: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunADTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_idviews.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *ad_master_2client +- +- testing-fedora/test_caless_TestServerInstall: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_caless.py::TestServerInstall +- template: *ci-master-latest +- timeout: 12000 +- topology: *master_1repl +- +- testing-fedora/test_caless_TestReplicaInstall: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_caless.py::TestReplicaInstall +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_caless_TestClientInstall: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_caless.py::TestClientInstall +- template: *ci-master-latest +- timeout: 5400 +- # actually master_1client +- topology: *master_1repl_1client +- +- testing-fedora/test_caless_TestIPACommands: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_caless.py::TestIPACommands +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl +- +- testing-fedora/test_caless_TestCertInstall: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_caless.py::TestCertInstall +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl +- +- testing-fedora/test_caless_TestPKINIT: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_caless.py::TestPKINIT +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl +- +- testing-fedora/test_caless_TestServerReplicaCALessToCAFull: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_caless.py::TestServerReplicaCALessToCAFull +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl +- +- testing-fedora/test_caless_TestReplicaCALessToCAFull: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_caless.py::TestReplicaCALessToCAFull +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl +- +- testing-fedora/test_caless_TestServerCALessToExternalCA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_caless.py::TestServerCALessToExternalCA +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl +- +- testing-fedora/test_backup_and_restore_TestUserRootFilesOwnershipPermission: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestUserRootFilesOwnershipPermission +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_backup_and_restore_TestBackupAndRestore: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestore +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_backup_and_restore_TestBackupAndRestoreWithDNSSEC: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNSSEC +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_backup_and_restore_TestBackupReinstallRestoreWithDNSSEC: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNSSEC +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_backup_and_restore_TestBackupAndRestoreWithDNS: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNS +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_backup_and_restore_TestBackupReinstallRestoreWithDNS: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNS +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_backup_and_restore_TestBackupAndRestoreWithKRA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithKRA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_backup_and_restore_TestBackupReinstallRestoreWithKRA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithKRA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_backup_and_restore_TestBackupAndRestoreWithReplica: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithReplica +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_2repl_1client +- +- testing-fedora/test_backup_and_restore_TestBackupAndRestoreDMPassword: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreDMPassword +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_backup_and_restore_TestReplicaInstallAfterRestore: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestReplicaInstallAfterRestore +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_2repl_1client +- +- testing-fedora/test_backup_and_restore_TestBackupRoles: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestBackupRoles +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_dnssec: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_dnssec.py +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_2repl_1client +- +- testing-fedora/test_replica_promotion_TestReplicaPromotionLevel1: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_replica_promotion.py::TestReplicaPromotionLevel1 +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_replica_promotion_TestUnprivilegedUserPermissions: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_replica_promotion.py::TestUnprivilegedUserPermissions +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_replica_promotion_TestProhibitReplicaUninstallation: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_replica_promotion.py::TestProhibitReplicaUninstallation +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_2repl_1client +- +- testing-fedora/test_replica_promotion_TestWrongClientDomain: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_replica_promotion.py::TestWrongClientDomain +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_replica_promotion_TestRenewalMaster: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_replica_promotion.py::TestRenewalMaster +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_replica_promotion_TestReplicaInstallWithExistingEntry: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallWithExistingEntry +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_replica_promotion_TestSubCAkeyReplication: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_replica_promotion.py::TestSubCAkeyReplication +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_replica_promotion_TestReplicaInstallCustodia: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallCustodia +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_2repl_1client +- +- testing-fedora/test_replica_promotion_TestReplicaInForwardZone: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_replica_promotion.py::TestReplicaInForwardZone +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_replica_promotion_TestHiddenReplicaPromotion: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaPromotion +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_2repl_1client +- +- testing-fedora/test_replica_promotion_TestHiddenReplicaKRA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaKRA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_2repl_1client +- +- testing-fedora/test_upgrade: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_upgrade.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_topology_TestCASpecificRUVs: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_topology.py::TestCASpecificRUVs +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- testing-fedora/test_topology_TestTopologyOptions: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_topology.py::TestTopologyOptions +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- testing-fedora/test_replication_layouts_TestLineTopologyWithoutCA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithoutCA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- testing-fedora/test_replication_layouts_TestLineTopologyWithCA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCA +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_replication_layouts_TestLineTopologyWithCAKRA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCAKRA +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_replication_layouts.py_TestStarTopologyWithoutCA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithoutCA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- testing-fedora/test_replication_layouts_TestStarTopologyWithCA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- testing-fedora/test_replication_layouts_TestStarTopologyWithCAKRA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCAKRA +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_replication_layouts_TestCompleteTopologyWithoutCA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithoutCA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- testing-fedora/test_replication_layouts_TestCompleteTopologyWithCA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- testing-fedora/test_replication_layouts_TestCompleteTopologyWithCAKRA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCAKRA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- testing-fedora/test_client_uninstallation: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_uninstallation.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl_1client +- +- testing-fedora/test_installation_client: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation_client.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_3client +- +- testing-fedora/test_user_permissions: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_user_permissions.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl_1client +- +- testing-fedora/test_webui_cert: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_webui/test_cert.py +- template: *ci-master-latest +- timeout: 2400 +- topology: *ipaserver +- +- testing-fedora/test_webui_general: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: >- +- test_webui/test_loginscreen.py +- test_webui/test_misc_cases.py +- test_webui/test_navigation.py +- test_webui/test_translation.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *ipaserver +- +- testing-fedora/test_webui_host: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_webui/test_host.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *ipaserver +- +- testing-fedora/test_webui_host_net_groups: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: >- +- test_webui/test_hostgroup.py +- test_webui/test_netgroup.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *ipaserver +- +- testing-fedora/test_webui_identity: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: >- +- test_webui/test_automember.py +- test_webui/test_idviews.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *ipaserver +- +- testing-fedora/test_webui_network: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: >- +- test_webui/test_automount.py +- test_webui/test_dns.py +- test_webui/test_vault.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *ipaserver +- +- testing-fedora/test_webui_policy: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: >- +- test_webui/test_hbac.py +- test_webui/test_krbtpolicy.py +- test_webui/test_pwpolicy.py +- test_webui/test_selinuxusermap.py +- test_webui/test_sudo.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *ipaserver +- +- testing-fedora/test_webui_rbac: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: >- +- test_webui/test_delegation.py +- test_webui/test_rbac.py +- test_webui/test_selfservice.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *ipaserver +- +- testing-fedora/test_webui_server: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: >- +- test_webui/test_config.py +- test_webui/test_range.py +- test_webui/test_realmdomains.py +- test_webui/test_topology.py +- test_webui/test_trust.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *ipaserver +- +- testing-fedora/test_webui_service: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_webui/test_service.py +- template: *ci-master-latest +- timeout: 2400 +- topology: *ipaserver +- +- testing-fedora/test_webui_users: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: >- +- test_webui/test_group.py +- test_webui/test_user.py +- template: *ci-master-latest +- timeout: 4800 +- topology: *ipaserver +- +- testing-fedora/test_webui_subid: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_webui/test_subid.py +- template: *ci-master-latest +- timeout: 2400 +- topology: *ipaserver +- +- testing-fedora/customized_ds_config_install: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_customized_ds_config_install.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/dns_locations: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_dns_locations.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_2repl_1client +- +- testing-fedora/external_ca_TestExternalCAdirsrvStop: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_external_ca.py::TestExternalCAdirsrvStop +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/external_ca_TestExternalCAInvalidCert: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_external_ca.py::TestExternalCAInvalidCert test_integration/test_external_ca.py::TestExternalCAInvalidIntermediate +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/external_ca_TestMultipleExternalCA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_external_ca.py::TestMultipleExternalCA +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_ipahealthcheck: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheck +- template: *ci-master-latest +- topology: *master_1repl_1client +- timeout: 5400 +- +- testing-fedora/test_ipahealthcheck_nodns_extca_file: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithoutDNS test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithExternalCA test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFileCheck +- template: *ci-master-latest +- topology: *master_1repl +- timeout: 5400 +- +- testing-fedora/test_ipahealthcheck_cli_fsspace: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCLI test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFilesystemSpace +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_ipahealthcheck_adtrust: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunADTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithADtrust +- template: *ci-master-latest +- timeout: 4800 +- topology: *adroot_adchild_adtree_master_1client +- +- testing-fedora/test_ntp_options: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_ntp_options.py::TestNTPoptions +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl_1client +- +- testing-fedora/test_otp: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_otp.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_pkinit_manage: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_pkinit_manage.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_pki_config_override: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_pki_config_override.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +-# testing-fedora/nfs: +-# requires: [testing-fedora/build] +-# priority: 50 +-# job: +-# class: RunPytest +-# args: +-# build_url: '{testing-fedora/build_url}' +-# update_packages: True +-# enable_testing_repo: True +-# test_suite: test_integration/test_nfs.py::TestNFS +-# template: *ci-master-latest +-# timeout: 9000 +-# topology: *master_3client +- +- testing-fedora/nfs_nsswitch_restore: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_nfs.py::TestIpaClientAutomountFileRestore +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_3client +- +- testing-fedora/mask: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestMaskInstall +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/hostname_validator: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestHostnameValidator +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/automember: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_automember.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_crlgen_manage: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_crlgen_manage.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_integration_TestIPANotConfigured: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_cli_ipa_not_configured.py::TestIPANotConfigured +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl +- +- testing-fedora/test_sssd: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunADTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_sssd.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *adroot_adchild_adtree_master_1client +- +- testing-fedora/test_ca_custom_sdn: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_ca_custom_sdn.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_membermanager: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_membermanager.py +- template: *ci-master-latest +- timeout: 1800 +- topology: *master_1repl +- +- testing-fedora/krbtpolicy: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_krbtpolicy.py +- template: *ci-master-latest +- timeout: 4800 +- topology: *master_1repl +- +- testing-fedora/test_winsyncmigrate: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunADTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_winsyncmigrate.py +- template: *ci-master-latest +- timeout: 4800 +- topology: *ad_master +- +- testing-fedora/test_trust: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunADTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_trust.py +- template: *ci-master-latest +- timeout: 10000 +- topology: *adroot_adchild_adtree_master_1client +- +- testing-fedora/test_backup_and_restore_TestBackupAndRestoreTrust: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreTrust +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_adtrust_install: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_adtrust_install.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_cert: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_cert.py +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl_1client +- +- testing-fedora/test_epn: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_epn.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3client +- +- testing-fedora/test_acme: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_acme.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl_1client +- +- testing-fedora/test_dns: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_dns.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_pwpolicy: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_pwpolicy.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_cert_fix: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_ipa_cert_fix.py +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl +- +- testing-fedora/test_subids: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_subids.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_custom_plugins: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_custom_plugins.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_external_idp: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_idp.py +- template: *ci-master-latest +- timeout: 5000 +- topology: *master_2repl_1client +- +- testing-fedora/test_random_serial_numbers_TestInstallWithCA_DNS1_RSN: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_DNS1_RSN +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_random_serial_numbers_TestInstallWithCA_KRA1_RSN: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_KRA1_RSN +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_random_serial_numbers_test_commands_RSN: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_random_serial_numbers.py::TestIPACommand_RSN::test_certificate_out_write_to_file +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl_1client +- +- testing-fedora/test_caless_TestServerCALessToExternalCA_RSN: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- enable_testing_repo: True +- test_suite: test_integration/test_random_serial_numbers.py::TestServerCALessToExternalCA_RSN +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl +diff --git a/ipatests/prci_definitions/nightly_latest_testing_selinux.yaml b/ipatests/prci_definitions/nightly_latest_testing_selinux.yaml +deleted file mode 100644 +index f44b92c6cdd5971f22e808bdd5f10d16409b6452..0000000000000000000000000000000000000000 +--- a/ipatests/prci_definitions/nightly_latest_testing_selinux.yaml ++++ /dev/null +@@ -1,2259 +0,0 @@ +-topologies: +- build: &build +- name: build +- cpu: 2 +- memory: 3800 +- master_3client: &master_3client +- name: master_3client +- cpu: 5 +- memory: 10150 +- master_1repl: &master_1repl +- name: master_1repl +- cpu: 4 +- memory: 6450 +- master_1repl_1client: &master_1repl_1client +- name: master_1repl_1client +- cpu: 4 +- memory: 7400 +- ipaserver: &ipaserver +- name: ipaserver +- cpu: 2 +- memory: 2400 +- master_2repl_1client: &master_2repl_1client +- name: master_2repl_1client +- cpu: 5 +- memory: 10150 +- master_3repl_1client: &master_3repl_1client +- name: master_3repl_1client +- cpu: 6 +- memory: 12900 +- ad_master_2client: &ad_master_2client +- name: ad_master_2client +- cpu: 4 +- memory: 12000 +- ad_master: &ad_master +- name: ad_master +- cpu: 4 +- memory: 12000 +- adroot_adchild_adtree_master_1client: &adroot_adchild_adtree_master_1client +- name: adroot_adchild_adtree_master_1client +- cpu: 8 +- memory: 14500 +- +-jobs: +- testing-fedora/build: +- requires: [] +- priority: 100 +- job: +- class: Build +- args: +- enable_testing_repo: True +- git_repo: '{git_repo}' +- git_refspec: '{git_refspec}' +- template: &ci-master-latest +- name: freeipa/ci-master-f36 +- version: 0.0.7 +- timeout: 1800 +- topology: *build +- +- testing-fedora/simple_replication: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_simple_replication.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_external_ca_TestExternalCA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_external_ca.py::TestExternalCA test_integration/test_external_ca.py::TestExternalCAConstraints +- template: *ci-master-latest +- timeout: 4800 +- topology: *master_1repl_1client +- +- testing-fedora/test_external_ca_TestSelfExternalSelf: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_external_ca.py::TestSelfExternalSelf test_integration/test_external_ca.py::TestExternalCAInstall +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/external_ca_templates: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_external_ca.py::TestExternalCAProfileScenarios +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_topologies: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_topologies.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_sudo: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_sudo.py +- template: *ci-master-latest +- timeout: 4800 +- topology: *master_1repl_1client +- +- testing-fedora/test_commands: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_commands.py +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl_1client +- +- testing-fedora/test_kerberos_flags: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_kerberos_flags.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl_1client +- +- testing-fedora/test_http_kdc_proxy: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunADTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_http_kdc_proxy.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *ad_master_2client +- +- testing-fedora/test_fips: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_fips.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl_1client +- +- testing-fedora/test_forced_client_enrolment: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_forced_client_reenrollment.py +- template: *ci-master-latest +- timeout: 4800 +- topology: *master_1repl_1client +- +- testing-fedora/test_advise: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_advise.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl_1client +- +- testing-fedora/test_testconfig: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_testconfig.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_service_permissions: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_service_permissions.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_netgroup: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_netgroup.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_vault: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_vault.py +- template: *ci-master-latest +- timeout: 6300 +- topology: *master_1repl +- +- testing-fedora/test_authconfig: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_authselect.py +- template: *ci-master-latest +- timeout: 4800 +- topology: *master_1repl_1client +- +- testing-fedora/test_smb: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunADTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_smb.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *ad_master_2client +- +- testing-fedora/test_server_del: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_server_del.py +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_2repl_1client +- +- testing-fedora/test_installation_TestInstallWithCA1: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallWithCA1 +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_installation_TestInstallWithCA2: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallWithCA2 +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_installation_TestInstallCA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallCA +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_2repl_1client +- +- testing-fedora/test_installation_TestInstallWithCA_KRA1: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA1 +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_installation_TestInstallWithCA_KRA2: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA2 +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_installation_TestInstallWithCA_DNS1: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS1 +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_installation_TestInstallWithCA_DNS2: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS2 +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_installation_TestInstallWithCA_DNS3: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS3 +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_installation_TestInstallWithCA_DNS4: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS4 +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_installation_TestInstallWithCA_KRA_DNS1: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS1 +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_installation_TestInstallWithCA_KRA_DNS2: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS2 +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_installation_TestInstallMaster: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallMaster +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl +- +- testing-fedora/test_installation_TestInstallMasterKRA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallMasterKRA +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl +- +- testing-fedora/test_installation_TestInstallMasterDNS: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallMasterDNS +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl +- +- testing-fedora/test_installation_TestInstallMasterDNSRepeatedly: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallMasterDNSRepeatedly +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl +- +- testing-fedora/test_installation_TestInstallMasterReservedIPasForwarder: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallMasterReservedIPasForwarder +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl +- +- testing-fedora/test_installation_TestInstallMasterReplica: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallMasterReplica +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl +- +- testing-fedora/test_installation_TestInstallReplicaAgainstSpecificServer: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallReplicaAgainstSpecificServer +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_2repl_1client +- +- testing-fedora/test_installation_TestADTrustInstall: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestADTrustInstall +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_2repl_1client +- +- testing-fedora/test_installation_TestADTrustInstallWithDNS_KRA_ADTrust: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestADTrustInstallWithDNS_KRA_ADTrust +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_2repl_1client +- +- testing-fedora/test_installation_TestKRAinstallAfterCertRenew: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestKRAinstallAfterCertRenew +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl +- +- testing-fedora/test_installation_TestInstallWithoutSudo: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallWithoutSudo +- template: *ci-master-latest +- timeout: 4800 +- topology: *master_1repl_1client +- +- testing-fedora/test_installation_TestInstallWithoutNamed: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallWithoutNamed +- template: *ci-master-latest +- timeout: 4800 +- topology: *master_1repl +- +- testing-fedora/test_installation_TestInstallwithSHA384withRSA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestInstallwithSHA384withRSA +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_idviews: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunADTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_idviews.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *ad_master_2client +- +- testing-fedora/test_caless_TestServerInstall: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_caless.py::TestServerInstall +- template: *ci-master-latest +- timeout: 12000 +- topology: *master_1repl +- +- testing-fedora/test_caless_TestReplicaInstall: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_caless.py::TestReplicaInstall +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_caless_TestClientInstall: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_caless.py::TestClientInstall +- template: *ci-master-latest +- timeout: 5400 +- # actually master_1client +- topology: *master_1repl_1client +- +- testing-fedora/test_caless_TestIPACommands: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_caless.py::TestIPACommands +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl +- +- testing-fedora/test_caless_TestCertInstall: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_caless.py::TestCertInstall +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl +- +- testing-fedora/test_caless_TestPKINIT: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_caless.py::TestPKINIT +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl +- +- testing-fedora/test_caless_TestServerReplicaCALessToCAFull: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_caless.py::TestServerReplicaCALessToCAFull +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl +- +- testing-fedora/test_caless_TestReplicaCALessToCAFull: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_caless.py::TestReplicaCALessToCAFull +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl +- +- testing-fedora/test_caless_TestServerCALessToExternalCA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_caless.py::TestServerCALessToExternalCA +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl +- +- testing-fedora/test_backup_and_restore_TestUserRootFilesOwnershipPermission: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestUserRootFilesOwnershipPermission +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_backup_and_restore_TestBackupAndRestore: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestore +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_backup_and_restore_TestBackupAndRestoreWithDNSSEC: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNSSEC +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_backup_and_restore_TestBackupReinstallRestoreWithDNSSEC: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNSSEC +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_backup_and_restore_TestBackupAndRestoreWithDNS: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNS +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_backup_and_restore_TestBackupReinstallRestoreWithDNS: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNS +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_backup_and_restore_TestBackupAndRestoreWithKRA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithKRA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_backup_and_restore_TestBackupReinstallRestoreWithKRA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithKRA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_backup_and_restore_TestBackupAndRestoreWithReplica: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithReplica +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_2repl_1client +- +- testing-fedora/test_backup_and_restore_TestBackupAndRestoreDMPassword: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreDMPassword +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_backup_and_restore_TestReplicaInstallAfterRestore: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestReplicaInstallAfterRestore +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_2repl_1client +- +- testing-fedora/test_backup_and_restore_TestBackupRoles: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestBackupRoles +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_dnssec: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_dnssec.py +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_2repl_1client +- +- testing-fedora/test_replica_promotion_TestReplicaPromotionLevel1: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_replica_promotion.py::TestReplicaPromotionLevel1 +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_replica_promotion_TestUnprivilegedUserPermissions: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_replica_promotion.py::TestUnprivilegedUserPermissions +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_replica_promotion_TestProhibitReplicaUninstallation: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_replica_promotion.py::TestProhibitReplicaUninstallation +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_2repl_1client +- +- testing-fedora/test_replica_promotion_TestWrongClientDomain: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_replica_promotion.py::TestWrongClientDomain +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_replica_promotion_TestRenewalMaster: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_replica_promotion.py::TestRenewalMaster +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_replica_promotion_TestReplicaInstallWithExistingEntry: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallWithExistingEntry +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_replica_promotion_TestSubCAkeyReplication: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_replica_promotion.py::TestSubCAkeyReplication +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_replica_promotion_TestReplicaInstallCustodia: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallCustodia +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_2repl_1client +- +- testing-fedora/test_replica_promotion_TestReplicaInForwardZone: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_replica_promotion.py::TestReplicaInForwardZone +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_replica_promotion_TestHiddenReplicaPromotion: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaPromotion +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_2repl_1client +- +- testing-fedora/test_replica_promotion_TestHiddenReplicaKRA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaKRA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_2repl_1client +- +- testing-fedora/test_upgrade: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_upgrade.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_topology_TestCASpecificRUVs: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_topology.py::TestCASpecificRUVs +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- testing-fedora/test_topology_TestTopologyOptions: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_topology.py::TestTopologyOptions +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- testing-fedora/test_replication_layouts_TestLineTopologyWithoutCA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithoutCA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- testing-fedora/test_replication_layouts_TestLineTopologyWithCA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCA +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_replication_layouts_TestLineTopologyWithCAKRA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCAKRA +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_replication_layouts.py_TestStarTopologyWithoutCA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithoutCA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- testing-fedora/test_replication_layouts_TestStarTopologyWithCA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- testing-fedora/test_replication_layouts_TestStarTopologyWithCAKRA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCAKRA +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_replication_layouts_TestCompleteTopologyWithoutCA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithoutCA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- testing-fedora/test_replication_layouts_TestCompleteTopologyWithCA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- testing-fedora/test_replication_layouts_TestCompleteTopologyWithCAKRA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCAKRA +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3repl_1client +- +- testing-fedora/test_client_uninstallation: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_uninstallation.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl_1client +- +- testing-fedora/test_installation_client: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation_client.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_3client +- +- testing-fedora/test_user_permissions: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_user_permissions.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl_1client +- +- testing-fedora/test_webui_cert: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_webui/test_cert.py +- template: *ci-master-latest +- timeout: 2400 +- topology: *ipaserver +- +- testing-fedora/test_webui_general: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: >- +- test_webui/test_loginscreen.py +- test_webui/test_misc_cases.py +- test_webui/test_navigation.py +- test_webui/test_translation.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *ipaserver +- +- testing-fedora/test_webui_host: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_webui/test_host.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *ipaserver +- +- testing-fedora/test_webui_host_net_groups: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: >- +- test_webui/test_hostgroup.py +- test_webui/test_netgroup.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *ipaserver +- +- testing-fedora/test_webui_identity: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: >- +- test_webui/test_automember.py +- test_webui/test_idviews.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *ipaserver +- +- testing-fedora/test_webui_network: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: >- +- test_webui/test_automount.py +- test_webui/test_dns.py +- test_webui/test_vault.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *ipaserver +- +- testing-fedora/test_webui_policy: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: >- +- test_webui/test_hbac.py +- test_webui/test_krbtpolicy.py +- test_webui/test_pwpolicy.py +- test_webui/test_selinuxusermap.py +- test_webui/test_sudo.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *ipaserver +- +- testing-fedora/test_webui_rbac: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: >- +- test_webui/test_delegation.py +- test_webui/test_rbac.py +- test_webui/test_selfservice.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *ipaserver +- +- testing-fedora/test_webui_server: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: >- +- test_webui/test_config.py +- test_webui/test_range.py +- test_webui/test_realmdomains.py +- test_webui/test_topology.py +- test_webui/test_trust.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *ipaserver +- +- testing-fedora/test_webui_service: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_webui/test_service.py +- template: *ci-master-latest +- timeout: 2400 +- topology: *ipaserver +- +- testing-fedora/test_webui_users: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: >- +- test_webui/test_group.py +- test_webui/test_user.py +- template: *ci-master-latest +- timeout: 4800 +- topology: *ipaserver +- +- testing-fedora/test_webui_subid: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_webui/test_subid.py +- template: *ci-master-latest +- timeout: 2400 +- topology: *ipaserver +- +- testing-fedora/customized_ds_config_install: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_customized_ds_config_install.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/dns_locations: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_dns_locations.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_2repl_1client +- +- testing-fedora/external_ca_TestExternalCAdirsrvStop: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_external_ca.py::TestExternalCAdirsrvStop +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/external_ca_TestExternalCAInvalidCert: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_external_ca.py::TestExternalCAInvalidCert test_integration/test_external_ca.py::TestExternalCAInvalidIntermediate +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/external_ca_TestMultipleExternalCA: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_external_ca.py::TestMultipleExternalCA +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_ipahealthcheck: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheck +- template: *ci-master-latest +- topology: *master_1repl_1client +- timeout: 5400 +- +- testing-fedora/test_ipahealthcheck_nodns_extca_file: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithoutDNS test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithExternalCA test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFileCheck +- template: *ci-master-latest +- topology: *master_1repl +- timeout: 5400 +- +- testing-fedora/test_ipahealthcheck_cli_fsspace: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCLI test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFilesystemSpace +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_ipahealthcheck_adtrust: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunADTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithADtrust +- template: *ci-master-latest +- timeout: 4800 +- topology: *adroot_adchild_adtree_master_1client +- +- testing-fedora/test_ntp_options: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_ntp_options.py::TestNTPoptions +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl_1client +- +- testing-fedora/test_otp: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_otp.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_pkinit_manage: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_pkinit_manage.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_pki_config_override: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_pki_config_override.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +-# testing-fedora/nfs: +-# requires: [testing-fedora/build] +-# priority: 50 +-# job: +-# class: RunPytest +-# args: +-# build_url: '{testing-fedora/build_url}' +-# update_packages: True +-# selinux_enforcing: True +-# enable_testing_repo: True +-# test_suite: test_integration/test_nfs.py::TestNFS +-# template: *ci-master-latest +-# timeout: 9000 +-# topology: *master_3client +- +- testing-fedora/nfs_nsswitch_restore: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_nfs.py::TestIpaClientAutomountFileRestore +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_3client +- +- testing-fedora/mask: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestMaskInstall +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/hostname_validator: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_installation.py::TestHostnameValidator +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/automember: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_automember.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_crlgen_manage: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_crlgen_manage.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_integration_TestIPANotConfigured: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_cli_ipa_not_configured.py::TestIPANotConfigured +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl +- +- testing-fedora/test_sssd: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunADTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_sssd.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *adroot_adchild_adtree_master_1client +- +- testing-fedora/test_ca_custom_sdn: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_ca_custom_sdn.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_membermanager: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_membermanager.py +- template: *ci-master-latest +- timeout: 1800 +- topology: *master_1repl +- +- testing-fedora/krbtpolicy: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_krbtpolicy.py +- template: *ci-master-latest +- timeout: 4800 +- topology: *master_1repl +- +- testing-fedora/test_winsyncmigrate: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunADTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_winsyncmigrate.py +- template: *ci-master-latest +- timeout: 4800 +- topology: *ad_master +- +- testing-fedora/test_trust: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunADTests +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_trust.py +- template: *ci-master-latest +- timeout: 10000 +- topology: *adroot_adchild_adtree_master_1client +- +- testing-fedora/test_backup_and_restore_TestBackupAndRestoreTrust: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreTrust +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl +- +- testing-fedora/test_adtrust_install: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_adtrust_install.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_cert: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_cert.py +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl_1client +- +- testing-fedora/test_epn: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_epn.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_3client +- +- testing-fedora/test_acme: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_acme.py +- template: *ci-master-latest +- timeout: 7200 +- topology: *master_1repl_1client +- +- testing-fedora/test_dns: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_dns.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_pwpolicy: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- build_url: '{testing-fedora/build_url}' +- test_suite: test_integration/test_pwpolicy.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_cert_fix: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_ipa_cert_fix.py +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_1repl +- +- testing-fedora/test_subids: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_subids.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_custom_plugins: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_custom_plugins.py +- template: *ci-master-latest +- timeout: 3600 +- topology: *master_1repl +- +- testing-fedora/test_external_idp: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_idp.py +- template: *ci-master-latest +- timeout: 5000 +- topology: *master_2repl_1client +- +- testing-fedora/test_random_serial_numbers_TestInstallWithCA_DNS1_RSN: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_DNS1_RSN +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_random_serial_numbers_TestInstallWithCA_KRA1_RSN: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_KRA1_RSN +- template: *ci-master-latest +- timeout: 10800 +- topology: *master_3repl_1client +- +- testing-fedora/test_random_serial_numbers_test_commands_RSN: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_random_serial_numbers.py::TestIPACommand_RSN::test_certificate_out_write_to_file +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl_1client +- +- testing-fedora/test_caless_TestServerCALessToExternalCA_RSN: +- requires: [testing-fedora/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{testing-fedora/build_url}' +- update_packages: True +- selinux_enforcing: True +- enable_testing_repo: True +- test_suite: test_integration/test_random_serial_numbers.py::TestServerCALessToExternalCA_RSN +- template: *ci-master-latest +- timeout: 5400 +- topology: *master_1repl +diff --git a/ipatests/prci_definitions/nightly_previous.yaml b/ipatests/prci_definitions/nightly_previous.yaml +deleted file mode 100644 +index 8e7ccef18bbbee4200cf3868bffc7c2b50dde0c8..0000000000000000000000000000000000000000 +--- a/ipatests/prci_definitions/nightly_previous.yaml ++++ /dev/null +@@ -1,1823 +0,0 @@ +-topologies: +- build: &build +- name: build +- cpu: 2 +- memory: 3800 +- master_3client: &master_3client +- name: master_3client +- cpu: 5 +- memory: 10150 +- master_1repl: &master_1repl +- name: master_1repl +- cpu: 4 +- memory: 6450 +- master_1repl_1client: &master_1repl_1client +- name: master_1repl_1client +- cpu: 4 +- memory: 7400 +- ipaserver: &ipaserver +- name: ipaserver +- cpu: 2 +- memory: 2400 +- master_2repl_1client: &master_2repl_1client +- name: master_2repl_1client +- cpu: 5 +- memory: 10150 +- master_3repl_1client: &master_3repl_1client +- name: master_3repl_1client +- cpu: 6 +- memory: 12900 +- ad_master_2client: &ad_master_2client +- name: ad_master_2client +- cpu: 4 +- memory: 12000 +- ad_master: &ad_master +- name: ad_master +- cpu: 4 +- memory: 12000 +- adroot_adchild_adtree_master_1client: &adroot_adchild_adtree_master_1client +- name: adroot_adchild_adtree_master_1client +- cpu: 8 +- memory: 14500 +- +-jobs: +- fedora-previous/build: +- requires: [] +- priority: 100 +- job: +- class: Build +- args: +- git_repo: '{git_repo}' +- git_refspec: '{git_refspec}' +- template: &ci-master-previous +- name: freeipa/ci-master-f35 +- version: 0.0.7 +- timeout: 1800 +- topology: *build +- +- fedora-previous/simple_replication: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_simple_replication.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/test_external_ca_TestExternalCA: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_external_ca.py::TestExternalCA test_integration/test_external_ca.py::TestExternalCAConstraints +- template: *ci-master-previous +- timeout: 4800 +- topology: *master_1repl_1client +- +- fedora-previous/test_external_ca_TestSelfExternalSelf: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_external_ca.py::TestSelfExternalSelf test_integration/test_external_ca.py::TestExternalCAInstall +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/external_ca_templates: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_external_ca.py::TestExternalCAProfileScenarios +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/test_topologies: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_topologies.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/test_sudo: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_sudo.py +- template: *ci-master-previous +- timeout: 4800 +- topology: *master_1repl_1client +- +- fedora-previous/test_commands: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_commands.py +- template: *ci-master-previous +- timeout: 5400 +- topology: *master_1repl_1client +- +- fedora-previous/test_kerberos_flags: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_kerberos_flags.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl_1client +- +- fedora-previous/test_http_kdc_proxy: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunADTests +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_http_kdc_proxy.py +- template: *ci-master-previous +- timeout: 7200 +- topology: *ad_master_2client +- +- fedora-previous/test_fips: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_fips.py +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_1repl_1client +- +- fedora-previous/test_forced_client_enrolment: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_forced_client_reenrollment.py +- template: *ci-master-previous +- timeout: 4800 +- topology: *master_1repl_1client +- +- fedora-previous/test_advise: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_advise.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl_1client +- +- fedora-previous/test_testconfig: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_testconfig.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/test_service_permissions: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_service_permissions.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/test_netgroup: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_netgroup.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/test_vault: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_vault.py +- template: *ci-master-previous +- timeout: 6300 +- topology: *master_1repl +- +- fedora-previous/test_authconfig: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_authselect.py +- template: *ci-master-previous +- timeout: 4800 +- topology: *master_1repl_1client +- +- fedora-previous/test_smb: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunADTests +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_smb.py +- template: *ci-master-previous +- timeout: 7200 +- topology: *ad_master_2client +- +- fedora-previous/test_server_del: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_server_del.py +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_2repl_1client +- +- fedora-previous/test_installation_TestInstallWithCA1: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestInstallWithCA1 +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_3repl_1client +- +- fedora-previous/test_installation_TestInstallWithCA2: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestInstallWithCA2 +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_3repl_1client +- +- fedora-previous/test_installation_TestInstallCA: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestInstallCA +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_2repl_1client +- +- fedora-previous/test_installation_TestInstallWithCA_KRA1: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA1 +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_3repl_1client +- +- fedora-previous/test_installation_TestInstallWithCA_KRA2: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA2 +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_3repl_1client +- +- fedora-previous/test_installation_TestInstallWithCA_DNS1: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS1 +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_3repl_1client +- +- fedora-previous/test_installation_TestInstallWithCA_DNS2: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS2 +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_3repl_1client +- +- fedora-previous/test_installation_TestInstallWithCA_DNS3: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS3 +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/test_installation_TestInstallWithCA_DNS4: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestInstallWithCA_DNS4 +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/test_installation_TestInstallWithCA_KRA_DNS1: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS1 +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_3repl_1client +- +- fedora-previous/test_installation_TestInstallWithCA_KRA_DNS2: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestInstallWithCA_KRA_DNS2 +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_3repl_1client +- +- fedora-previous/test_installation_TestInstallMaster: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestInstallMaster +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_1repl +- +- fedora-previous/test_installation_TestInstallMasterKRA: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestInstallMasterKRA +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_1repl +- +- fedora-previous/test_installation_TestInstallMasterDNS: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestInstallMasterDNS +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_1repl +- +- fedora-previous/test_installation_TestInstallMasterDNSRepeatedly: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestInstallMasterDNSRepeatedly +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_1repl +- +- fedora-previous/test_installation_TestInstallMasterReservedIPasForwarder: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestInstallMasterReservedIPasForwarder +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_1repl +- +- fedora-previous/test_installation_TestInstallMasterReplica: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestInstallMasterReplica +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_1repl +- +- fedora-previous/test_installation_TestInstallReplicaAgainstSpecificServer: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestInstallReplicaAgainstSpecificServer +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_2repl_1client +- +- fedora-previous/test_installation_TestADTrustInstall: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestADTrustInstall +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_2repl_1client +- +- fedora-previous/test_installation_TestADTrustInstallWithDNS_KRA_ADTrust: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestADTrustInstallWithDNS_KRA_ADTrust +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_2repl_1client +- +- fedora-previous/test_installation_TestKRAinstallAfterCertRenew: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestKRAinstallAfterCertRenew +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_1repl +- +- fedora-previous/test_installation_TestInstallWithoutSudo: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestInstallWithoutSudo +- template: *ci-master-previous +- timeout: 4800 +- topology: *master_1repl_1client +- +- fedora-previous/test_installation_TestInstallWithoutNamed: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestInstallWithoutNamed +- template: *ci-master-previous +- timeout: 4800 +- topology: *master_1repl +- +- fedora-previous/test_installation_TestInstallwithSHA384withRSA: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestInstallwithSHA384withRSA +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/test_idviews: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunADTests +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_idviews.py +- template: *ci-master-previous +- timeout: 7200 +- topology: *ad_master_2client +- +- fedora-previous/test_caless_TestServerInstall: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_caless.py::TestServerInstall +- template: *ci-master-previous +- timeout: 12000 +- topology: *master_1repl +- +- fedora-previous/test_caless_TestReplicaInstall: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_caless.py::TestReplicaInstall +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_1repl +- +- fedora-previous/test_caless_TestClientInstall: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_caless.py::TestClientInstall +- template: *ci-master-previous +- timeout: 5400 +- # actually master_1client +- topology: *master_1repl_1client +- +- fedora-previous/test_caless_TestIPACommands: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_caless.py::TestIPACommands +- template: *ci-master-previous +- timeout: 5400 +- topology: *master_1repl +- +- fedora-previous/test_caless_TestCertInstall: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_caless.py::TestCertInstall +- template: *ci-master-previous +- timeout: 5400 +- topology: *master_1repl +- +- fedora-previous/test_caless_TestPKINIT: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_caless.py::TestPKINIT +- template: *ci-master-previous +- timeout: 5400 +- topology: *master_1repl +- +- fedora-previous/test_caless_TestServerReplicaCALessToCAFull: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_caless.py::TestServerReplicaCALessToCAFull +- template: *ci-master-previous +- timeout: 5400 +- topology: *master_1repl +- +- fedora-previous/test_caless_TestReplicaCALessToCAFull: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_caless.py::TestReplicaCALessToCAFull +- template: *ci-master-previous +- timeout: 5400 +- topology: *master_1repl +- +- fedora-previous/test_caless_TestServerCALessToExternalCA: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_caless.py::TestServerCALessToExternalCA +- template: *ci-master-previous +- timeout: 5400 +- topology: *master_1repl +- +- fedora-previous/test_backup_and_restore_TestUserRootFilesOwnershipPermission: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_backup_and_restore.py::TestUserRootFilesOwnershipPermission +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_1repl +- +- fedora-previous/test_backup_and_restore_TestBackupAndRestore: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestore +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_1repl +- +- fedora-previous/test_backup_and_restore_TestBackupAndRestoreWithDNSSEC: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNSSEC +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_1repl +- +- fedora-previous/test_backup_and_restore_TestBackupReinstallRestoreWithDNSSEC: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNSSEC +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_1repl +- +- fedora-previous/test_backup_and_restore_TestBackupAndRestoreWithDNS: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithDNS +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_1repl +- +- fedora-previous/test_backup_and_restore_TestBackupReinstallRestoreWithDNS: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNS +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_1repl +- +- fedora-previous/test_backup_and_restore_TestBackupAndRestoreWithKRA: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithKRA +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_1repl +- +- fedora-previous/test_backup_and_restore_TestBackupReinstallRestoreWithKRA: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithKRA +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_1repl +- +- fedora-previous/test_backup_and_restore_TestBackupAndRestoreWithReplica: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreWithReplica +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_2repl_1client +- +- fedora-previous/test_backup_and_restore_TestBackupAndRestoreDMPassword: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreDMPassword +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_1repl +- +- fedora-previous/test_backup_and_restore_TestReplicaInstallAfterRestore: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_backup_and_restore.py::TestReplicaInstallAfterRestore +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_2repl_1client +- +- fedora-previous/test_backup_and_restore_TestBackupRoles: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_backup_and_restore.py::TestBackupRoles +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_1repl +- +- fedora-previous/test_dnssec: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_dnssec.py +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_2repl_1client +- +- fedora-previous/test_replica_promotion_TestReplicaPromotionLevel1: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_replica_promotion.py::TestReplicaPromotionLevel1 +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_1repl +- +- fedora-previous/test_replica_promotion_TestUnprivilegedUserPermissions: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_replica_promotion.py::TestUnprivilegedUserPermissions +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_1repl +- +- fedora-previous/test_replica_promotion_TestProhibitReplicaUninstallation: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_replica_promotion.py::TestProhibitReplicaUninstallation +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_2repl_1client +- +- fedora-previous/test_replica_promotion_TestWrongClientDomain: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_replica_promotion.py::TestWrongClientDomain +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_1repl +- +- fedora-previous/test_replica_promotion_TestRenewalMaster: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_replica_promotion.py::TestRenewalMaster +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_1repl +- +- fedora-previous/test_replica_promotion_TestReplicaInstallWithExistingEntry: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallWithExistingEntry +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_1repl +- +- fedora-previous/test_replica_promotion_TestSubCAkeyReplication: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_replica_promotion.py::TestSubCAkeyReplication +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_1repl +- +- fedora-previous/test_replica_promotion_TestReplicaInstallCustodia: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_replica_promotion.py::TestReplicaInstallCustodia +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_2repl_1client +- +- fedora-previous/test_replica_promotion_TestReplicaInForwardZone: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_replica_promotion.py::TestReplicaInForwardZone +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_1repl +- +- fedora-previous/test_replica_promotion_TestHiddenReplicaPromotion: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaPromotion +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_2repl_1client +- +- fedora-previous/test_replica_promotion_TestHiddenReplicaKRA: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_replica_promotion.py::TestHiddenReplicaKRA +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_2repl_1client +- +- fedora-previous/test_upgrade: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_upgrade.py +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_1repl +- +- fedora-previous/test_topology_TestCASpecificRUVs: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_topology.py::TestCASpecificRUVs +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_3repl_1client +- +- fedora-previous/test_topology_TestTopologyOptions: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_topology.py::TestTopologyOptions +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_3repl_1client +- +- fedora-previous/test_replication_layouts_TestLineTopologyWithoutCA: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithoutCA +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_3repl_1client +- +- fedora-previous/test_replication_layouts_TestLineTopologyWithCA: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCA +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_3repl_1client +- +- fedora-previous/test_replication_layouts_TestLineTopologyWithCAKRA: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_replication_layouts.py::TestLineTopologyWithCAKRA +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_3repl_1client +- +- fedora-previous/test_replication_layouts.py_TestStarTopologyWithoutCA: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithoutCA +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_3repl_1client +- +- fedora-previous/test_replication_layouts_TestStarTopologyWithCA: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCA +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_3repl_1client +- +- fedora-previous/test_replication_layouts_TestStarTopologyWithCAKRA: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_replication_layouts.py::TestStarTopologyWithCAKRA +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_3repl_1client +- +- fedora-previous/test_replication_layouts_TestCompleteTopologyWithoutCA: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithoutCA +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_3repl_1client +- +- fedora-previous/test_replication_layouts_TestCompleteTopologyWithCA: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCA +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_3repl_1client +- +- fedora-previous/test_replication_layouts_TestCompleteTopologyWithCAKRA: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_replication_layouts.py::TestCompleteTopologyWithCAKRA +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_3repl_1client +- +- fedora-previous/test_client_uninstallation: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_uninstallation.py +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_1repl_1client +- +- fedora-previous/test_installation_client: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation_client.py +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_1repl_1client +- +- fedora-previous/test_user_permissions: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_user_permissions.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl_1client +- +- fedora-previous/test_webui_cert: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_webui/test_cert.py +- template: *ci-master-previous +- timeout: 2400 +- topology: *ipaserver +- +- fedora-previous/test_webui_general: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: >- +- test_webui/test_loginscreen.py +- test_webui/test_misc_cases.py +- test_webui/test_navigation.py +- test_webui/test_translation.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *ipaserver +- +- fedora-previous/test_webui_host: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_webui/test_host.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *ipaserver +- +- fedora-previous/test_webui_host_net_groups: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: >- +- test_webui/test_hostgroup.py +- test_webui/test_netgroup.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *ipaserver +- +- fedora-previous/test_webui_identity: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: >- +- test_webui/test_automember.py +- test_webui/test_idviews.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *ipaserver +- +- fedora-previous/test_webui_network: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: >- +- test_webui/test_automount.py +- test_webui/test_dns.py +- test_webui/test_vault.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *ipaserver +- +- fedora-previous/test_webui_policy: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: >- +- test_webui/test_hbac.py +- test_webui/test_krbtpolicy.py +- test_webui/test_pwpolicy.py +- test_webui/test_selinuxusermap.py +- test_webui/test_sudo.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *ipaserver +- +- fedora-previous/test_webui_rbac: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: >- +- test_webui/test_delegation.py +- test_webui/test_rbac.py +- test_webui/test_selfservice.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *ipaserver +- +- fedora-previous/test_webui_server: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: >- +- test_webui/test_config.py +- test_webui/test_range.py +- test_webui/test_realmdomains.py +- test_webui/test_topology.py +- test_webui/test_trust.py +- template: *ci-master-previous +- timeout: 7200 +- topology: *ipaserver +- +- fedora-previous/test_webui_service: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_webui/test_service.py +- template: *ci-master-previous +- timeout: 2400 +- topology: *ipaserver +- +- fedora-previous/test_webui_users: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: >- +- test_webui/test_group.py +- test_webui/test_user.py +- template: *ci-master-previous +- timeout: 4800 +- topology: *ipaserver +- +- fedora-previous/test_webui_subid: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunWebuiTests +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_webui/test_subid.py +- template: *ci-master-previous +- timeout: 2400 +- topology: *ipaserver +- +- fedora-previous/customized_ds_config_install: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_customized_ds_config_install.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/dns_locations: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_dns_locations.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_2repl_1client +- +- fedora-previous/external_ca_TestExternalCAdirsrvStop: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_external_ca.py::TestExternalCAdirsrvStop +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/external_ca_TestExternalCAInvalidCert: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_external_ca.py::TestExternalCAInvalidCert test_integration/test_external_ca.py::TestExternalCAInvalidIntermediate +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/external_ca_TestMultipleExternalCA: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_external_ca.py::TestMultipleExternalCA +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/test_ipahealthcheck: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheck +- template: *ci-master-previous +- timeout: 5400 +- topology: *master_1repl_1client +- +- fedora-previous/test_ipahealthcheck_nodns_extca_file: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithoutDNS test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithExternalCA test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFileCheck +- template: *ci-master-previous +- timeout: 5400 +- topology: *master_1repl +- +- fedora-previous/test_ipahealthcheck_cli_fsspace: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCLI test_integration/test_ipahealthcheck.py::TestIpaHealthCheckFilesystemSpace +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/test_ipahealthcheck_adtrust: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunADTests +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_ipahealthcheck.py::TestIpaHealthCheckWithADtrust +- template: *ci-master-previous +- timeout: 4800 +- topology: *adroot_adchild_adtree_master_1client +- +- fedora-previous/test_ntp_options: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_ntp_options.py::TestNTPoptions +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_1repl_1client +- +- fedora-previous/test_otp: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_otp.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/test_pkinit_manage: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_pkinit_manage.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/test_pki_config_override: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_pki_config_override.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +-# fedora-previous/nfs: +-# requires: [fedora-previous/build] +-# priority: 50 +-# job: +-# class: RunPytest +-# args: +-# build_url: '{fedora-previous/build_url}' +-# test_suite: test_integration/test_nfs.py::TestNFS +-# template: *ci-master-previous +-# timeout: 9000 +-# topology: *master_3client +- +- fedora-previous/nfs_nsswitch_restore: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_nfs.py::TestIpaClientAutomountFileRestore +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_3client +- +- fedora-previous/mask: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestMaskInstall +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/hostname_validator: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_installation.py::TestHostnameValidator +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/automember: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_automember.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/test_crlgen_manage: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_crlgen_manage.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/test_integration_TestIPANotConfigured: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_cli_ipa_not_configured.py::TestIPANotConfigured +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_1repl +- +- fedora-previous/test_sssd: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunADTests +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_sssd.py +- template: *ci-master-previous +- timeout: 7200 +- topology: *adroot_adchild_adtree_master_1client +- +- fedora-previous/test_ca_custom_sdn: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_ca_custom_sdn.py +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_1repl +- +- fedora-previous/test_membermanager: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_membermanager.py +- template: *ci-master-previous +- timeout: 1800 +- topology: *master_1repl +- +- fedora-previous/krbtpolicy: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_krbtpolicy.py +- template: *ci-master-previous +- timeout: 4800 +- topology: *master_1repl +- +- fedora-previous/test_winsyncmigrate: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunADTests +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_winsyncmigrate.py +- template: *ci-master-previous +- timeout: 4800 +- topology: *ad_master +- +- fedora-previous/test_trust: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunADTests +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_trust.py +- template: *ci-master-previous +- timeout: 10000 +- topology: *adroot_adchild_adtree_master_1client +- +- fedora-previous/test_backup_and_restore_TestBackupAndRestoreTrust: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_backup_and_restore.py::TestBackupAndRestoreTrust +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_1repl +- +- fedora-previous/test_adtrust_install: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_adtrust_install.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/test_cert: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_cert.py +- template: *ci-master-previous +- timeout: 5400 +- topology: *master_1repl_1client +- +- fedora-previous/test_epn: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_epn.py +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_3client +- +- fedora-previous/test_acme: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_acme.py +- template: *ci-master-previous +- timeout: 7200 +- topology: *master_1repl_1client +- +- fedora-previous/test_dns: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_dns.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/test_pwpolicy: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_pwpolicy.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/test_cert_fix: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_ipa_cert_fix.py +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_1repl +- +- fedora-previous/test_subids: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_subids.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/test_custom_plugins: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_custom_plugins.py +- template: *ci-master-previous +- timeout: 3600 +- topology: *master_1repl +- +- fedora-previous/test_external_idp: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_idp.py +- template: *ci-master-previous +- timeout: 5000 +- topology: *master_2repl_1client +- +- fedora-previous/test_random_serial_numbers_TestInstallWithCA_DNS1_RSN: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_DNS1_RSN +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_3repl_1client +- +- fedora-previous/test_random_serial_numbers_TestInstallWithCA_KRA1_RSN: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_random_serial_numbers.py::TestInstallWithCA_KRA1_RSN +- template: *ci-master-previous +- timeout: 10800 +- topology: *master_3repl_1client +- +- fedora-previous/test_random_serial_numbers_test_commands_RSN: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_random_serial_numbers.py::TestIPACommand_RSN::test_certificate_out_write_to_file +- template: *ci-master-previous +- timeout: 5400 +- topology: *master_1repl_1client +- +- fedora-previous/test_caless_TestServerCALessToExternalCA_RSN: +- requires: [fedora-previous/build] +- priority: 50 +- job: +- class: RunPytest +- args: +- build_url: '{fedora-previous/build_url}' +- test_suite: test_integration/test_random_serial_numbers.py::TestServerCALessToExternalCA_RSN +- template: *ci-master-previous +- timeout: 5400 +- topology: *master_1repl +diff --git a/ipatests/prci_definitions/temp_commit.yaml b/ipatests/prci_definitions/temp_commit.yaml +index 9384492e0b498778484c4a5165976f4938e73938..78974b3ff2a0e460dff1005d29ce799c7e05c074 100644 +--- a/ipatests/prci_definitions/temp_commit.yaml ++++ b/ipatests/prci_definitions/temp_commit.yaml +@@ -47,7 +47,7 @@ topologies: + memory: 14500 + + jobs: +- fedora-latest/build: ++ fedora-latest-ipa-4-10/build: + requires: [] + priority: 100 + job: +@@ -55,20 +55,20 @@ jobs: + args: + git_repo: '{git_repo}' + git_refspec: '{git_refspec}' +- template: &ci-master-latest +- name: freeipa/ci-master-f36 +- version: 0.0.7 ++ template: &ci-ipa-4-10-latest ++ name: freeipa/ci-ipa-4-10-f36 ++ version: 0.0.1 + timeout: 1800 + topology: *build + +- fedora-latest/temp_commit: +- requires: [fedora-latest/build] ++ fedora-latest-ipa-4-10/temp_commit: ++ requires: [fedora-latest-ipa-4-10/build] + priority: 50 + job: + class: RunPytest + args: +- build_url: '{fedora-latest/build_url}' ++ build_url: '{fedora-latest-ipa-4-10/build_url}' + test_suite: test_integration/test_REPLACEME.py +- template: *ci-master-latest ++ template: *ci-ipa-4-10-latest + timeout: 3600 + topology: *master_1repl_1client +-- +2.37.2 + diff --git a/SOURCES/0004-Added-a-check-while-removing-cert_dir-.-The-teardown.patch b/SOURCES/0004-Added-a-check-while-removing-cert_dir-.-The-teardown.patch new file mode 100644 index 0000000..59052bb --- /dev/null +++ b/SOURCES/0004-Added-a-check-while-removing-cert_dir-.-The-teardown.patch @@ -0,0 +1,69 @@ +From aca97507cd119ad55e0c3c18ca65087cb5576c82 Mon Sep 17 00:00:00 2001 +From: Sumedh Sidhaye +Date: Mon, 13 Jun 2022 13:49:08 +0530 +Subject: [PATCH] Added a check while removing 'cert_dir'. The teardown method + is called even if all the tests are skipped since the required PKI version is + not present. The teardown is trying to remove a non-existent directory. + +Currently the cert_dir attribute is only present if IPA installation was +done. If IPA was not installed the attribute does not exist. +In order that the uninstall code finds the attribute a class attribute +is added. + +Pagure Issue: https://pagure.io/freeipa/issue/9179 + +Signed-off-by: Sumedh Sidhaye +Reviewed-By: Florence Blanc-Renaud +Reviewed-By: Rob Crittenden +--- + ipatests/test_integration/test_caless.py | 12 +++++++++++- + .../test_integration/test_random_serial_numbers.py | 6 ++++++ + 2 files changed, 17 insertions(+), 1 deletion(-) + +diff --git a/ipatests/test_integration/test_caless.py b/ipatests/test_integration/test_caless.py +index 96f477bbe4b0e25184605a80659b5ec6529a2320..4c370f77e84215714e533b1b6ebeb89216319c0f 100644 +--- a/ipatests/test_integration/test_caless.py ++++ b/ipatests/test_integration/test_caless.py +@@ -122,6 +122,15 @@ def replica_install_teardown(func): + + + class CALessBase(IntegrationTest): ++ # The teardown method is called even if all the tests are skipped ++ # since the required PKI version is not present. ++ # The teardown is trying to remove a non-existent directory. ++ # Currently the cert_dir attribute is only present if IPA installation was ++ # done. If IPA was not installed the attribute does not exist. ++ # In order that the uninstall code finds the attribute a class attribute ++ # is added. ++ cert_dir = None ++ + @classmethod + def install(cls, mh): + cls.cert_dir = tempfile.mkdtemp(prefix="ipatest-") +@@ -164,7 +173,8 @@ class CALessBase(IntegrationTest): + @classmethod + def uninstall(cls, mh): + # Remove the NSS database +- shutil.rmtree(cls.cert_dir) ++ if cls.cert_dir: ++ shutil.rmtree(cls.cert_dir) + super(CALessBase, cls).uninstall(mh) + + @classmethod +diff --git a/ipatests/test_integration/test_random_serial_numbers.py b/ipatests/test_integration/test_random_serial_numbers.py +index a931c7b562f00f94e10d1e9e891fbf0624d5fd88..c52cfa4ed50e2718791b0844d743fb240d26b365 100644 +--- a/ipatests/test_integration/test_random_serial_numbers.py ++++ b/ipatests/test_integration/test_random_serial_numbers.py +@@ -64,3 +64,9 @@ class TestServerCALessToExternalCA_RSN(TestServerCALessToExternalCA): + if not pki_supports_RSNv3(mh.master): + raise pytest.skip("RNSv3 not supported") + super(TestServerCALessToExternalCA_RSN, cls).install(mh) ++ ++ @classmethod ++ def uninstall(cls, mh): ++ if not pki_supports_RSNv3(mh.master): ++ raise pytest.skip("RSNv3 not supported") ++ super(TestServerCALessToExternalCA_RSN, cls).uninstall(mh) +-- +2.37.2 + diff --git a/SOURCES/0004-Extend-test-to-see-if-replica-is-not-shown-when-runn.patch b/SOURCES/0004-Extend-test-to-see-if-replica-is-not-shown-when-runn.patch deleted file mode 100644 index f8d5334..0000000 --- a/SOURCES/0004-Extend-test-to-see-if-replica-is-not-shown-when-runn.patch +++ /dev/null @@ -1,29 +0,0 @@ -From 8b22ee018c3bb7f58a1b6694a7fd611688f8e74f Mon Sep 17 00:00:00 2001 -From: Sumedh Sidhaye -Date: Thu, 25 Nov 2021 17:48:20 +0530 -Subject: [PATCH] Extend test to see if replica is not shown when running - `ipa-replica-manage list -v ` - -Related: https://pagure.io/freeipa/issue/8605 - -Signed-off-by: Sumedh Sidhaye -Reviewed-By: Florence Blanc-Renaud ---- - ipatests/test_integration/test_simple_replication.py | 3 ++- - 1 file changed, 2 insertions(+), 1 deletion(-) - -diff --git a/ipatests/test_integration/test_simple_replication.py b/ipatests/test_integration/test_simple_replication.py -index 8de3851447abdfd36171134cbb683115b34df749..17092a49966e61d5a4a9b04c15abcb1de8be9683 100644 ---- a/ipatests/test_integration/test_simple_replication.py -+++ b/ipatests/test_integration/test_simple_replication.py -@@ -111,5 +111,6 @@ class TestSimpleReplication(IntegrationTest): - # has to be run with --force, there is no --unattended - self.master.run_command(['ipa-replica-manage', 'del', - self.replicas[0].hostname, '--force']) -- result = self.master.run_command(['ipa-replica-manage', 'list']) -+ result = self.master.run_command( -+ ['ipa-replica-manage', 'list', '-v', self.master.hostname]) - assert self.replicas[0].hostname not in result.stdout_text --- -2.34.1 - diff --git a/SOURCES/0005-ipatests-Test-default-value-of-nsslapd-sizelimit.patch b/SOURCES/0005-ipatests-Test-default-value-of-nsslapd-sizelimit.patch deleted file mode 100644 index d73aecd..0000000 --- a/SOURCES/0005-ipatests-Test-default-value-of-nsslapd-sizelimit.patch +++ /dev/null @@ -1,40 +0,0 @@ -From 465f1669a6c5abc72da1ecaf9aefa8488f80806c Mon Sep 17 00:00:00 2001 -From: Anuja More -Date: Mon, 13 Dec 2021 17:37:05 +0530 -Subject: [PATCH] ipatests: Test default value of nsslapd-sizelimit. - -related : https://pagure.io/freeipa/issue/8962 - -Signed-off-by: Anuja More -Reviewed-By: Florence Blanc-Renaud ---- - ipatests/test_integration/test_installation.py | 13 +++++++++++++ - 1 file changed, 13 insertions(+) - -diff --git a/ipatests/test_integration/test_installation.py b/ipatests/test_integration/test_installation.py -index 95cfaad54c33a581c6af352097ea95ed435ea2b1..0947241ae2738419c4855e2517670c9033e634f0 100644 ---- a/ipatests/test_integration/test_installation.py -+++ b/ipatests/test_integration/test_installation.py -@@ -1067,6 +1067,19 @@ class TestInstallMaster(IntegrationTest): - ) - assert "nsslapd-db-locks" not in result.stdout_text - -+ def test_nsslapd_sizelimit(self): -+ """ Test for default value of nsslapd-sizelimit. -+ -+ Related : https://pagure.io/freeipa/issue/8962 -+ """ -+ result = tasks.ldapsearch_dm( -+ self.master, -+ "cn=config", -+ ["nsslapd-sizelimit"], -+ scope="base" -+ ) -+ assert "nsslapd-sizelimit: 100000" in result.stdout_text -+ - def test_admin_root_alias_CVE_2020_10747(self): - # Test for CVE-2020-10747 fix - # https://bugzilla.redhat.com/show_bug.cgi?id=1810160 --- -2.34.1 - diff --git a/SOURCES/0005-ipatests-healthcheck-test-if-system-is-FIPS-enabled.patch b/SOURCES/0005-ipatests-healthcheck-test-if-system-is-FIPS-enabled.patch new file mode 100644 index 0000000..5aa0535 --- /dev/null +++ b/SOURCES/0005-ipatests-healthcheck-test-if-system-is-FIPS-enabled.patch @@ -0,0 +1,55 @@ +From c55185d3dc3c6cd2ffebab77fbf8caa40a32bcd1 Mon Sep 17 00:00:00 2001 +From: Erik +Date: Mon, 18 Jul 2022 11:59:24 +0200 +Subject: [PATCH] ipatests: healthcheck: test if system is FIPS enabled + +Test if FIPS is enabled and the check exists. + +Related: https://pagure.io/freeipa/issue/8951 + +Signed-off-by: Erik Belko +Reviewed-By: Michal Polovka +Reviewed-By: Rob Crittenden +--- + .../test_integration/test_ipahealthcheck.py | 25 +++++++++++++++++++ + 1 file changed, 25 insertions(+) + +diff --git a/ipatests/test_integration/test_ipahealthcheck.py b/ipatests/test_integration/test_ipahealthcheck.py +index 23af09f3a7eaa8012e7a898ce6a534d1fad45323..a0c85f79e6e84f9e63072c6d70276480e4af97ad 100644 +--- a/ipatests/test_integration/test_ipahealthcheck.py ++++ b/ipatests/test_integration/test_ipahealthcheck.py +@@ -340,6 +340,31 @@ class TestIpaHealthCheck(IntegrationTest): + assert returncode == 0 + assert output == "No issues found." + ++ def test_ipa_healthcheck_fips_enabled(self): ++ """ ++ Test if FIPS is enabled and the check exists. ++ ++ https://pagure.io/freeipa/issue/8951 ++ """ ++ returncode, check = run_healthcheck(self.master, ++ source="ipahealthcheck.meta.core", ++ check="MetaCheck", ++ output_type="json", ++ failures_only=False) ++ assert returncode == 0 ++ ++ cmd = self.master.run_command(['fips-mode-setup', '--is-enabled'], ++ raiseonerr=False) ++ returncode = cmd.returncode ++ ++ # If this produces IndexError, the check does not exist ++ if check[0]["kw"]["fips"] == "disabled": ++ assert returncode == 2 ++ elif check[0]["kw"]["fips"] == "enabled": ++ assert returncode == 0 ++ else: ++ assert returncode == 1 ++ + def test_ipa_healthcheck_after_certupdate(self): + """ + Verify that ipa-certupdate hasn't messed up tracking +-- +2.37.2 + diff --git a/SOURCES/0006-Disabling-gracelimit-does-not-prevent-LDAP-binds.patch b/SOURCES/0006-Disabling-gracelimit-does-not-prevent-LDAP-binds.patch new file mode 100644 index 0000000..b3891d7 --- /dev/null +++ b/SOURCES/0006-Disabling-gracelimit-does-not-prevent-LDAP-binds.patch @@ -0,0 +1,125 @@ +From 1bb4ff9ed2313fb3c2bd1418258c5bcec557b6a5 Mon Sep 17 00:00:00 2001 +From: Rob Crittenden +Date: Thu, 21 Jul 2022 09:28:46 -0400 +Subject: [PATCH] Disabling gracelimit does not prevent LDAP binds + +Originally the code treated 0 as disabled. This was +changed during the review process to -1 but one remnant +was missed effetively allowing gracelimit 0 to also mean +disabled. + +Add explicit tests for testing with gracelimit = 0 and +gracelimit = -1. + +Also remove some extranous "str(self.master.domain.basedn)" +lines from some of the tests. + +Fixes: https://pagure.io/freeipa/issue/9206 + +Signed-off-by: Rob Crittenden +Reviewed-By: Francisco Trivino +--- + .../ipa-graceperiod/ipa_graceperiod.c | 2 +- + ipatests/test_integration/test_pwpolicy.py | 55 ++++++++++++++++++- + 2 files changed, 53 insertions(+), 4 deletions(-) + +diff --git a/daemons/ipa-slapi-plugins/ipa-graceperiod/ipa_graceperiod.c b/daemons/ipa-slapi-plugins/ipa-graceperiod/ipa_graceperiod.c +index a3f57cb4bd7a2a66d70fae98cca0f62a8f0c017f..345e1dee7d163167373ca82dedb1e827f0e1bc8c 100644 +--- a/daemons/ipa-slapi-plugins/ipa-graceperiod/ipa_graceperiod.c ++++ b/daemons/ipa-slapi-plugins/ipa-graceperiod/ipa_graceperiod.c +@@ -479,7 +479,7 @@ static int ipagraceperiod_preop(Slapi_PBlock *pb) + if (pwresponse_requested) { + slapi_pwpolicy_make_response_control(pb, -1, grace_limit - grace_user_time , -1); + } +- } else if ((grace_limit > 0) && (grace_user_time >= grace_limit)) { ++ } else if (grace_user_time >= grace_limit) { + LOG_TRACE("%s password is expired and out of grace limit\n", dn); + errstr = "Password is expired.\n"; + ret = LDAP_INVALID_CREDENTIALS; +diff --git a/ipatests/test_integration/test_pwpolicy.py b/ipatests/test_integration/test_pwpolicy.py +index 6d66982848ac5a0061b47d30fad022be055c93e4..41d6e9070a90c2bde7b3182ad6ecf1a923bba203 100644 +--- a/ipatests/test_integration/test_pwpolicy.py ++++ b/ipatests/test_integration/test_pwpolicy.py +@@ -36,7 +36,7 @@ class TestPWPolicy(IntegrationTest): + cls.master.run_command(['ipa', 'group-add-member', POLICY, + '--users', USER]) + cls.master.run_command(['ipa', 'pwpolicy-add', POLICY, +- '--priority', '1']) ++ '--priority', '1', '--gracelimit', '-1']) + cls.master.run_command(['ipa', 'passwd', USER], + stdin_text='{password}\n{password}\n'.format( + password=PASSWORD +@@ -265,7 +265,6 @@ class TestPWPolicy(IntegrationTest): + + def test_graceperiod_expired(self): + """Test the LDAP bind grace period""" +- str(self.master.domain.basedn) + dn = "uid={user},cn=users,cn=accounts,{base_dn}".format( + user=USER, base_dn=str(self.master.domain.basedn)) + +@@ -308,7 +307,6 @@ class TestPWPolicy(IntegrationTest): + + def test_graceperiod_not_replicated(self): + """Test that the grace period is reset on password reset""" +- str(self.master.domain.basedn) + dn = "uid={user},cn=users,cn=accounts,{base_dn}".format( + user=USER, base_dn=str(self.master.domain.basedn)) + +@@ -341,3 +339,54 @@ class TestPWPolicy(IntegrationTest): + ) + assert 'passwordgraceusertime: 0' in result.stdout_text.lower() + self.reset_password(self.master) ++ ++ def test_graceperiod_zero(self): ++ """Test the LDAP bind with zero grace period""" ++ dn = "uid={user},cn=users,cn=accounts,{base_dn}".format( ++ user=USER, base_dn=str(self.master.domain.basedn)) ++ ++ self.master.run_command( ++ ["ipa", "pwpolicy-mod", POLICY, "--gracelimit", "0", ], ++ ) ++ ++ # Resetting the password will mark it as expired ++ self.reset_password(self.master) ++ ++ # Now grace is done and binds should fail. ++ result = self.master.run_command( ++ ["ldapsearch", "-e", "ppolicy", "-D", dn, ++ "-w", PASSWORD, "-b", dn], raiseonerr=False ++ ) ++ assert result.returncode == 49 ++ ++ assert 'Password is expired' in result.stderr_text ++ assert 'Password expired, 0 grace logins remain' in result.stderr_text ++ ++ def test_graceperiod_disabled(self): ++ """Test the LDAP bind with grace period disabled (-1)""" ++ str(self.master.domain.basedn) ++ dn = "uid={user},cn=users,cn=accounts,{base_dn}".format( ++ user=USER, base_dn=str(self.master.domain.basedn)) ++ ++ # This can fail if gracelimit is already -1 so ignore it ++ self.master.run_command( ++ ["ipa", "pwpolicy-mod", POLICY, "--gracelimit", "-1",], ++ raiseonerr=False, ++ ) ++ ++ # Ensure the password is expired ++ self.reset_password(self.master) ++ ++ result = self.kinit_as_user(self.master, PASSWORD, PASSWORD) ++ ++ for _i in range(0, 10): ++ result = self.master.run_command( ++ ["ldapsearch", "-e", "ppolicy", "-D", dn, ++ "-w", PASSWORD, "-b", dn] ++ ) ++ ++ # With graceperiod disabled it should not increment ++ result = tasks.ldapsearch_dm( ++ self.master, dn, ['passwordgraceusertime',], ++ ) ++ assert 'passwordgraceusertime: 0' in result.stdout_text.lower() +-- +2.37.2 + diff --git a/SOURCES/0006-ipatests-Test-empty-cert-request-doesn-t-force-certm.patch b/SOURCES/0006-ipatests-Test-empty-cert-request-doesn-t-force-certm.patch deleted file mode 100644 index a8c1ba2..0000000 --- a/SOURCES/0006-ipatests-Test-empty-cert-request-doesn-t-force-certm.patch +++ /dev/null @@ -1,123 +0,0 @@ -From cbd9ac6ab07dfb60f67da762fdd70856ad35c230 Mon Sep 17 00:00:00 2001 -From: Mohammad Rizwan -Date: Thu, 25 Nov 2021 13:10:05 +0530 -Subject: [PATCH] ipatests: Test empty cert request doesn't force certmonger to - segfault - -When empty cert request is submitted to certmonger, it goes to -segfault. This fix test that if something like this happens, -certmonger should gracefuly handle it - -and some PEP8 fixes - -related: https://pagure.io/certmonger/issue/191 - -Signed-off-by: Mohammad Rizwan ---- - ipatests/test_integration/test_cert.py | 79 +++++++++++++++++++++++++- - 1 file changed, 78 insertions(+), 1 deletion(-) - -diff --git a/ipatests/test_integration/test_cert.py b/ipatests/test_integration/test_cert.py -index 5ffb8c6086328d563084f1d4b73daa1d01d956e7..0518d79545f7592d17571068e2681474bd9e5b14 100644 ---- a/ipatests/test_integration/test_cert.py -+++ b/ipatests/test_integration/test_cert.py -@@ -14,6 +14,7 @@ import random - import re - import string - import time -+import textwrap - - from ipaplatform.paths import paths - from ipapython.dn import DN -@@ -193,7 +194,7 @@ class TestInstallMasterClient(IntegrationTest): - tasks.kinit_admin(self.master) - tasks.user_add(self.master, user) - -- for id in (0,1): -+ for id in (0, 1): - csr_file = f'{id}.csr' - key_file = f'{id}.key' - cert_file = f'{id}.crt' -@@ -584,3 +585,79 @@ class TestCAShowErrorHandling(IntegrationTest): - error_msg = 'ipa: ERROR: The certificate for ' \ - '{} is not available on this server.'.format(lwca) - assert error_msg in result.stderr_text -+ -+ def test_certmonger_empty_cert_not_segfault(self): -+ """Test empty cert request doesn't force certmonger to segfault -+ -+ Test scenario: -+ create a cert request file in /var/lib/certmonger/requests which is -+ missing most of the required information, and ask request a new -+ certificate to certmonger. The wrong request file should not make -+ certmonger crash. -+ -+ related: https://pagure.io/certmonger/issue/191 -+ """ -+ empty_cert_req_content = textwrap.dedent(""" -+ id=dogtag-ipa-renew-agent -+ key_type=UNSPECIFIED -+ key_gen_type=UNSPECIFIED -+ key_size=0 -+ key_gen_size=0 -+ key_next_type=UNSPECIFIED -+ key_next_gen_type=UNSPECIFIED -+ key_next_size=0 -+ key_next_gen_size=0 -+ key_preserve=0 -+ key_storage_type=NONE -+ key_perms=0 -+ key_requested_count=0 -+ key_issued_count=0 -+ cert_storage_type=FILE -+ cert_perms=0 -+ cert_is_ca=0 -+ cert_ca_path_length=0 -+ cert_no_ocsp_check=0 -+ last_need_notify_check=19700101000000 -+ last_need_enroll_check=19700101000000 -+ template_is_ca=0 -+ template_ca_path_length=-1 -+ template_no_ocsp_check=0 -+ state=NEED_KEY_PAIR -+ autorenew=0 -+ monitor=0 -+ submitted=19700101000000 -+ """) -+ # stop certmonger service -+ self.master.run_command(['systemctl', 'stop', 'certmonger']) -+ -+ # place an empty cert request file to certmonger request dir -+ self.master.put_file_contents( -+ os.path.join(paths.CERTMONGER_REQUESTS_DIR, '20211125062617'), -+ empty_cert_req_content -+ ) -+ -+ # start certmonger, it should not fail -+ self.master.run_command(['systemctl', 'start', 'certmonger']) -+ -+ # request a new cert, should succeed and certmonger doesn't goes -+ # to segfault -+ result = self.master.run_command([ -+ "ipa-getcert", "request", -+ "-f", os.path.join(paths.OPENSSL_CERTS_DIR, "test.pem"), -+ "-k", os.path.join(paths.OPENSSL_PRIVATE_DIR, "test.key"), -+ ]) -+ request_id = re.findall(r'\d+', result.stdout_text) -+ -+ # check if certificate is in MONITORING state -+ status = tasks.wait_for_request(self.master, request_id[0], 50) -+ assert status == "MONITORING" -+ -+ self.master.run_command( -+ ['ipa-getcert', 'stop-tracking', '-i', request_id[0]] -+ ) -+ self.master.run_command([ -+ 'rm', '-rf', -+ os.path.join(paths.CERTMONGER_REQUESTS_DIR, '20211125062617'), -+ os.path.join(paths.OPENSSL_CERTS_DIR, 'test.pem'), -+ os.path.join(paths.OPENSSL_PRIVATE_DIR, 'test.key') -+ ]) --- -2.34.1 - diff --git a/SOURCES/0007-Test-cases-for-ipa-replica-conncheck-command.patch b/SOURCES/0007-Test-cases-for-ipa-replica-conncheck-command.patch deleted file mode 100644 index dfc7a74..0000000 --- a/SOURCES/0007-Test-cases-for-ipa-replica-conncheck-command.patch +++ /dev/null @@ -1,104 +0,0 @@ -From 1d19b860d4cd3bd65a4b143b588425d9a64237fd Mon Sep 17 00:00:00 2001 -From: Mohammad Rizwan -Date: Thu, 18 Nov 2021 18:36:58 +0530 -Subject: [PATCH] Test cases for ipa-replica-conncheck command - -Following test cases would be checked: -- when called with --principal (it should then prompt for a password) -- when called with --principal / --password -- when called without principal and password but with a kerberos TGT, - kinit admin done before calling ipa-replica-conncheck -- when called without principal and password, and without any kerberos - TGT (it should default to principal=admin and prompt for a password) - -related: https://pagure.io/freeipa/issue/9047 - -Signed-off-by: Mohammad Rizwan ---- - .../test_replica_promotion.py | 70 +++++++++++++++++++ - 1 file changed, 70 insertions(+) - -diff --git a/ipatests/test_integration/test_replica_promotion.py b/ipatests/test_integration/test_replica_promotion.py -index b9c56f775d08885cb6b1226eeb7bcf105f87cdc1..1a4e9bc121abf41a3919aedda3d334de9404d1a0 100644 ---- a/ipatests/test_integration/test_replica_promotion.py -+++ b/ipatests/test_integration/test_replica_promotion.py -@@ -437,6 +437,76 @@ class TestRenewalMaster(IntegrationTest): - self.assertCARenewalMaster(master, replica.hostname) - self.assertCARenewalMaster(replica, replica.hostname) - -+ def test_replica_concheck(self): -+ """Test cases for ipa-replica-conncheck command -+ -+ Following test cases would be checked: -+ - when called with --principal (it should then prompt for a password) -+ - when called with --principal / --password -+ - when called without principal and password but with a kerberos TGT, -+ kinit admin done before calling ipa-replica-conncheck -+ - when called without principal and password, and without any kerberos -+ TGT (it should default to principal=admin and prompt for a password) -+ -+ related: https://pagure.io/freeipa/issue/9047 -+ """ -+ exp_str1 = "Connection from replica to master is OK." -+ exp_str2 = "Connection from master to replica is OK" -+ tasks.kdestroy_all(self.replicas[0]) -+ # when called with --principal (it should then prompt for a password) -+ result = self.replicas[0].run_command( -+ ['ipa-replica-conncheck', '--auto-master-check', -+ '--master', self.master.hostname, -+ '-r', self.replicas[0].domain.realm, -+ '-p', self.replicas[0].config.admin_name], -+ stdin_text=self.master.config.admin_password -+ ) -+ assert result.returncode == 0 -+ assert ( -+ exp_str1 in result.stderr_text and exp_str2 in result.stderr_text -+ ) -+ -+ # when called with --principal / --password -+ result = self.replicas[0].run_command([ -+ 'ipa-replica-conncheck', '--auto-master-check', -+ '--master', self.master.hostname, -+ '-r', self.replicas[0].domain.realm, -+ '-p', self.replicas[0].config.admin_name, -+ '-w', self.master.config.admin_password -+ ]) -+ assert result.returncode == 0 -+ assert ( -+ exp_str1 in result.stderr_text and exp_str2 in result.stderr_text -+ ) -+ -+ # when called without principal and password, and without -+ # any kerberos TGT, it should default to principal=admin -+ # and prompt for a password -+ result = self.replicas[0].run_command( -+ ['ipa-replica-conncheck', '--auto-master-check', -+ '--master', self.master.hostname, -+ '-r', self.replicas[0].domain.realm], -+ stdin_text=self.master.config.admin_password -+ ) -+ assert result.returncode == 0 -+ assert ( -+ exp_str1 in result.stderr_text and exp_str2 in result.stderr_text -+ ) -+ -+ # when called without principal and password but with a kerberos TGT, -+ # kinit admin done before calling ipa-replica-conncheck -+ tasks.kinit_admin(self.replicas[0]) -+ result = self.replicas[0].run_command( -+ ['ipa-replica-conncheck', '--auto-master-check', -+ '--master', self.master.hostname, -+ '-r', self.replicas[0].domain.realm] -+ ) -+ assert result.returncode == 0 -+ assert ( -+ exp_str1 in result.stderr_text and exp_str2 in result.stderr_text -+ ) -+ tasks.kdestroy_all(self.replicas[0]) -+ - def test_automatic_renewal_master_transfer_ondelete(self): - # Test that after replica uninstallation, master overtakes the cert - # renewal master role from replica (which was previously set there) --- -2.34.1 - diff --git a/SOURCES/0007-ipatests-ipa-client-install-subid-adds-entry-in-nssw.patch b/SOURCES/0007-ipatests-ipa-client-install-subid-adds-entry-in-nssw.patch new file mode 100644 index 0000000..dcc6bb0 --- /dev/null +++ b/SOURCES/0007-ipatests-ipa-client-install-subid-adds-entry-in-nssw.patch @@ -0,0 +1,144 @@ +From a39af6b7228d8ba85b9e97aa5decbc056d081c77 Mon Sep 17 00:00:00 2001 +From: Sudhir Menon +Date: Thu, 23 Jun 2022 16:14:39 +0530 +Subject: [PATCH] ipatests: ipa-client-install --subid adds entry in + nsswitch.conf + +This testcase checks that when ipa-client-install command +is run with --subid option, /etc/nsswitch.conf file is updated +with the below entry + +subid: nss +Related: https://pagure.io/freeipa/issue/9159 + +Since the newly added testsuite required client +system, hence modified the below yaml files to change the topology +from *master_1repl to *master_1repl_1client in the below files + +gating.yaml +nightly_latest.yaml +nightly_rawhide.yaml + +Signed-off-by: Sudhir Menon +Reviewed-By: Rob Crittenden +Reviewed-By: Michal Polovka +Reviewed-By: Stanislav Levin +Reviewed-By: Florence Blanc-Renaud +Signed-off-by: Sudhir Menon +Reviewed-By: Rob Crittenden +Reviewed-By: Michal Polovka +Reviewed-By: Stanislav Levin +Reviewed-By: Florence Blanc-Renaud +--- + ipatests/prci_definitions/gating.yaml | 2 +- + .../nightly_ipa-4-10_latest.yaml | 2 +- + .../nightly_ipa-4-10_latest_selinux.yaml | 2 +- + .../nightly_ipa-4-10_previous.yaml | 2 +- + ipatests/test_integration/test_subids.py | 38 +++++++++++++++++++ + 5 files changed, 42 insertions(+), 4 deletions(-) + +diff --git a/ipatests/prci_definitions/gating.yaml b/ipatests/prci_definitions/gating.yaml +index 4083c650a17ce76bdefa243f1a7c5924039ff0bb..db4875dcfae8676287ef771805b34d988330bb40 100644 +--- a/ipatests/prci_definitions/gating.yaml ++++ b/ipatests/prci_definitions/gating.yaml +@@ -309,4 +309,4 @@ jobs: + test_suite: test_integration/test_subids.py + template: *ci-ipa-4-10-latest + timeout: 3600 +- topology: *master_1repl ++ topology: *master_1repl_1client +diff --git a/ipatests/prci_definitions/nightly_ipa-4-10_latest.yaml b/ipatests/prci_definitions/nightly_ipa-4-10_latest.yaml +index 24aa6e7cf29e448ba9d838d1cb98169213ea63ef..027b2a5b6c0b7ec3c3b5784ec4569661a06d4ed7 100644 +--- a/ipatests/prci_definitions/nightly_ipa-4-10_latest.yaml ++++ b/ipatests/prci_definitions/nightly_ipa-4-10_latest.yaml +@@ -1748,7 +1748,7 @@ jobs: + test_suite: test_integration/test_subids.py + template: *ci-ipa-4-10-latest + timeout: 3600 +- topology: *master_1repl ++ topology: *master_1repl_1client + + fedora-latest-ipa-4-10/test_custom_plugins: + requires: [fedora-latest-ipa-4-10/build] +diff --git a/ipatests/prci_definitions/nightly_ipa-4-10_latest_selinux.yaml b/ipatests/prci_definitions/nightly_ipa-4-10_latest_selinux.yaml +index f22cc08384b3d50e49278d38e73bf93cd7804e80..bcc17bef935666735bfb2c2e51209362a374b511 100644 +--- a/ipatests/prci_definitions/nightly_ipa-4-10_latest_selinux.yaml ++++ b/ipatests/prci_definitions/nightly_ipa-4-10_latest_selinux.yaml +@@ -1887,7 +1887,7 @@ jobs: + test_suite: test_integration/test_subids.py + template: *ci-ipa-4-10-latest + timeout: 3600 +- topology: *master_1repl ++ topology: *master_1repl_1client + + fedora-latest-ipa-4-10/test_custom_plugins: + requires: [fedora-latest-ipa-4-10/build] +diff --git a/ipatests/prci_definitions/nightly_ipa-4-10_previous.yaml b/ipatests/prci_definitions/nightly_ipa-4-10_previous.yaml +index df98a66871fd90daaebd83f063e48f1580675049..37d38762e696a6394ef146a0e2b68bbc8ced515d 100644 +--- a/ipatests/prci_definitions/nightly_ipa-4-10_previous.yaml ++++ b/ipatests/prci_definitions/nightly_ipa-4-10_previous.yaml +@@ -1748,7 +1748,7 @@ jobs: + test_suite: test_integration/test_subids.py + template: *ci-ipa-4-10-previous + timeout: 3600 +- topology: *master_1repl ++ topology: *master_1repl_1client + + fedora-previous-ipa-4-10/test_custom_plugins: + requires: [fedora-previous-ipa-4-10/build] +diff --git a/ipatests/test_integration/test_subids.py b/ipatests/test_integration/test_subids.py +index f6d8607f237bf03358baae008dd2a6ad819751c0..8158499e1a2b71bdc1a308dec0939fd0d491599d 100644 +--- a/ipatests/test_integration/test_subids.py ++++ b/ipatests/test_integration/test_subids.py +@@ -17,6 +17,7 @@ from ipatests.test_integration.base import IntegrationTest + + class TestSubordinateId(IntegrationTest): + num_replicas = 0 ++ num_clients = 1 + topology = "star" + + def _parse_result(self, result): +@@ -268,3 +269,40 @@ class TestSubordinateId(IntegrationTest): + f"--subuid={subuid}"]) + owner = self._parse_result(result)["owner"] + assert owner == uid ++ ++ def test_nsswitch_doesnot_contain_subid_entry(self): ++ """ ++ This testcase checks that when ipa-client-install ++ is installed without subid option, the nsswitch.conf ++ does not contain subid entry or does not use sss as ++ source for subid ++ """ ++ cmd = self.clients[0].run_command( ++ ["grep", "^subid", "/etc/nsswitch.conf"], ++ raiseonerr=False ++ ) ++ # a source is defined for the subid database. ++ # Ensure it is not "sss" ++ if cmd.returncode == 0: ++ assert 'sss' not in cmd.stdout_text ++ else: ++ # grep command returncode 1 means no matching line ++ # was found = no source is defined for the subid database, ++ # which is valid other return codes would ++ # mean an error occurred ++ assert cmd.returncode == 1 ++ ++ def test_nsswitch_is_updated_with_subid_entry(self): ++ """ ++ This test case checks that when ipa-client-install ++ is installed with --subid option, the nsswitch.conf ++ file is modified with the entry 'subid: sss' ++ """ ++ tasks.uninstall_client(self.clients[0]) ++ tasks.install_client(self.master, self.clients[0], ++ extra_args=['--subid']) ++ cmd = self.clients[0].run_command( ++ ["grep", "^subid", "/etc/nsswitch.conf"] ++ ) ++ subid = cmd.stdout_text.split() ++ assert ['subid:', 'sss'] == subid +-- +2.37.2 + diff --git a/SOURCES/0008-PEP8-Fixes.patch b/SOURCES/0008-PEP8-Fixes.patch deleted file mode 100644 index 52df09e..0000000 --- a/SOURCES/0008-PEP8-Fixes.patch +++ /dev/null @@ -1,59 +0,0 @@ -From 5444da016edc416c0c9481c660c013053dbb93b5 Mon Sep 17 00:00:00 2001 -From: Mohammad Rizwan -Date: Thu, 18 Nov 2021 18:43:22 +0530 -Subject: [PATCH] PEP8 Fixes - -Signed-off-by: Mohammad Rizwan ---- - .../test_integration/test_replica_promotion.py | 14 +++++++------- - 1 file changed, 7 insertions(+), 7 deletions(-) - -diff --git a/ipatests/test_integration/test_replica_promotion.py b/ipatests/test_integration/test_replica_promotion.py -index 1a4e9bc121abf41a3919aedda3d334de9404d1a0..c328b1a08ffc8ac5efb0986d2b18c5074f573432 100644 ---- a/ipatests/test_integration/test_replica_promotion.py -+++ b/ipatests/test_integration/test_replica_promotion.py -@@ -138,7 +138,6 @@ class TestReplicaPromotionLevel1(ReplicaPromotionBase): - assert res.returncode == 1 - assert expected_err in res.stderr_text - -- - @replicas_cleanup - def test_one_command_installation(self): - """ -@@ -150,11 +149,11 @@ class TestReplicaPromotionLevel1(ReplicaPromotionBase): - Firewall(self.replicas[0]).enable_services(["freeipa-ldap", - "freeipa-ldaps"]) - self.replicas[0].run_command(['ipa-replica-install', '-w', -- self.master.config.admin_password, -- '-n', self.master.domain.name, -- '-r', self.master.domain.realm, -- '--server', self.master.hostname, -- '-U']) -+ self.master.config.admin_password, -+ '-n', self.master.domain.name, -+ '-r', self.master.domain.realm, -+ '--server', self.master.hostname, -+ '-U']) - # Ensure that pkinit is properly configured, test for 7566 - result = self.replicas[0].run_command(['ipa-pkinit-manage', 'status']) - assert "PKINIT is enabled" in result.stdout_text -@@ -321,7 +320,7 @@ class TestWrongClientDomain(IntegrationTest): - result1 = client.run_command(['ipa-replica-install', '-U', '-w', - self.master.config.dirman_password], - raiseonerr=False) -- assert(result1.returncode == 0), ( -+ assert (result1.returncode == 0), ( - 'Failed to promote the client installed with the upcase domain name') - - def test_client_rollback(self): -@@ -355,6 +354,7 @@ class TestWrongClientDomain(IntegrationTest): - assert("An error occurred while removing SSSD" not in - result.stdout_text) - -+ - class TestRenewalMaster(IntegrationTest): - - topology = 'star' --- -2.34.1 - diff --git a/SOURCES/0008-webui-Allow-grace-login-limit.patch b/SOURCES/0008-webui-Allow-grace-login-limit.patch new file mode 100644 index 0000000..d5da4d3 --- /dev/null +++ b/SOURCES/0008-webui-Allow-grace-login-limit.patch @@ -0,0 +1,56 @@ +From 7a1e1d9f1cb13679c28f12d05b156a08bcc4d856 Mon Sep 17 00:00:00 2001 +From: Carla Martinez +Date: Fri, 29 Jul 2022 13:16:16 +0200 +Subject: [PATCH] webui: Allow grace login limit + +There was no support for setting the grace login limit on the WebUI. The +only way to so was only via CLI: + + `ipa pwpolicy-mod --gracelimit=2 global_policy` + +Thus, the grace login limit must be updated from the policy section and +this will reflect also on the user settings (under the 'Password Policy' +section) + +Fixes: https://pagure.io/freeipa/issue/9211 + +Signed-off-by: Carla Martinez +Reviewed-By: Florence Blanc-Renaud +--- + install/ui/src/freeipa/policy.js | 3 +++ + install/ui/src/freeipa/user.js | 5 +++++ + 2 files changed, 8 insertions(+) + +diff --git a/install/ui/src/freeipa/policy.js b/install/ui/src/freeipa/policy.js +index fa2028a52b1118b6125f91153280da0a2ffe0584..7ec103636ced0cce34997d81a02b25ba73bda33f 100644 +--- a/install/ui/src/freeipa/policy.js ++++ b/install/ui/src/freeipa/policy.js +@@ -72,6 +72,9 @@ return { + { + name: 'cospriority', + required: true ++ }, ++ { ++ name: 'passwordgracelimit' + } + ] + }] +diff --git a/install/ui/src/freeipa/user.js b/install/ui/src/freeipa/user.js +index a580db03599457eefd85f8c23d74c284946393c7..b47c97f72008f2f4e75b4cb88e9ff6756827b26e 100644 +--- a/install/ui/src/freeipa/user.js ++++ b/install/ui/src/freeipa/user.js +@@ -318,6 +318,11 @@ return { + label: '@mo-param:pwpolicy:krbpwdlockoutduration:label', + read_only: true, + measurement_unit: 'seconds' ++ }, ++ { ++ name: 'passwordgracelimit', ++ label: '@mo-param:pwpolicy:passwordgracelimit:label', ++ read_only: true + } + ] + }, +-- +2.37.2 + diff --git a/SOURCES/0009-Additional-tests-for-RSN-v3.patch b/SOURCES/0009-Additional-tests-for-RSN-v3.patch new file mode 100644 index 0000000..283550c --- /dev/null +++ b/SOURCES/0009-Additional-tests-for-RSN-v3.patch @@ -0,0 +1,226 @@ +From bfe074ed478c20a9537dc2a714bba50dbc2cd34f Mon Sep 17 00:00:00 2001 +From: Sumedh Sidhaye +Date: Fri, 5 Aug 2022 11:22:59 +0530 +Subject: [PATCH] Additional tests for RSN v3 + +New Tests include +TestRSNPKIConfig +TestRSNVault + +The new tests are just extending existing classes to be run +with random serial numbers enabled + +The tests also include a new method to check params set in CS.cfg for both CA and +KRA, and another test to check Random Serial Number version while +running `ipa ca-find` + +Added nightly definitions + +Related Ticket: https://pagure.io/freeipa/issue/2016 + +Signed-off-by: Sumedh Sidhaye +Reviewed-By: Rob Crittenden +Reviewed-By: Florence Blanc-Renaud +--- + .../nightly_ipa-4-10_latest.yaml | 24 +++++++++ + .../nightly_ipa-4-10_latest_selinux.yaml | 26 ++++++++++ + .../nightly_ipa-4-10_previous.yaml | 24 +++++++++ + .../test_random_serial_numbers.py | 51 ++++++++++++++++++- + ipatests/test_integration/test_vault.py | 4 +- + 5 files changed, 127 insertions(+), 2 deletions(-) + +diff --git a/ipatests/prci_definitions/nightly_ipa-4-10_latest.yaml b/ipatests/prci_definitions/nightly_ipa-4-10_latest.yaml +index 027b2a5b6c0b7ec3c3b5784ec4569661a06d4ed7..547320d258f51132266b56e9193533d2291c623c 100644 +--- a/ipatests/prci_definitions/nightly_ipa-4-10_latest.yaml ++++ b/ipatests/prci_definitions/nightly_ipa-4-10_latest.yaml +@@ -1821,3 +1821,27 @@ jobs: + template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl ++ ++ fedora-latest-ipa-4-10/test_random_serial_numbers_TestRSNPKIConfig: ++ requires: [fedora-latest-ipa-4-10/build] ++ priority: 50 ++ job: ++ class: RunPytest ++ args: ++ build_url: '{fedora-latest-ipa-4-10/build_url}' ++ test_suite: test_integration/test_random_serial_numbers.py::TestRSNPKIConfig ++ template: *ci-ipa-4-10-latest ++ timeout: 10800 ++ topology: *master_3repl_1client ++ ++ fedora-latest-ipa-4-10/test_random_serial_numbers_TestRSNVault: ++ requires: [fedora-latest-ipa-4-10/build] ++ priority: 50 ++ job: ++ class: RunPytest ++ args: ++ build_url: '{fedora-latest-ipa-4-10/build_url}' ++ test_suite: test_integration/test_random_serial_numbers.py::TestRSNVault ++ template: *ci-ipa-4-10-latest ++ timeout: 10800 ++ topology: *master_1repl +\ No newline at end of file +diff --git a/ipatests/prci_definitions/nightly_ipa-4-10_latest_selinux.yaml b/ipatests/prci_definitions/nightly_ipa-4-10_latest_selinux.yaml +index bcc17bef935666735bfb2c2e51209362a374b511..f6e5f1cff22de9db4df4577d1cd615499cf0fab3 100644 +--- a/ipatests/prci_definitions/nightly_ipa-4-10_latest_selinux.yaml ++++ b/ipatests/prci_definitions/nightly_ipa-4-10_latest_selinux.yaml +@@ -1966,3 +1966,29 @@ jobs: + template: *ci-ipa-4-10-latest + timeout: 5400 + topology: *master_1repl ++ ++ fedora-latest-ipa-4-10/test_random_serial_numbers_TestRSNPKIConfig: ++ requires: [fedora-latest-ipa-4-10/build] ++ priority: 50 ++ job: ++ class: RunPytest ++ args: ++ build_url: '{fedora-latest-ipa-4-10/build_url}' ++ selinux_enforcing: True ++ test_suite: test_integration/test_random_serial_numbers.py::TestRSNPKIConfig ++ template: *ci-ipa-4-10-latest ++ timeout: 10800 ++ topology: *master_3repl_1client ++ ++ fedora-latest-ipa-4-10/test_random_serial_numbers_TestRSNVault: ++ requires: [fedora-latest-ipa-4-10/build] ++ priority: 50 ++ job: ++ class: RunPytest ++ args: ++ build_url: '{fedora-latest-ipa-4-10/build_url}' ++ selinux_enforcing: True ++ test_suite: test_integration/test_random_serial_numbers.py::TestRSNVault ++ template: *ci-ipa-4-10-latest ++ timeout: 10800 ++ topology: *master_1repl +diff --git a/ipatests/prci_definitions/nightly_ipa-4-10_previous.yaml b/ipatests/prci_definitions/nightly_ipa-4-10_previous.yaml +index 37d38762e696a6394ef146a0e2b68bbc8ced515d..463f4b92fecc7fbc0be969de422352fb7baeb797 100644 +--- a/ipatests/prci_definitions/nightly_ipa-4-10_previous.yaml ++++ b/ipatests/prci_definitions/nightly_ipa-4-10_previous.yaml +@@ -1821,3 +1821,27 @@ jobs: + template: *ci-ipa-4-10-previous + timeout: 5400 + topology: *master_1repl ++ ++ fedora-previous-ipa-4-10/test_random_serial_numbers_TestRSNPKIConfig: ++ requires: [fedora-previous-ipa-4-10/build] ++ priority: 50 ++ job: ++ class: RunPytest ++ args: ++ build_url: '{fedora-previous-ipa-4-10/build_url}' ++ test_suite: test_integration/test_random_serial_numbers.py::TestRSNPKIConfig ++ template: *ci-ipa-4-10-previous ++ timeout: 10800 ++ topology: *master_3repl_1client ++ ++ fedora-previous-ipa-4-10/test_random_serial_numbers_TestRSNVault: ++ requires: [fedora-previous-ipa-4-10/build] ++ priority: 50 ++ job: ++ class: RunPytest ++ args: ++ build_url: '{fedora-previous-ipa-4-10/build_url}' ++ test_suite: test_integration/test_random_serial_numbers.py::TestRSNVault ++ template: *ci-ipa-4-10-previous ++ timeout: 10800 ++ topology: *master_1repl +diff --git a/ipatests/test_integration/test_random_serial_numbers.py b/ipatests/test_integration/test_random_serial_numbers.py +index c52cfa4ed50e2718791b0844d743fb240d26b365..ab58b1c622b010994ed93a17dd80cfd02095508d 100644 +--- a/ipatests/test_integration/test_random_serial_numbers.py ++++ b/ipatests/test_integration/test_random_serial_numbers.py +@@ -4,12 +4,15 @@ + + import pytest + ++from ipaplatform.paths import paths ++ ++from ipatests.pytest_ipa.integration import tasks + from ipatests.test_integration.test_installation import ( + TestInstallWithCA_DNS1, + TestInstallWithCA_KRA1, + ) + from ipatests.test_integration.test_caless import TestServerCALessToExternalCA +- ++from ipatests.test_integration.test_vault import TestInstallKRA + from ipatests.test_integration.test_commands import TestIPACommand + + +@@ -26,6 +29,18 @@ def pki_supports_RSNv3(host): + return False + + ++def check_pki_config_params(host): ++ # Check CS.cfg ++ try: ++ cs_cfg = host.get_file_contents(paths.CA_CS_CFG_PATH) ++ kra_cfg = host.get_file_contents(paths.KRA_CS_CFG_PATH) ++ assert "dbs.cert.id.generator=random".encode() in cs_cfg ++ assert "dbs.request.id.generator=random".encode() in cs_cfg ++ assert "dbs.key.id.generator=random".encode() in kra_cfg ++ except IOError: ++ pytest.skip("PKI config not present.Skipping test") ++ ++ + class TestInstallWithCA_DNS1_RSN(TestInstallWithCA_DNS1): + random_serial = True + +@@ -70,3 +85,37 @@ class TestServerCALessToExternalCA_RSN(TestServerCALessToExternalCA): + if not pki_supports_RSNv3(mh.master): + raise pytest.skip("RSNv3 not supported") + super(TestServerCALessToExternalCA_RSN, cls).uninstall(mh) ++ ++ ++class TestRSNPKIConfig(TestInstallWithCA_KRA1): ++ random_serial = True ++ num_replicas = 3 ++ ++ @classmethod ++ def install(cls, mh): ++ if not pki_supports_RSNv3(mh.master): ++ raise pytest.skip("RSNv3 not supported") ++ super(TestRSNPKIConfig, cls).install(mh) ++ ++ def test_check_pki_config(self): ++ check_pki_config_params(self.master) ++ check_pki_config_params(self.replicas[0]) ++ check_pki_config_params(self.replicas[1]) ++ ++ def test_check_rsn_version(self): ++ tasks.kinit_admin(self.master) ++ res = self.master.run_command(['ipa', 'ca-find']) ++ assert 'RSN Version: 3' in res.stdout_text ++ tasks.kinit_admin(self.replicas[0]) ++ res = self.replicas[0].run_command(['ipa', 'ca-find']) ++ assert 'RSN Version: 3' in res.stdout_text ++ ++ ++class TestRSNVault(TestInstallKRA): ++ random_serial = True ++ ++ @classmethod ++ def install(cls, mh): ++ if not pki_supports_RSNv3(mh.master): ++ raise pytest.skip("RSNv3 not supported") ++ super(TestRSNVault, cls).install(mh) +diff --git a/ipatests/test_integration/test_vault.py b/ipatests/test_integration/test_vault.py +index 548822d049070d6f9d42da772264eb24010fafda..6288e557f96cae60d031b44c49fbe830712eb7be 100644 +--- a/ipatests/test_integration/test_vault.py ++++ b/ipatests/test_integration/test_vault.py +@@ -33,7 +33,9 @@ class TestInstallKRA(IntegrationTest): + + @classmethod + def install(cls, mh): +- tasks.install_master(cls.master, setup_kra=True) ++ tasks.install_master(cls.master, ++ setup_kra=True, ++ random_serial=cls.random_serial) + # do not install KRA on replica, it is part of test + tasks.install_replica(cls.master, cls.replicas[0], setup_kra=False) + +-- +2.37.2 + diff --git a/SOURCES/0009-ipatests-webui-Tests-for-subordinate-ids.patch b/SOURCES/0009-ipatests-webui-Tests-for-subordinate-ids.patch deleted file mode 100644 index a8f7a4f..0000000 --- a/SOURCES/0009-ipatests-webui-Tests-for-subordinate-ids.patch +++ /dev/null @@ -1,209 +0,0 @@ -From edbd8f692a28fc999b92e9032614d366511db323 Mon Sep 17 00:00:00 2001 -From: Anuja More -Date: Mon, 6 Dec 2021 20:50:01 +0530 -Subject: [PATCH] ipatests: webui: Tests for subordinate ids. - -Added web-ui tests to verify where operations -using subordinate ids are working as expected. - -Related : https://pagure.io/freeipa/issue/8361 - -Signed-off-by: Anuja More -Reviewed-By: Michal Polovka -Reviewed-By: Florence Blanc-Renaud -Reviewed-By: Florence Blanc-Renaud ---- - ipatests/test_webui/test_subid.py | 141 ++++++++++++++++++++++++++++++ - ipatests/test_webui/ui_driver.py | 28 ++++++ - 2 files changed, 169 insertions(+) - create mode 100644 ipatests/test_webui/test_subid.py - -diff --git a/ipatests/test_webui/test_subid.py b/ipatests/test_webui/test_subid.py -new file mode 100644 -index 0000000000000000000000000000000000000000..26decdba03955f28ab21a41ccffae2a9af7b09fe ---- /dev/null -+++ b/ipatests/test_webui/test_subid.py -@@ -0,0 +1,141 @@ -+ -+""" -+Tests for subordinateid. -+""" -+ -+from ipatests.test_webui.ui_driver import UI_driver -+import ipatests.test_webui.data_config as config_data -+import ipatests.test_webui.data_user as user_data -+from ipatests.test_webui.ui_driver import screenshot -+import re -+ -+ -+class test_subid(UI_driver): -+ -+ def add_user(self, pkey, name, surname): -+ self.add_record('user', { -+ 'pkey': pkey, -+ 'add': [ -+ ('textbox', 'uid', pkey), -+ ('textbox', 'givenname', name), -+ ('textbox', 'sn', surname), -+ ] -+ }) -+ -+ def set_default_subid(self): -+ self.navigate_to_entity(config_data.ENTITY) -+ self.check_option('ipauserdefaultsubordinateid', 'checked') -+ self.facet_button_click('save') -+ -+ def get_user_count(self, user_pkey): -+ self.navigate_to_entity('subid', facet='search') -+ self.apply_search_filter(user_pkey) -+ self.wait_for_request() -+ return self.get_rows() -+ -+ @screenshot -+ def test_set_defaultsubid(self): -+ """ -+ Test to verify that enable/disable is working for -+ adding subids to new users. -+ """ -+ self.init_app() -+ self.add_record(user_data.ENTITY, user_data.DATA2) -+ self.navigate_to_entity(config_data.ENTITY) -+ # test subid can be enabled/disabled. -+ self.set_default_subid() -+ assert self.get_field_checked('ipauserdefaultsubordinateid') -+ self.set_default_subid() -+ assert not self.get_field_checked('ipauserdefaultsubordinateid') -+ -+ @screenshot -+ def test_user_defaultsubid(self): -+ """ -+ Test to verify that subid is generated for new user. -+ """ -+ self.init_app() -+ user_pkey = "some-user" -+ -+ self.set_default_subid() -+ assert self.get_field_checked('ipauserdefaultsubordinateid') -+ -+ before_count = self.get_user_count(user_pkey) -+ assert len(before_count) == 0 -+ -+ self.add_user(user_pkey, 'Some', 'User') -+ after_count = self.get_user_count(user_pkey) -+ assert len(after_count) == 1 -+ -+ @screenshot -+ def test_user_subid_mod_desc(self): -+ """ -+ Test to verify that auto-assigned subid description is modified. -+ """ -+ self.init_app() -+ self.navigate_to_record("some-user") -+ self.switch_to_facet('memberof_subid') -+ rows = self.get_rows() -+ self.navigate_to_row_record(rows[-1]) -+ self.fill_textbox("description", "some-user-subid-desc") -+ self.facet_button_click('save') -+ -+ @screenshot -+ def test_admin_subid(self): -+ """ -+ Test to verify that subid range is created with owner admin. -+ """ -+ self.init_app() -+ self.navigate_to_entity('subid', facet='search') -+ self.facet_button_click('add') -+ self.select_combobox('ipaowner', 'admin') -+ self.dialog_button_click('add') -+ self.wait(0.3) -+ self.assert_no_error_dialog() -+ -+ @screenshot -+ def test_admin_subid_negative(self): -+ """ -+ Test to verify that readding the subid fails with error. -+ """ -+ self.init_app() -+ self.navigate_to_entity('subid', facet='search') -+ self.facet_button_click('add') -+ self.select_combobox('ipaowner', 'admin') -+ self.dialog_button_click('add') -+ self.wait(0.3) -+ err_dialog = self.get_last_error_dialog(dialog_name='error_dialog') -+ text = self.get_text('.modal-body div p', err_dialog) -+ text = text.strip() -+ pattern = r'Subordinate id with with name .* already exists.' -+ assert re.search(pattern, text) is not None -+ self.close_all_dialogs() -+ -+ @screenshot -+ def test_user_subid_add(self): -+ """ -+ Test to verify that subid range is created for given user. -+ """ -+ self.init_app() -+ self.navigate_to_entity('subid', facet='search') -+ before_count = self.get_rows() -+ self.facet_button_click('add') -+ self.select_combobox('ipaowner', user_data.PKEY2) -+ self.dialog_button_click('add') -+ self.wait(0.3) -+ self.assert_no_error_dialog() -+ after_count = self.get_rows() -+ assert len(before_count) < len(after_count) -+ -+ @screenshot -+ def test_subid_del(self): -+ """ -+ Test to remove subordinate id for given user. -+ """ -+ self.init_app() -+ self.navigate_to_entity('subid', facet='search') -+ user_uid = self.get_record_pkey("some-user", "ipaowner", -+ table_name="ipauniqueid") -+ before_count = self.get_rows() -+ self.delete_record(user_uid, table_name="ipauniqueid") -+ after_count = self.get_rows() -+ assert len(before_count) > len(after_count) -diff --git a/ipatests/test_webui/ui_driver.py b/ipatests/test_webui/ui_driver.py -index 46fd512ae67bee65be55ae0d4dedec53cc29de97..77fd74e49593183a37fe735bedf2e0d6b9257ac7 100644 ---- a/ipatests/test_webui/ui_driver.py -+++ b/ipatests/test_webui/ui_driver.py -@@ -1151,6 +1151,34 @@ class UI_driver: - return row - return None - -+ def get_row_by_column_value(self, key, column_name, parent=None, -+ table_name=None): -+ """ -+ Get the first matched row element of a search table with given key -+ matched against selected column. None if not found -+ """ -+ rows = self.get_rows(parent, table_name) -+ s = "td div[name='%s']" % column_name -+ for row in rows: -+ has = self.find(s, By.CSS_SELECTOR, row) -+ if has.text == key: -+ return row -+ return None -+ -+ def get_record_pkey(self, key, column, parent=None, table_name=None): -+ """ -+ Get record pkey if value of column is known -+ """ -+ row = self.get_row_by_column_value(key, -+ column_name=column, -+ parent=parent, -+ table_name=table_name) -+ val = None -+ if row: -+ el = self.find("td input", By.CSS_SELECTOR, row) -+ val = el.get_attribute("value") -+ return val -+ - def navigate_to_row_record(self, row, pkey_column=None): - """ - Navigate to record by clicking on a link. --- -2.34.1 - diff --git a/SOURCES/0010-Config-plugin-return-EmptyModlist-when-no-change-is-.patch b/SOURCES/0010-Config-plugin-return-EmptyModlist-when-no-change-is-.patch deleted file mode 100644 index c71d334..0000000 --- a/SOURCES/0010-Config-plugin-return-EmptyModlist-when-no-change-is-.patch +++ /dev/null @@ -1,39 +0,0 @@ -From b9c42fed9b6f60801f908c368d0d97a2a69f7bb2 Mon Sep 17 00:00:00 2001 -From: Florence Blanc-Renaud -Date: Wed, 15 Dec 2021 10:47:02 +0100 -Subject: [PATCH] Config plugin: return EmptyModlist when no change is applied - -When ipa config-mod is called with the option --enable-sid, -the code needs to trap EmptyModlist exception (it is expected -that no LDAP attribute is modified by this operation). -The code had a flaw and was checking: - 'enable_sid' in options -instead of - options['enable_sid'] - -"'enable_sid' in options" always returns true as this option -is a Flag with a default value, hence always present even if -not specified on the command line. - -Fixes: https://pagure.io/freeipa/issue/9063 -Reviewed-By: Rob Crittenden ---- - ipaserver/plugins/config.py | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/ipaserver/plugins/config.py b/ipaserver/plugins/config.py -index eae401fc3f7a1b7628eb211db206ba4bc2b36754..24446beb0b03a1510a96316eae915780817db102 100644 ---- a/ipaserver/plugins/config.py -+++ b/ipaserver/plugins/config.py -@@ -707,7 +707,7 @@ class config_mod(LDAPUpdate): - if (isinstance(exc, errors.EmptyModlist) and - call_func.__name__ == 'update_entry' and - ('ca_renewal_master_server' in options or -- 'enable_sid' in options)): -+ options['enable_sid'])): - return - - super(config_mod, self).exc_callback( --- -2.34.1 - diff --git a/SOURCES/0010-check_repl_update-in-progress-is-a-boolean.patch b/SOURCES/0010-check_repl_update-in-progress-is-a-boolean.patch new file mode 100644 index 0000000..136ad91 --- /dev/null +++ b/SOURCES/0010-check_repl_update-in-progress-is-a-boolean.patch @@ -0,0 +1,35 @@ +From 2003eb6b3d4a27a5de5eaa79418f115dd99886cd Mon Sep 17 00:00:00 2001 +From: Florence Blanc-Renaud +Date: Sun, 7 Aug 2022 12:44:47 +0200 +Subject: [PATCH] check_repl_update: in progress is a boolean + +With the fix for https://pagure.io/freeipa/issue/9171, +nsds5replicaUpdateInProgress is now handled as a boolean. +One remaining occurrence was still handling it as a string +and calling lower() on its value. + +Replace with direct boolean comparison. + +Fixes: https://pagure.io/freeipa/issue/9218 +Signed-off-by: Florence Blanc-Renaud +Reviewed-By: Alexander Bokovoy +--- + ipaserver/install/replication.py | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/ipaserver/install/replication.py b/ipaserver/install/replication.py +index 16be3760cb14bfeb1cc9a761400752071639dc7c..9d9aa1c4bfc99109c0cf1e6d1619ec1b38e20c02 100644 +--- a/ipaserver/install/replication.py ++++ b/ipaserver/install/replication.py +@@ -1152,7 +1152,7 @@ class ReplicationManager: + except (ValueError, TypeError, KeyError): + end = 0 + # incremental update is done if inprogress is false and end >= start +- done = inprogress and inprogress.lower() == 'false' and start <= end ++ done = inprogress is not None and not inprogress and start <= end + logger.info("Replication Update in progress: %s: status: %s: " + "start: %d: end: %d", + inprogress, status, start, end) +-- +2.37.2 + diff --git a/SOURCES/0011-config-plugin-add-a-test-ensuring-EmptyModlist-is-re.patch b/SOURCES/0011-config-plugin-add-a-test-ensuring-EmptyModlist-is-re.patch deleted file mode 100644 index 2bdb49c..0000000 --- a/SOURCES/0011-config-plugin-add-a-test-ensuring-EmptyModlist-is-re.patch +++ /dev/null @@ -1,36 +0,0 @@ -From cd735099e86304294217147ed578ac902fcf3dd3 Mon Sep 17 00:00:00 2001 -From: Florence Blanc-Renaud -Date: Wed, 15 Dec 2021 10:51:05 +0100 -Subject: [PATCH] config plugin: add a test ensuring EmptyModlist is returned - -Add a test to test_config_plugin, that calls ipa config-mod -with the same value as already present in LDAP. -The call must return EmptyModlist. - -Related: https://pagure.io/freeipa/issue/9063 -Reviewed-By: Rob Crittenden ---- - ipatests/test_xmlrpc/test_config_plugin.py | 9 +++++++++ - 1 file changed, 9 insertions(+) - -diff --git a/ipatests/test_xmlrpc/test_config_plugin.py b/ipatests/test_xmlrpc/test_config_plugin.py -index e981bb4a03d39de450fc459d4b1ce4b636c19029..a8ec9f0e558d7efa091b50deca9fa7ca59fd7b11 100644 ---- a/ipatests/test_xmlrpc/test_config_plugin.py -+++ b/ipatests/test_xmlrpc/test_config_plugin.py -@@ -312,4 +312,13 @@ class test_config(Declarative): - 'value': None, - }, - ), -+ dict( -+ desc='Set the value to the already set value, no modifications', -+ command=( -+ 'config_mod', [], { -+ 'ipasearchrecordslimit': u'100', -+ }, -+ ), -+ expected=errors.EmptyModlist(), -+ ), - ] --- -2.34.1 - diff --git a/SOURCES/0011-ipatests-Fix-expected-object-classes.patch b/SOURCES/0011-ipatests-Fix-expected-object-classes.patch new file mode 100644 index 0000000..58fc023 --- /dev/null +++ b/SOURCES/0011-ipatests-Fix-expected-object-classes.patch @@ -0,0 +1,82 @@ +From b6520bef2ef05dd87636d8b57e3247d451af81d8 Mon Sep 17 00:00:00 2001 +From: Florence Blanc-Renaud +Date: Tue, 14 Dec 2021 16:33:29 +0100 +Subject: [PATCH] ipatests: Fix expected object classes + +Because the sidgen plugin is a postop plugin, it is not +always triggered before the result of an ADD is returned +and the objectclasses of the user may / may not contain +ipantuserattrs. +Fix the expected object classes. + +Related: https://pagure.io/freeipa/issue/9062 +Signed-off-by: Florence Blanc-Renaud +Reviewed-By: Rob Crittenden +Reviewed-By: Alexander Bokovoy +Reviewed-By: Stanislav Levin +--- + ipatests/test_xmlrpc/test_user_plugin.py | 20 ++++++++++++++------ + 1 file changed, 14 insertions(+), 6 deletions(-) + +diff --git a/ipatests/test_xmlrpc/test_user_plugin.py b/ipatests/test_xmlrpc/test_user_plugin.py +index 74d78b0c6d75590640da1357da1f9f4570307878..c156a8793c5765df96029753f4a278e961d4e895 100644 +--- a/ipatests/test_xmlrpc/test_user_plugin.py ++++ b/ipatests/test_xmlrpc/test_user_plugin.py +@@ -125,7 +125,9 @@ def user_npg(request, group): + del tracker.attrs['mepmanagedentry'] + tracker.attrs.update( + description=[], memberof_group=[group.cn], +- objectclass=objectclasses.user_base + [u'ipantuserattrs'], ++ objectclass=fuzzy_set_optional_oc( ++ objectclasses.user_base, 'ipantuserattrs' ++ ), + ) + return tracker.make_fixture(request) + +@@ -139,7 +141,9 @@ def user_npg2(request, group): + del tracker.attrs['mepmanagedentry'] + tracker.attrs.update( + gidnumber=[u'1000'], description=[], memberof_group=[group.cn], +- objectclass=objectclasses.user_base + [u'ipantuserattrs'], ++ objectclass=fuzzy_set_optional_oc( ++ objectclasses.user_base, 'ipantuserattrs' ++ ), + ) + return tracker.make_fixture(request) + +@@ -151,8 +155,9 @@ def user_radius(request, xmlrpc_setup): + sn=u'radiususer1', + ipatokenradiususername=u'radiususer') + tracker.track_create() +- tracker.attrs.update( +- objectclass=objectclasses.user + [u'ipatokenradiusproxyuser'] ++ tracker.attrs.update(objectclass=fuzzy_set_optional_oc( ++ objectclasses.user + [u'ipatokenradiusproxyuser'], ++ 'ipantuserattrs'), + ) + return tracker.make_fixture(request) + +@@ -647,7 +652,8 @@ class TestCreate(XMLRPC_test): + testuser.attrs.update(gidnumber=[u'1000']) + testuser.attrs.update( + description=[], +- objectclass=objectclasses.user_base + [u'ipantuserattrs'] ++ objectclass=fuzzy_set_optional_oc( ++ objectclasses.user_base, 'ipantuserattrs'), + ) + command = testuser.make_create_command() + result = command() +@@ -865,7 +871,9 @@ class TestUserWithUPGDisabled(XMLRPC_test): + testuser.attrs.update(gidnumber=[u'1000']) + testuser.attrs.update( + description=[], +- objectclass=objectclasses.user_base + [u'ipantuserattrs'], ++ objectclass=fuzzy_set_optional_oc( ++ objectclasses.user_base, 'ipantuserattrs' ++ ), + ) + command = testuser.make_create_command() + result = command() +-- +2.37.2 + diff --git a/SOURCES/0012-doc-Update-LDAP-grace-period-design-with-default-val.patch b/SOURCES/0012-doc-Update-LDAP-grace-period-design-with-default-val.patch new file mode 100644 index 0000000..573e0ca --- /dev/null +++ b/SOURCES/0012-doc-Update-LDAP-grace-period-design-with-default-val.patch @@ -0,0 +1,50 @@ +From 1aa39529cda4ab9620539dbad705cedd23c21b42 Mon Sep 17 00:00:00 2001 +From: Rob Crittenden +Date: Thu, 18 Aug 2022 08:21:58 -0400 +Subject: [PATCH] doc: Update LDAP grace period design with default values + +New group password policies will get -1 (unlimited) on creation +by default. + +Existing group password policies will remain untouched and +those created prior will be treated as no BIND allowed. + +Fixes: https://pagure.io/freeipa/issue/9212 + +Signed-off-by: Rob Crittenden +Reviewed-By: Florence Blanc-Renaud +--- + doc/designs/ldap_grace_period.md | 17 ++++++++++++++++- + 1 file changed, 16 insertions(+), 1 deletion(-) + +diff --git a/doc/designs/ldap_grace_period.md b/doc/designs/ldap_grace_period.md +index 4b9db34247c1446aec3f5bcce7dfa1bd8a2bd359..e26aedda976b19f3ba26593ba3b3c06c30506a21 100644 +--- a/doc/designs/ldap_grace_period.md ++++ b/doc/designs/ldap_grace_period.md +@@ -51,7 +51,22 @@ The basic flow is: + + On successful password reset (by anyone) reset the user's passwordGraceUserTime to 0. + +-The default value on install/upgrade will be -1 to retail existing behavior. ++Range values for passwordgracelimit are: ++ ++-1 : password grace checking is disabled ++ 0 : no grace BIND are allowed at all post-expiration ++ 1..MAXINT: the number of BIND allowed post-expiration ++ ++The default value for the global policy on install/upgrade will be -1 to ++retain existing behavior. ++ ++New group password policies will default to -1 to retain previous ++behavior. ++ ++Existing group policies with no grace limit set are updated to use ++the default unlimited value, -1. This is done because lack of value in ++LDAP is treated as 0 so any existing group policies would not allow ++post-expiration BIND so this will avoid confusion. + + The per-user attempts will not be replicated. + +-- +2.37.2 + diff --git a/SOURCES/0012-ipatests-webui-Use-safe-loader-for-loading-YAML-conf.patch b/SOURCES/0012-ipatests-webui-Use-safe-loader-for-loading-YAML-conf.patch deleted file mode 100644 index 4b7c9b8..0000000 --- a/SOURCES/0012-ipatests-webui-Use-safe-loader-for-loading-YAML-conf.patch +++ /dev/null @@ -1,36 +0,0 @@ -From 419d7fd6e5a9ed2d356ad05eef1043309f5646ef Mon Sep 17 00:00:00 2001 -From: Michal Polovka -Date: Fri, 7 Jan 2022 12:12:26 +0100 -Subject: [PATCH] ipatests: webui: Use safe-loader for loading YAML - configuration file - -FullLoader class for YAML loader was introduced in version 5.1 which -also deprecated default loader. SafeLoader, however, stays consistent -across the versions and brings added security. - -This fix is necessary as PyYAML > 5.1 is not available in downstream. - -Related: https://pagure.io/freeipa/issue/9009 - -Signed-off-by: Michal Polovka -Reviewed-By: Rob Crittenden ---- - ipatests/test_webui/ui_driver.py | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/ipatests/test_webui/ui_driver.py b/ipatests/test_webui/ui_driver.py -index 77fd74e49593183a37fe735bedf2e0d6b9257ac7..519efee9bba3de2114d22865a08df87f9b5f348a 100644 ---- a/ipatests/test_webui/ui_driver.py -+++ b/ipatests/test_webui/ui_driver.py -@@ -192,7 +192,7 @@ class UI_driver: - if not NO_YAML and os.path.isfile(path): - try: - with open(path, 'r') as conf: -- cls.config = yaml.load(stream=conf, Loader=yaml.FullLoader) -+ cls.config = yaml.safe_load(stream=conf) - except yaml.YAMLError as e: - pytest.skip("Invalid Web UI config.\n%s" % e) - except IOError as e: --- -2.34.1 - diff --git a/SOURCES/0013-Added-test-automation-for-SHA384withRSA-CSR-support.patch b/SOURCES/0013-Added-test-automation-for-SHA384withRSA-CSR-support.patch deleted file mode 100644 index 1fe86c1..0000000 --- a/SOURCES/0013-Added-test-automation-for-SHA384withRSA-CSR-support.patch +++ /dev/null @@ -1,107 +0,0 @@ -From 0edf915efbb39fac45c784171dd715ec6b28861a Mon Sep 17 00:00:00 2001 -From: Sumedh Sidhaye -Date: Fri, 14 Jan 2022 19:55:13 +0530 -Subject: [PATCH] Added test automation for SHA384withRSA CSR support - -Scenario 1: -Setup master with --ca-signing-algorithm=SHA384withRSA -Run certutil and check Signing Algorithm - -Scenario 2: -Setup a master -Stop services -Modify default.params.signingAlg in CS.cfg -Restart services -Resubmit cert (Resubmitted cert should have new Algorithm) - -Pagure Link: https://pagure.io/freeipa/issue/8906 - -Signed-off-by: Sumedh Sidhaye -Reviewed-By: Florence Blanc-Renaud -Reviewed-By: Rob Crittenden -Reviewed-By: Antonio Torres ---- - .../test_integration/test_installation.py | 63 +++++++++++++++++++ - 1 file changed, 63 insertions(+) - -diff --git a/ipatests/test_integration/test_installation.py b/ipatests/test_integration/test_installation.py -index 0947241ae2738419c4855e2517670c9033e634f0..f2d372c0c0356f244971a2af808db45dd6c8cb5b 100644 ---- a/ipatests/test_integration/test_installation.py -+++ b/ipatests/test_integration/test_installation.py -@@ -34,6 +34,7 @@ from ipatests.pytest_ipa.integration import tasks - from ipatests.pytest_ipa.integration.env_config import get_global_config - from ipatests.test_integration.base import IntegrationTest - from ipatests.test_integration.test_caless import CALessBase, ipa_certs_cleanup -+from ipatests.test_integration.test_cert import get_certmonger_fs_id - from ipaplatform import services - - -@@ -1916,3 +1917,65 @@ class TestInstallWithoutNamed(IntegrationTest): - tasks.install_replica( - self.master, self.replicas[0], setup_ca=False, setup_dns=False - ) -+ -+ -+class TestInstallwithSHA384withRSA(IntegrationTest): -+ num_replicas = 0 -+ -+ def test_install_master_withalgo_sha384withrsa(self, server_cleanup): -+ tasks.install_master( -+ self.master, -+ extra_args=['--ca-signing-algorithm=SHA384withRSA'], -+ ) -+ -+ # check Signing Algorithm post installation -+ dashed_domain = self.master.domain.realm.replace(".", '-') -+ cmd_args = ['certutil', '-L', '-d', -+ '/etc/dirsrv/slapd-{}/'.format(dashed_domain), -+ '-n', 'Server-Cert'] -+ result = self.master.run_command(cmd_args) -+ assert 'SHA-384 With RSA Encryption' in result.stdout_text -+ -+ def test_install_master_modify_existing(self, server_cleanup): -+ """ -+ Setup a master -+ Stop services -+ Modify default.params.signingAlg in CS.cfg -+ Restart services -+ Resubmit cert (Resubmitted cert should have new Algorithm) -+ """ -+ tasks.install_master(self.master) -+ self.master.run_command(['ipactl', 'stop']) -+ cs_cfg_content = self.master.get_file_contents(paths.CA_CS_CFG_PATH, -+ encoding='utf-8') -+ new_lines = [] -+ replace_str = "ca.signing.defaultSigningAlgorithm=SHA384withRSA" -+ ocsp_rep_str = "ca.ocsp_signing.defaultSigningAlgorithm=SHA384withRSA" -+ for line in cs_cfg_content.split('\n'): -+ if line.startswith('ca.signing.defaultSigningAlgorithm'): -+ new_lines.append(replace_str) -+ elif line.startswith('ca.ocsp_signing.defaultSigningAlgorithm'): -+ new_lines.append(ocsp_rep_str) -+ else: -+ new_lines.append(line) -+ self.master.put_file_contents(paths.CA_CS_CFG_PATH, -+ '\n'.join(new_lines)) -+ self.master.run_command(['ipactl', 'start']) -+ -+ cmd = ['getcert', 'list', '-f', paths.RA_AGENT_PEM] -+ result = self.master.run_command(cmd) -+ request_id = get_certmonger_fs_id(result.stdout_text) -+ -+ # resubmit RA Agent cert -+ cmd = ['getcert', 'resubmit', '-f', paths.RA_AGENT_PEM] -+ self.master.run_command(cmd) -+ -+ tasks.wait_for_certmonger_status(self.master, -+ ('CA_WORKING', 'MONITORING'), -+ request_id) -+ -+ cmd_args = ['openssl', 'x509', '-in', -+ paths.RA_AGENT_PEM, '-noout', '-text'] -+ result = self.master.run_command(cmd_args) -+ assert_str = 'Signature Algorithm: sha384WithRSAEncryption' -+ assert assert_str in result.stdout_text --- -2.34.1 - diff --git a/SOURCES/0013-Set-default-gracelimit-on-group-password-policies-to.patch b/SOURCES/0013-Set-default-gracelimit-on-group-password-policies-to.patch new file mode 100644 index 0000000..5020f90 --- /dev/null +++ b/SOURCES/0013-Set-default-gracelimit-on-group-password-policies-to.patch @@ -0,0 +1,74 @@ +From 45e6d49b94da78cd82eb016b3266a17a1359a087 Mon Sep 17 00:00:00 2001 +From: Rob Crittenden +Date: Thu, 4 Aug 2022 12:04:22 -0400 +Subject: [PATCH] Set default gracelimit on group password policies to -1 + +This will retain previous behavior of unlimited LDAP BIND +post-expiration. + +Fixes: https://pagure.io/freeipa/issue/9212 + +Signed-off-by: Rob Crittenden +Reviewed-By: Florence Blanc-Renaud +--- + API.txt | 2 +- + ipaserver/plugins/pwpolicy.py | 2 ++ + ipatests/test_xmlrpc/test_pwpolicy_plugin.py | 2 ++ + 3 files changed, 5 insertions(+), 1 deletion(-) + +diff --git a/API.txt b/API.txt +index 66929b921b197e27ede847fb6b10bf1e44c3464a..210bfc4950e6a7346dbdd6e29d1096b2f8750b1e 100644 +--- a/API.txt ++++ b/API.txt +@@ -4076,7 +4076,7 @@ option: Int('krbpwdlockoutduration?', cli_name='lockouttime') + option: Int('krbpwdmaxfailure?', cli_name='maxfail') + option: Int('krbpwdmindiffchars?', cli_name='minclasses') + option: Int('krbpwdminlength?', cli_name='minlength') +-option: Int('passwordgracelimit?', cli_name='gracelimit', default=-1) ++option: Int('passwordgracelimit?', autofill=True, cli_name='gracelimit', default=-1) + option: Flag('raw', autofill=True, cli_name='raw', default=False) + option: Str('setattr*', cli_name='setattr') + option: Str('version?') +diff --git a/ipaserver/plugins/pwpolicy.py b/ipaserver/plugins/pwpolicy.py +index 4428aede2dcc7a2a0b6128bf7f58eb47e4a8e07d..f4ebffd5c8f06a53b6c4d5e48ff6eeafa240e3a4 100644 +--- a/ipaserver/plugins/pwpolicy.py ++++ b/ipaserver/plugins/pwpolicy.py +@@ -408,6 +408,7 @@ class pwpolicy(LDAPObject): + minvalue=-1, + maxvalue=Int.MAX_UINT32, + default=-1, ++ autofill=True, + ), + ) + +@@ -539,6 +540,7 @@ class pwpolicy_add(LDAPCreate): + keys[-1], krbpwdpolicyreference=dn, + cospriority=options.get('cospriority') + ) ++ + return dn + + def post_callback(self, ldap, dn, entry_attrs, *keys, **options): +diff --git a/ipatests/test_xmlrpc/test_pwpolicy_plugin.py b/ipatests/test_xmlrpc/test_pwpolicy_plugin.py +index 8eee69c185b15be72870050ed247f252c72d1c66..fc785223bfe56269ad8b211e8f1c3ac9f4064c3c 100644 +--- a/ipatests/test_xmlrpc/test_pwpolicy_plugin.py ++++ b/ipatests/test_xmlrpc/test_pwpolicy_plugin.py +@@ -387,6 +387,7 @@ class test_pwpolicy_mod_cospriority(Declarative): + krbpwdhistorylength=[u'10'], + krbpwdmindiffchars=[u'3'], + krbpwdminlength=[u'8'], ++ passwordgracelimit=[u'-1'], + objectclass=objectclasses.pwpolicy, + ), + summary=None, +@@ -417,6 +418,7 @@ class test_pwpolicy_mod_cospriority(Declarative): + krbpwdhistorylength=[u'10'], + krbpwdmindiffchars=[u'3'], + krbpwdminlength=[u'8'], ++ passwordgracelimit=[u'-1'], + ), + summary=None, + value=u'ipausers', +-- +2.37.2 + diff --git a/SOURCES/0014-Set-default-on-group-pwpolicy-with-no-grace-limit-in.patch b/SOURCES/0014-Set-default-on-group-pwpolicy-with-no-grace-limit-in.patch new file mode 100644 index 0000000..7582225 --- /dev/null +++ b/SOURCES/0014-Set-default-on-group-pwpolicy-with-no-grace-limit-in.patch @@ -0,0 +1,106 @@ +From de6f074538f6641fd9d84bed204a3d4d50eccbe5 Mon Sep 17 00:00:00 2001 +From: Rob Crittenden +Date: Thu, 4 Aug 2022 12:04:41 -0400 +Subject: [PATCH] Set default on group pwpolicy with no grace limit in upgrade + +If an existing group policy lacks a password grace limit +update it to -1 on upgrade. + +Fixes: https://pagure.io/freeipa/issue/9212 + +Signed-off-by: Rob Crittenden +Reviewed-By: Florence Blanc-Renaud +--- + .../updates/90-post_upgrade_plugins.update | 1 + + ipaserver/install/plugins/update_pwpolicy.py | 66 +++++++++++++++++++ + 2 files changed, 67 insertions(+) + +diff --git a/install/updates/90-post_upgrade_plugins.update b/install/updates/90-post_upgrade_plugins.update +index c7ec71d492b0ac0e7641d586b7e7fa7501743bc2..6fe91aa6c6310a69a7f0feb1ad62243945db67f9 100644 +--- a/install/updates/90-post_upgrade_plugins.update ++++ b/install/updates/90-post_upgrade_plugins.update +@@ -26,6 +26,7 @@ plugin: update_ra_cert_store + plugin: update_mapping_Guests_to_nobody + plugin: fix_kra_people_entry + plugin: update_pwpolicy ++plugin: update_pwpolicy_grace + + # last + # DNS version 1 +diff --git a/ipaserver/install/plugins/update_pwpolicy.py b/ipaserver/install/plugins/update_pwpolicy.py +index dca44ce4369dfc11f83a412a1249bb045d46713f..4185f034313bd49ca68e86c620043af6ead5f6d6 100644 +--- a/ipaserver/install/plugins/update_pwpolicy.py ++++ b/ipaserver/install/plugins/update_pwpolicy.py +@@ -78,3 +78,69 @@ class update_pwpolicy(Updater): + return False, [] + + return False, [] ++ ++ ++@register() ++class update_pwpolicy_grace(Updater): ++ """ ++ Ensure all group policies have a grace period set. ++ """ ++ ++ def execute(self, **options): ++ ldap = self.api.Backend.ldap2 ++ ++ base_dn = DN(('cn', self.api.env.realm), ('cn', 'kerberos'), ++ self.api.env.basedn) ++ search_filter = ( ++ "(&(objectClass=krbpwdpolicy)(!(passwordgracelimit=*)))" ++ ) ++ ++ while True: ++ # Run the search in loop to avoid issues when LDAP limits are hit ++ # during update ++ ++ try: ++ (entries, truncated) = ldap.find_entries( ++ search_filter, ['objectclass'], base_dn, time_limit=0, ++ size_limit=0) ++ ++ except errors.EmptyResult: ++ logger.debug("update_pwpolicy: no policies without " ++ "passwordgracelimit set") ++ return False, [] ++ ++ except errors.ExecutionError as e: ++ logger.error("update_pwpolicy: cannot retrieve list " ++ "of policies missing passwordgracelimit: %s", e) ++ return False, [] ++ ++ logger.debug("update_pwpolicy: found %d " ++ "policies to update, truncated: %s", ++ len(entries), truncated) ++ ++ error = False ++ ++ for entry in entries: ++ # Set unlimited BIND by default ++ entry['passwordgracelimit'] = -1 ++ try: ++ ldap.update_entry(entry) ++ except (errors.EmptyModlist, errors.NotFound): ++ pass ++ except errors.ExecutionError as e: ++ logger.debug("update_pwpolicy: cannot " ++ "update policy: %s", e) ++ error = True ++ ++ if error: ++ # Exit loop to avoid infinite cycles ++ logger.error("update_pwpolicy: error(s) " ++ "detected during pwpolicy update") ++ return False, [] ++ ++ elif not truncated: ++ # All affected entries updated, exit the loop ++ logger.debug("update_pwpolicy: all policies updated") ++ return False, [] ++ ++ return False, [] +-- +2.37.2 + diff --git a/SOURCES/0014-ipa-pki-proxy.conf-provide-access-to-kra-admin-kra-g.patch b/SOURCES/0014-ipa-pki-proxy.conf-provide-access-to-kra-admin-kra-g.patch deleted file mode 100644 index f8593f8..0000000 --- a/SOURCES/0014-ipa-pki-proxy.conf-provide-access-to-kra-admin-kra-g.patch +++ /dev/null @@ -1,44 +0,0 @@ -From 9bae5492270d8b695999cd82831cbee62b04626b Mon Sep 17 00:00:00 2001 -From: Florence Blanc-Renaud -Date: Fri, 28 Jan 2022 16:58:42 +0100 -Subject: [PATCH] ipa-pki-proxy.conf: provide access to - /kra/admin/kra/getStatus - -The access to /kra/admin/kra/getStatus will be needed -in order to fix pki-healthcheck. -Note that this commit is a pre-requisite for the fix -to be done on PKI side. No test added since the full -integration test already exists in test_replica_promotion.py, -in TestHiddenReplicaPromotion::test_ipahealthcheck_hidden_replica - -Fixes: https://pagure.io/freeipa/issue/9099 -Related: https://pagure.io/freeipa/issue/8582 - -Signed-off-by: Florence Blanc-Renaud -Reviewed-By: Rob Crittenden ---- - install/share/ipa-pki-proxy.conf.template | 4 ++-- - 1 file changed, 2 insertions(+), 2 deletions(-) - -diff --git a/install/share/ipa-pki-proxy.conf.template b/install/share/ipa-pki-proxy.conf.template -index 96708482cdac128930efaca33a806daaeba68042..7a46f20b9058bab63238f56295a92533c232d47a 100644 ---- a/install/share/ipa-pki-proxy.conf.template -+++ b/install/share/ipa-pki-proxy.conf.template -@@ -1,4 +1,4 @@ --# VERSION 16 - DO NOT REMOVE THIS LINE -+# VERSION 17 - DO NOT REMOVE THIS LINE - - ProxyRequests Off - -@@ -11,7 +11,7 @@ ProxyRequests Off - - - # matches for admin port and installer -- -+ - SSLOptions +StdEnvVars +ExportCertData +StrictRequire +OptRenegotiate - SSLVerifyClient none - ProxyPassMatch ajp://localhost:$DOGTAG_PORT $DOGTAG_AJP_SECRET --- -2.34.1 - diff --git a/SOURCES/0015-ipa-kdb-do-not-remove-keys-for-hardened-auth-enabled.patch b/SOURCES/0015-ipa-kdb-do-not-remove-keys-for-hardened-auth-enabled.patch deleted file mode 100644 index c9be53f..0000000 --- a/SOURCES/0015-ipa-kdb-do-not-remove-keys-for-hardened-auth-enabled.patch +++ /dev/null @@ -1,59 +0,0 @@ -From 6d70421f57d0eca066a922e09416ef7195ee96d4 Mon Sep 17 00:00:00 2001 -From: Julien Rische -Date: Tue, 1 Feb 2022 16:43:09 +0100 -Subject: [PATCH] ipa-kdb: do not remove keys for hardened auth-enabled users - -Since 5d51ae5, principal keys were dropped in case user auth indicator -was not including password. Thereafter, the key removal behavior was -removed by 15ff9c8 in the context of the kdcpolicy plugin introduction. -Support for hardened pre-auth methods (FAST and SPAKE) was added in -d057040, and the removal of principal keys was restored afterwards by -f0d12b7, but not taking the new hardened auth indicator into account. - -Fixes: https://pagure.io/freeipa/issue/9065 -Related to: https://pagure.io/freeipa/issue/8001 - -Signed-off-by: Julien Rische -Reviewed-By: Alexander Bokovoy -Reviewed-By: Francisco Trivino ---- - daemons/ipa-kdb/ipa_kdb_principals.c | 23 ++++++++++++----------- - 1 file changed, 12 insertions(+), 11 deletions(-) - -diff --git a/daemons/ipa-kdb/ipa_kdb_principals.c b/daemons/ipa-kdb/ipa_kdb_principals.c -index 15f3df4fee8bdfadf60a4b1d9a5115407d1bb294..0d0d3748ce63a8252e84220d036140818ffdfb6e 100644 ---- a/daemons/ipa-kdb/ipa_kdb_principals.c -+++ b/daemons/ipa-kdb/ipa_kdb_principals.c -@@ -788,17 +788,18 @@ static krb5_error_code ipadb_parse_ldap_entry(krb5_context kcontext, - &res_key_data, &result, &mkvno); - switch (ret) { - case 0: -- /* Only set a principal's key if password auth can be used. Otherwise -- * the KDC would add pre-authentication methods to the NEEDED_PREAUTH -- * reply for AS-REQs which indicate the password authentication is -- * available. This might confuse applications like e.g. SSSD which try -- * to determine suitable authentication methods and corresponding -- * prompts with the help of MIT Kerberos' responder interface which -- * acts on the returned pre-authentication methods. A typical example -- * is enforced OTP authentication where of course keys are available -- * for the first factor but password authentication should not be -- * advertised by the KDC. */ -- if (!(ua & IPADB_USER_AUTH_PASSWORD) && (ua != IPADB_USER_AUTH_NONE)) { -+ /* Only set a principal's key if password or hardened auth can be used. -+ * Otherwise the KDC would add pre-authentication methods to the -+ * NEEDED_PREAUTH reply for AS-REQs which indicate the password -+ * authentication is available. This might confuse applications like -+ * e.g. SSSD which try to determine suitable authentication methods and -+ * corresponding prompts with the help of MIT Kerberos' responder -+ * interface which acts on the returned pre-authentication methods. A -+ * typical example is enforced OTP authentication where of course keys -+ * are available for the first factor but password authentication -+ * should not be advertised by the KDC. */ -+ if (!(ua & (IPADB_USER_AUTH_PASSWORD | IPADB_USER_AUTH_HARDENED)) && -+ (ua != IPADB_USER_AUTH_NONE)) { - /* This is the same behavior as ENOENT below. */ - ipa_krb5_free_key_data(res_key_data, result); - break; --- -2.34.1 - diff --git a/SOURCES/0016-ipatests-add-case-for-hardened-only-ticket-policy.patch b/SOURCES/0016-ipatests-add-case-for-hardened-only-ticket-policy.patch deleted file mode 100644 index ba0214e..0000000 --- a/SOURCES/0016-ipatests-add-case-for-hardened-only-ticket-policy.patch +++ /dev/null @@ -1,63 +0,0 @@ -From 294ae35a61e6ca8816b261c57508e4be21221864 Mon Sep 17 00:00:00 2001 -From: Julien Rische -Date: Tue, 1 Feb 2022 19:38:29 +0100 -Subject: [PATCH] ipatests: add case for hardened-only ticket policy - -Signed-off-by: Julien Rische -Reviewed-By: Alexander Bokovoy -Reviewed-By: Francisco Trivino ---- - ipatests/test_integration/test_krbtpolicy.py | 30 ++++++++++++++++++-- - 1 file changed, 28 insertions(+), 2 deletions(-) - -diff --git a/ipatests/test_integration/test_krbtpolicy.py b/ipatests/test_integration/test_krbtpolicy.py -index 63e75ae67f493352b1d3a611e7b079d914a7b253..9489fbc97b7836aecf491b57627f254d4849eb56 100644 ---- a/ipatests/test_integration/test_krbtpolicy.py -+++ b/ipatests/test_integration/test_krbtpolicy.py -@@ -103,8 +103,8 @@ class TestPWPolicy(IntegrationTest): - result = master.run_command('klist | grep krbtgt') - assert maxlife_within_policy(result.stdout_text, MAXLIFE) is True - -- def test_krbtpolicy_hardended(self): -- """Test a hardened kerberos ticket policy with 10 min tickets""" -+ def test_krbtpolicy_password_and_hardended(self): -+ """Test a pwd and hardened kerberos ticket policy with 10min tickets""" - master = self.master - master.run_command(['ipa', 'user-mod', USER1, - '--user-auth-type', 'password', -@@ -131,6 +131,32 @@ class TestPWPolicy(IntegrationTest): - result = master.run_command('klist | grep krbtgt') - assert maxlife_within_policy(result.stdout_text, MAXLIFE) is True - -+ def test_krbtpolicy_hardended(self): -+ """Test a hardened kerberos ticket policy with 30min tickets""" -+ master = self.master -+ master.run_command(['ipa', 'user-mod', USER1, -+ '--user-auth-type', 'hardened']) -+ master.run_command(['ipa', 'config-mod', -+ '--user-auth-type', 'hardened']) -+ master.run_command(['ipa', 'krbtpolicy-mod', USER1, -+ '--hardened-maxlife', '1800']) -+ -+ tasks.kdestroy_all(master) -+ -+ master.run_command(['kinit', USER1], -+ stdin_text=PASSWORD + '\n') -+ result = master.run_command('klist | grep krbtgt') -+ assert maxlife_within_policy(result.stdout_text, 1800, -+ slush=1800) is True -+ -+ tasks.kdestroy_all(master) -+ -+ # Verify that the short policy only applies to USER1 -+ master.run_command(['kinit', USER2], -+ stdin_text=PASSWORD + '\n') -+ result = master.run_command('klist | grep krbtgt') -+ assert maxlife_within_policy(result.stdout_text, MAXLIFE) is True -+ - def test_krbtpolicy_password(self): - """Test the kerberos ticket policy which issues 20 min tickets""" - master = self.master --- -2.34.1 - diff --git a/SOURCES/0017-Don-t-always-override-the-port-in-import_included_pr.patch b/SOURCES/0017-Don-t-always-override-the-port-in-import_included_pr.patch deleted file mode 100644 index 592f5b5..0000000 --- a/SOURCES/0017-Don-t-always-override-the-port-in-import_included_pr.patch +++ /dev/null @@ -1,104 +0,0 @@ -From edb216849e4f47d6cae95981edf0c3fe2653fd7a Mon Sep 17 00:00:00 2001 -From: Rob Crittenden -Date: Fri, 28 Jan 2022 16:46:35 -0500 -Subject: [PATCH] Don't always override the port in import_included_profiles - -I can only guess to the original purpose of this override. I -believe it was because this is called in the installer prior -to Apache being set up. The expectation was that this would -only be called locally. It predates the RestClient class. - -RestClient will attempt to find an available service. In this -case, during a CA installation, the local server is not -considered available because it lacks an entry in -cn=masters. So it will never be returned as an option. - -So by overriding the port to 8443 the remote connection will -likely fail because we don't require that the port be open. - -So instead, instantiate a RestClient and see what happens. - -There are several use-cases: - -1. Installing an initial server. The RestClient connection - should fail, so we will fall back to the override port and - use the local server. If Apache happens to be running with - a globally-issued certificate then the RestClient will - succeed. In this case if the connected host and the local - hostname are the same, override in that case as well. - -2. Installing as a replica. In this case the local server should - be ignored in all cases and a remote CA will be picked with - no override done. - -3. Switching from CA-less to CA-ful. The web server will be - trusted but the RestClient login will fail with a 404. Fall - back to the override port in this case. - -The motivation for this is trying to install an EL 8.x replica -against an EL 7.9 server. 8.5+ includes the ACME service and -a new profile is needed which doesn't exist in 7. This was -failing because the RestClient determined that the local server -wasn't running a CA so tried the remote one (7.9) on the override -port 8443. Since this port isn't open: failure. - -Chances are that adding the profile is still going to fail -because again, 7.9 lacks ACME capabilities, but it will fail in -a way that allows the installation to continue. - -I suspect that all of the overrides can similarly handled, or -handled directly within the RestClient class, but for the sake -of "do no harm" I'm only changing this instance for now. - -https://pagure.io/freeipa/issue/9100 - -Signed-off-by: Rob Crittenden -Reviewed-By: Florence Blanc-Renaud ---- - ipaserver/install/cainstance.py | 30 +++++++++++++++++++++++++++++- - 1 file changed, 29 insertions(+), 1 deletion(-) - -diff --git a/ipaserver/install/cainstance.py b/ipaserver/install/cainstance.py -index 8c8bf1b3a7bcf8a9c50183579b874a5710a32ac3..ad206aad411b42336e86e0b651a948fccd3a75ac 100644 ---- a/ipaserver/install/cainstance.py -+++ b/ipaserver/install/cainstance.py -@@ -1953,7 +1953,35 @@ def import_included_profiles(): - cn=['certprofiles'], - ) - -- api.Backend.ra_certprofile.override_port = 8443 -+ # At this point Apache may or may not be running with a valid -+ # certificate. The local server is not yet recognized as a full -+ # CA yet so it isn't discoverable. So try to do some detection -+ # on what port to use, 443 (remote) or 8443 (local) for importing -+ # the profiles. -+ # -+ # api.Backend.ra_certprofile invokes the RestClient class -+ # which will discover and login to the CA REST API. We can -+ # use this information to detect where to import the profiles. -+ # -+ # If the login is successful (e.g. doesn't raise an exception) -+ # and it returns our hostname (it prefers the local host) then -+ # we override and talk locally. -+ # -+ # Otherwise a NetworkError means we can't connect on 443 (perhaps -+ # a firewall) or we get an HTTP error (valid TLS certificate on -+ # Apache but no CA, login fails with 404) so we override to the -+ # local server. -+ # -+ # When override port was always set to 8443 the RestClient could -+ # pick a remote server and since 8443 isn't in our firewall profile -+ # setting up a new server would fail. -+ try: -+ with api.Backend.ra_certprofile as profile_api: -+ if profile_api.ca_host == api.env.host: -+ api.Backend.ra_certprofile.override_port = 8443 -+ except (errors.NetworkError, errors.RemoteRetrieveError) as e: -+ logger.debug('Overriding CA port: %s', e) -+ api.Backend.ra_certprofile.override_port = 8443 - - for (profile_id, desc, store_issued) in dogtag.INCLUDED_PROFILES: - dn = DN(('cn', profile_id), --- -2.34.1 - diff --git a/SOURCES/0018-Remove-ipa-join-errors-from-behind-the-debug-option.patch b/SOURCES/0018-Remove-ipa-join-errors-from-behind-the-debug-option.patch deleted file mode 100644 index 9e18029..0000000 --- a/SOURCES/0018-Remove-ipa-join-errors-from-behind-the-debug-option.patch +++ /dev/null @@ -1,115 +0,0 @@ -From 7c5540bb47799b4db95673d22f61995ad5c56440 Mon Sep 17 00:00:00 2001 -From: Rob Crittenden -Date: Mon, 31 Jan 2022 17:31:50 -0500 -Subject: [PATCH] Remove ipa-join errors from behind the debug option - -This brings it inline with the previous XML-RPC output which -only hid the request and response from the output and not -any errors returned. - -https://pagure.io/freeipa/issue/9103 - -Signed-off-by: Rob Crittenden -Reviewed-By: Florence Blanc-Renaud -Reviewed-By: Peter Keresztes Schmidt ---- - client/ipa-join.c | 27 +++++++++------------------ - 1 file changed, 9 insertions(+), 18 deletions(-) - -diff --git a/client/ipa-join.c b/client/ipa-join.c -index d98739a9abfb01ecf619187483bfc6677957d498..5888a33bf221eb5d455b2adcfa0f33b38f0969ca 100644 ---- a/client/ipa-join.c -+++ b/client/ipa-join.c -@@ -743,8 +743,7 @@ jsonrpc_request(const char *ipaserver, const json_t *json, curl_buffer *response - - json_str = json_dumps(json, 0); - if (!json_str) { -- if (debug) -- fprintf(stderr, _("json_dumps() failed\n")); -+ fprintf(stderr, _("json_dumps() failed\n")); - - rval = 17; - goto cleanup; -@@ -758,8 +757,7 @@ jsonrpc_request(const char *ipaserver, const json_t *json, curl_buffer *response - CURLcode res = curl_easy_perform(curl); - if (res != CURLE_OK) - { -- if (debug) -- fprintf(stderr, _("JSON-RPC call failed: %s\n"), curl_easy_strerror(res)); -+ fprintf(stderr, _("JSON-RPC call failed: %s\n"), curl_easy_strerror(res)); - - rval = 17; - goto cleanup; -@@ -769,8 +767,7 @@ jsonrpc_request(const char *ipaserver, const json_t *json, curl_buffer *response - curl_easy_getinfo(curl, CURLINFO_RESPONSE_CODE, &resp_code); - - if (resp_code != 200) { -- if (debug) -- fprintf(stderr, _("JSON-RPC call failed with status code: %li\n"), resp_code); -+ fprintf(stderr, _("JSON-RPC call failed with status code: %li\n"), resp_code); - - if (!quiet && resp_code == 401) - fprintf(stderr, _("JSON-RPC call was unauthorized. Check your credentials.\n")); -@@ -848,8 +845,7 @@ jsonrpc_parse_response(const char *payload, json_t** j_result_obj, bool quiet) { - - j_root = json_loads(payload, 0, &j_error); - if (!j_root) { -- if (debug) -- fprintf(stderr, _("Parsing JSON-RPC response failed: %s\n"), j_error.text); -+ fprintf(stderr, _("Parsing JSON-RPC response failed: %s\n"), j_error.text); - - rval = 17; - goto cleanup; -@@ -864,8 +860,7 @@ jsonrpc_parse_response(const char *payload, json_t** j_result_obj, bool quiet) { - - *j_result_obj = json_object_get(j_root, "result"); - if (!*j_result_obj) { -- if (debug) -- fprintf(stderr, _("Parsing JSON-RPC response failed: no 'result' value found.\n")); -+ fprintf(stderr, _("Parsing JSON-RPC response failed: no 'result' value found.\n")); - - rval = 17; - goto cleanup; -@@ -897,8 +892,7 @@ jsonrpc_parse_join_response(const char *payload, join_info *join_i, bool quiet) - &tmp_hostdn, - "krbprincipalname", &tmp_princ, - "krblastpwdchange", &tmp_pwdch) != 0) { -- if (debug) -- fprintf(stderr, _("Extracting the data from the JSON-RPC response failed: %s\n"), j_error.text); -+ fprintf(stderr, _("Extracting the data from the JSON-RPC response failed: %s\n"), j_error.text); - - rval = 17; - goto cleanup; -@@ -941,8 +935,7 @@ join_krb5_jsonrpc(const char *ipaserver, const char *hostname, char **hostdn, co - "nshardwareplatform", uinfo.machine); - - if (!json_req) { -- if (debug) -- fprintf(stderr, _("json_pack_ex() failed: %s\n"), j_error.text); -+ fprintf(stderr, _("json_pack_ex() failed: %s\n"), j_error.text); - - rval = 17; - goto cleanup; -@@ -990,8 +983,7 @@ jsonrpc_parse_unenroll_response(const char *payload, bool* result, bool quiet) { - - if (json_unpack_ex(j_result_obj, &j_error, 0, "{s:b}", - "result", result) != 0) { -- if (debug) -- fprintf(stderr, _("Extracting the data from the JSON-RPC response failed: %s\n"), j_error.text); -+ fprintf(stderr, _("Extracting the data from the JSON-RPC response failed: %s\n"), j_error.text); - - rval = 20; - goto cleanup; -@@ -1021,8 +1013,7 @@ jsonrpc_unenroll_host(const char *ipaserver, const char *host, bool quiet) { - host); - - if (!json_req) { -- if (debug) -- fprintf(stderr, _("json_pack_ex() failed: %s\n"), j_error.text); -+ fprintf(stderr, _("json_pack_ex() failed: %s\n"), j_error.text); - - rval = 17; - goto cleanup; --- -2.34.1 - diff --git a/SOURCES/0019-Enable-the-ccache-sweep-timer-during-installation.patch b/SOURCES/0019-Enable-the-ccache-sweep-timer-during-installation.patch deleted file mode 100644 index 328c1ff..0000000 --- a/SOURCES/0019-Enable-the-ccache-sweep-timer-during-installation.patch +++ /dev/null @@ -1,47 +0,0 @@ -From 9b6d0bb1245c4891ccc270f360d0f72a4b1444c1 Mon Sep 17 00:00:00 2001 -From: Rob Crittenden -Date: Mon, 7 Feb 2022 10:39:55 -0500 -Subject: [PATCH] Enable the ccache sweep timer during installation - -The timer was only being enabled during package installation -if IPA was configured. So effectively only on upgrade. - -Add as a separate installation step after the ccache directory -is configured. - -Fixes: https://pagure.io/freeipa/issue/9107 - -Signed-off-by: Rob Crittenden -Reviewed-By: Alexander Bokovoy ---- - ipaserver/install/httpinstance.py | 7 +++++++ - 1 file changed, 7 insertions(+) - -diff --git a/ipaserver/install/httpinstance.py b/ipaserver/install/httpinstance.py -index 732bb58d49addcb2a9f7698d577527257a17fe66..50ccf5e5031c37171cebe6f20232f3bd645cedeb 100644 ---- a/ipaserver/install/httpinstance.py -+++ b/ipaserver/install/httpinstance.py -@@ -140,6 +140,8 @@ class HTTPInstance(service.Service): - self.step("publish CA cert", self.__publish_ca_cert) - self.step("clean up any existing httpd ccaches", - self.remove_httpd_ccaches) -+ self.step("enable ccache sweep", -+ self.enable_ccache_sweep) - self.step("configuring SELinux for httpd", self.configure_selinux_for_httpd) - if not self.is_kdcproxy_configured(): - self.step("create KDC proxy config", self.create_kdcproxy_conf) -@@ -177,6 +179,11 @@ class HTTPInstance(service.Service): - [paths.SYSTEMD_TMPFILES, '--create', '--prefix', paths.IPA_CCACHES] - ) - -+ def enable_ccache_sweep(self): -+ ipautil.run( -+ [paths.SYSTEMCTL, 'enable', 'ipa-ccache-sweep.timer'] -+ ) -+ - def __configure_http(self): - self.update_httpd_service_ipa_conf() - self.update_httpd_wsgi_conf() --- -2.34.1 - diff --git a/SOURCES/0020-Test-ipa-ccache-sweep.timer-enabled-by-default-durin.patch b/SOURCES/0020-Test-ipa-ccache-sweep.timer-enabled-by-default-durin.patch deleted file mode 100644 index 3eabe4b..0000000 --- a/SOURCES/0020-Test-ipa-ccache-sweep.timer-enabled-by-default-durin.patch +++ /dev/null @@ -1,71 +0,0 @@ -From 0d9eb3d515385412abefe9c33e0099ea14f33cbc Mon Sep 17 00:00:00 2001 -From: Mohammad Rizwan -Date: Wed, 9 Feb 2022 18:56:21 +0530 -Subject: [PATCH] Test ipa-ccache-sweep.timer enabled by default during - installation - -This test checks that ipa-ccache-sweep.timer is enabled by default -during the ipa installation. - -related: https://pagure.io/freeipa/issue/9107 - -Signed-off-by: Mohammad Rizwan -Reviewed-By: Alexander Bokovoy ---- - .../test_integration/test_installation.py | 19 +++++++++++++++++-- - 1 file changed, 17 insertions(+), 2 deletions(-) - -diff --git a/ipatests/test_integration/test_installation.py b/ipatests/test_integration/test_installation.py -index f2d372c0c0356f244971a2af808db45dd6c8cb5b..63edbaa2bb4dbae174c6ab8c8f193cc24cc45b14 100644 ---- a/ipatests/test_integration/test_installation.py -+++ b/ipatests/test_integration/test_installation.py -@@ -475,7 +475,7 @@ class TestInstallCA(IntegrationTest): - - # Tweak sysrestore.state to drop installation section - self.master.run_command( -- ['sed','-i', r's/\[installation\]/\[badinstallation\]/', -+ ['sed', '-i', r's/\[installation\]/\[badinstallation\]/', - os.path.join(paths.SYSRESTORE, SYSRESTORE_STATEFILE)]) - - # Re-run installation check and it should fall back to old method -@@ -485,7 +485,7 @@ class TestInstallCA(IntegrationTest): - - # Restore installation section. - self.master.run_command( -- ['sed','-i', r's/\[badinstallation\]/\[installation\]/', -+ ['sed', '-i', r's/\[badinstallation\]/\[installation\]/', - os.path.join(paths.SYSRESTORE, SYSRESTORE_STATEFILE)]) - - # Uninstall and confirm that the old method reports correctly -@@ -690,6 +690,7 @@ def get_pki_tomcatd_pid(host): - break - return(pid) - -+ - def get_ipa_services_pids(host): - ipa_services_name = [ - "krb5kdc", "kadmin", "named", "httpd", "ipa-custodia", -@@ -1309,6 +1310,20 @@ class TestInstallMasterKRA(IntegrationTest): - def test_install_master(self): - tasks.install_master(self.master, setup_dns=False, setup_kra=True) - -+ def test_ipa_ccache_sweep_timer_enabled(self): -+ """Test ipa-ccache-sweep.timer enabled by default during installation -+ -+ This test checks that ipa-ccache-sweep.timer is enabled by default -+ during the ipa installation. -+ -+ related: https://pagure.io/freeipa/issue/9107 -+ """ -+ result = self.master.run_command( -+ ['systemctl', 'is-enabled', 'ipa-ccache-sweep.timer'], -+ raiseonerr=False -+ ) -+ assert 'enabled' in result.stdout_text -+ - def test_install_dns(self): - tasks.install_dns(self.master) - --- -2.34.1 - diff --git a/SOURCES/0021-ipa_cldap-fix-memory-leak.patch b/SOURCES/0021-ipa_cldap-fix-memory-leak.patch deleted file mode 100644 index 3c8109e..0000000 --- a/SOURCES/0021-ipa_cldap-fix-memory-leak.patch +++ /dev/null @@ -1,38 +0,0 @@ -From 186ebe311bc9545d7a9860cd5e8c748131bbe41e Mon Sep 17 00:00:00 2001 -From: Francisco Trivino -Date: Thu, 10 Feb 2022 14:23:12 +0100 -Subject: [PATCH] ipa_cldap: fix memory leak - -ipa_cldap_encode_netlogon() allocates memory to store binary data as part of -berval (bv_val) when processing a CLDAP packet request from a worker. The -data is used by ipa_cldap_respond() but bv_val is not freed later on. - -This commit is adding the corresponding free() after ipa_cldap_respond() -is completed. - -Discovered by LeakSanitizer - -Fixes: https://pagure.io/freeipa/issue/9110 -Signed-off-by: Francisco Trivino -Reviewed-By: Alexander Bokovoy -Reviewed-By: Rob Crittenden -Reviewed-By: Thierry Bordaz ---- - daemons/ipa-slapi-plugins/ipa-cldap/ipa_cldap_worker.c | 1 + - 1 file changed, 1 insertion(+) - -diff --git a/daemons/ipa-slapi-plugins/ipa-cldap/ipa_cldap_worker.c b/daemons/ipa-slapi-plugins/ipa-cldap/ipa_cldap_worker.c -index db4a3d061..252bcf647 100644 ---- a/daemons/ipa-slapi-plugins/ipa-cldap/ipa_cldap_worker.c -+++ b/daemons/ipa-slapi-plugins/ipa-cldap/ipa_cldap_worker.c -@@ -287,6 +287,7 @@ done: - ipa_cldap_respond(ctx, req, &reply); - - ipa_cldap_free_kvps(&req->kvps); -+ free(reply.bv_val); - free(req); - return; - } --- -2.34.1 - diff --git a/SOURCES/0022-ipatests-remove-additional-check-for-failed-units_rhbz#2053025.patch b/SOURCES/0022-ipatests-remove-additional-check-for-failed-units_rhbz#2053025.patch deleted file mode 100644 index c384f15..0000000 --- a/SOURCES/0022-ipatests-remove-additional-check-for-failed-units_rhbz#2053025.patch +++ /dev/null @@ -1,31 +0,0 @@ -From b36bcf4ea5ed93baa4dc63f8e2be542d678211fb Mon Sep 17 00:00:00 2001 -From: Anuja More -Date: Thu, 10 Feb 2022 18:49:06 +0530 -Subject: [PATCH] ipatests: remove additional check for failed units. - -On RHEL tests are randomly failing because of this check -and the test doesn't need to check this. - -Related : https://pagure.io/freeipa/issue/9108 - -Signed-off-by: Anuja More -Reviewed-By: Florence Blanc-Renaud ---- - ipatests/test_integration/test_otp.py | 1 - - 1 file changed, 1 deletion(-) - -diff --git a/ipatests/test_integration/test_otp.py b/ipatests/test_integration/test_otp.py -index d8ce527ca..6e70ddcb3 100644 ---- a/ipatests/test_integration/test_otp.py -+++ b/ipatests/test_integration/test_otp.py -@@ -316,7 +316,6 @@ class TestOTPToken(IntegrationTest): - check_services = self.master.run_command( - ['systemctl', 'list-units', '--state=failed'] - ) -- assert "0 loaded units listed" in check_services.stdout_text - assert "ipa-otpd" not in check_services.stdout_text - # Be sure no services are running and failed units - self.master.run_command(['killall', 'ipa-otpd'], raiseonerr=False) --- -2.34.1 - diff --git a/SOURCES/0023-ipatests-fix-TestOTPToken-rhbz#2053025.patch b/SOURCES/0023-ipatests-fix-TestOTPToken-rhbz#2053025.patch deleted file mode 100644 index e7081cd..0000000 --- a/SOURCES/0023-ipatests-fix-TestOTPToken-rhbz#2053025.patch +++ /dev/null @@ -1,40 +0,0 @@ -From 4c54e9d6ddb72eab6f654bf3dc2d29f27498ac96 Mon Sep 17 00:00:00 2001 -From: Florence Blanc-Renaud -Date: Sun, 5 Dec 2021 17:38:58 +0100 -Subject: [PATCH] ipatests: fix - TestOTPToken::test_check_otpd_after_idle_timeout - -The test sets 389-ds nsslapd-idletimeout to 60s, then does a -kinit with an otp token (which makes ipa-otpd create a LDAP -connection), then sleeps for 60s. The expectation is that -ns-slapd will detect that the LDAP conn from ipa-otpd is idle -and close the connection. -According to 389ds doc, the idle timeout is enforced when the -connection table is walked. By doing a ldapsearch, the test -"wakes up" ns-slapd and forces the detection of ipa-otpd -idle connection. - -Fixes: https://pagure.io/freeipa/issue/9044 -Signed-off-by: Florence Blanc-Renaud -Reviewed-By: Anuja More ---- - ipatests/test_integration/test_otp.py | 3 +++ - 1 file changed, 3 insertions(+) - -diff --git a/ipatests/test_integration/test_otp.py b/ipatests/test_integration/test_otp.py -index 353470897..d8ce527ca 100644 ---- a/ipatests/test_integration/test_otp.py -+++ b/ipatests/test_integration/test_otp.py -@@ -354,6 +354,9 @@ class TestOTPToken(IntegrationTest): - otpvalue = totp.generate(int(time.time())).decode("ascii") - kinit_otp(self.master, USER, password=PASSWORD, otp=otpvalue) - time.sleep(60) -+ # ldapsearch will wake up slapd and force walking through -+ # the connection list, in order to spot the idle connections -+ tasks.ldapsearch_dm(self.master, "", ldap_args=[], scope="base") - - def test_cb(cmd_jornalctl): - # check if LDAP connection is timed out --- -2.34.1 - diff --git a/SOURCES/0024-ipatests-Tests-for-Autoprivate-group.patch b/SOURCES/0024-ipatests-Tests-for-Autoprivate-group.patch deleted file mode 100644 index f66b4cc..0000000 --- a/SOURCES/0024-ipatests-Tests-for-Autoprivate-group.patch +++ /dev/null @@ -1,326 +0,0 @@ -From 6b70e3c49acc55b5553101cf850fc40978861979 Mon Sep 17 00:00:00 2001 -From: Anuja More -Date: Mon, 17 Jan 2022 16:57:52 +0530 -Subject: [PATCH] ipatests: Tests for Autoprivate group. - -Added tests using posix AD trust and non posix AD trust. -For option --auto-private-groups=[hybrid/true/false] - -Related : https://pagure.io/freeipa/issue/8807 - -Signed-off-by: Anuja More -Reviewed-By: Florence Blanc-Renaud -Reviewed-By: Anuja More ---- - .../nightly_ipa-4-9_latest.yaml | 2 +- - .../nightly_ipa-4-9_latest_selinux.yaml | 2 +- - .../nightly_ipa-4-9_previous.yaml | 2 +- - ipatests/test_integration/test_trust.py | 242 +++++++++++++++++- - 4 files changed, 240 insertions(+), 8 deletions(-) - -diff --git a/ipatests/prci_definitions/nightly_ipa-4-9_latest.yaml b/ipatests/prci_definitions/nightly_ipa-4-9_latest.yaml -index 6817421b278999c52c32b3e28dd06587e30d874f..8b1f58c4d99e744e319e6c758050a62a8d35c9ee 100644 ---- a/ipatests/prci_definitions/nightly_ipa-4-9_latest.yaml -+++ b/ipatests/prci_definitions/nightly_ipa-4-9_latest.yaml -@@ -1627,7 +1627,7 @@ jobs: - build_url: '{fedora-latest-ipa-4-9/build_url}' - test_suite: test_integration/test_trust.py - template: *ci-ipa-4-9-latest -- timeout: 9000 -+ timeout: 10000 - topology: *adroot_adchild_adtree_master_1client - - fedora-latest-ipa-4-9/test_backup_and_restore_TestBackupAndRestoreTrust: -diff --git a/ipatests/prci_definitions/nightly_ipa-4-9_latest_selinux.yaml b/ipatests/prci_definitions/nightly_ipa-4-9_latest_selinux.yaml -index 817329756dc145fa5e6bc7aa0477e5df2a6ece5b..a11376ab836e7ed2f942c29753707e5b8e88a00f 100644 ---- a/ipatests/prci_definitions/nightly_ipa-4-9_latest_selinux.yaml -+++ b/ipatests/prci_definitions/nightly_ipa-4-9_latest_selinux.yaml -@@ -1743,7 +1743,7 @@ jobs: - selinux_enforcing: True - test_suite: test_integration/test_trust.py - template: *ci-ipa-4-9-latest -- timeout: 9000 -+ timeout: 10000 - topology: *adroot_adchild_adtree_master_1client - - fedora-latest-ipa-4-9/test_backup_and_restore_TestBackupAndRestoreTrust: -diff --git a/ipatests/prci_definitions/nightly_ipa-4-9_previous.yaml b/ipatests/prci_definitions/nightly_ipa-4-9_previous.yaml -index 4196265c772ec393ebb8f8bbdc4af845cd6d2d24..3f8ce8b7641fdfdc27278651cbf83c2b152e1a16 100644 ---- a/ipatests/prci_definitions/nightly_ipa-4-9_previous.yaml -+++ b/ipatests/prci_definitions/nightly_ipa-4-9_previous.yaml -@@ -1627,7 +1627,7 @@ jobs: - build_url: '{fedora-previous-ipa-4-9/build_url}' - test_suite: test_integration/test_trust.py - template: *ci-ipa-4-9-previous -- timeout: 9000 -+ timeout: 10000 - topology: *adroot_adchild_adtree_master_1client - - fedora-previous-ipa-4-9/test_backup_and_restore_TestBackupAndRestoreTrust: -diff --git a/ipatests/test_integration/test_trust.py b/ipatests/test_integration/test_trust.py -index 0634badbb6a9aa148db2e3062e866215e61e89e7..ff2dd9cc819e1c5620ce449384957a633ae6d1f0 100644 ---- a/ipatests/test_integration/test_trust.py -+++ b/ipatests/test_integration/test_trust.py -@@ -62,11 +62,12 @@ class BaseTestTrust(IntegrationTest): - cls.check_sid_generation() - tasks.sync_time(cls.master, cls.ad) - -- cls.child_ad = cls.ad_subdomains[0] -- cls.ad_subdomain = cls.child_ad.domain.name -- cls.tree_ad = cls.ad_treedomains[0] -- cls.ad_treedomain = cls.tree_ad.domain.name -- -+ if cls.num_ad_subdomains > 0: -+ cls.child_ad = cls.ad_subdomains[0] -+ cls.ad_subdomain = cls.child_ad.domain.name -+ if cls.num_ad_treedomains > 0: -+ cls.tree_ad = cls.ad_treedomains[0] -+ cls.ad_treedomain = cls.tree_ad.domain.name - # values used in workaround for - # https://bugzilla.redhat.com/show_bug.cgi?id=1711958 - cls.srv_gc_record_name = \ -@@ -106,6 +107,63 @@ class BaseTestTrust(IntegrationTest): - expected_text = 'iparangetype: %s\n' % expected_type - assert expected_text in result.stdout_text - -+ def mod_idrange_auto_private_group( -+ self, option='false' -+ ): -+ """ -+ Set the auto-private-group option of the default trusted -+ AD domain range. -+ """ -+ tasks.kinit_admin(self.master) -+ rangename = self.ad_domain.upper() + '_id_range' -+ error_msg = "ipa: ERROR: no modifications to be performed" -+ cmd = ["ipa", "idrange-mod", rangename, -+ "--auto-private-groups", option] -+ result = self.master.run_command(cmd, raiseonerr=False) -+ if result.returncode != 0: -+ tasks.assert_error(result, error_msg) -+ tasks.clear_sssd_cache(self.master) -+ tasks.clear_sssd_cache(self.clients[0]) -+ test = self.master.run_command(["ipa", "idrange-show", rangename]) -+ assert "Auto private groups: {0}".format(option) in test.stdout_text -+ -+ def get_user_id(self, host, username): -+ """ -+ User uid gid is parsed from the output of id user command. -+ """ -+ tasks.clear_sssd_cache(self.master) -+ tasks.clear_sssd_cache(self.clients[0]) -+ self.master.run_command(["id", username]) -+ test_id = host.run_command(["id", username]) -+ regex = r"^uid=(?P\d+).*gid=(?P\d+).*groups=(?P\d+)" -+ match = re.match(regex, test_id.stdout_text) -+ uid = match.group('uid') -+ gid = match.group('gid') -+ return uid, gid -+ -+ @contextmanager -+ def set_idoverrideuser(self, user, uid, gid): -+ """ -+ Fixture to add/remove idoverrideuser for default idview, -+ also creates idm group with the provided gid because -+ gid overrides requires an existing group. -+ """ -+ tasks.clear_sssd_cache(self.master) -+ tasks.clear_sssd_cache(self.clients[0]) -+ tasks.kinit_admin(self.master) -+ try: -+ args = ["ipa", "idoverrideuser-add", "Default Trust View", -+ "--gid", gid, "--uid", uid, user] -+ self.master.run_command(args) -+ tasks.group_add(self.master, "idgroup", -+ extra_args=["--gid", gid]) -+ yield -+ finally: -+ self.master.run_command([ -+ "ipa", "idoverrideuser-del", "Default Trust View", user] -+ ) -+ self.master.run_command(["ipa", "group-del", "idgroup"]) -+ - def remove_trust(self, ad): - tasks.remove_trust_with_ad(self.master, - ad.domain.name, ad.hostname) -@@ -993,3 +1051,177 @@ class TestTrust(BaseTestTrust): - self.master.run_command(['rm', '-f', ad_zone_file]) - tasks.configure_dns_for_trust(self.master, self.ad) - self.remove_trust(self.ad) -+ -+ -+class TestNonPosixAutoPrivateGroup(BaseTestTrust): -+ """ -+ Tests for auto-private-groups option with non posix AD trust -+ Related : https://pagure.io/freeipa/issue/8807 -+ """ -+ topology = 'line' -+ num_ad_domains = 1 -+ num_clients = 1 -+ num_ad_subdomains = 0 -+ num_ad_treedomains = 0 -+ uid_override = "99999999" -+ gid_override = "78878787" -+ -+ def test_add_nonposix_trust(self): -+ tasks.configure_dns_for_trust(self.master, self.ad) -+ tasks.establish_trust_with_ad( -+ self.master, self.ad_domain, -+ extra_args=['--range-type', 'ipa-ad-trust']) -+ -+ @pytest.mark.parametrize('type', ['hybrid', 'true', "false"]) -+ def test_auto_private_groups_default_trusted_range(self, type): -+ """ -+ Modify existing range for default trusted AD domain range -+ with auto-private-groups set as true/hybrid/false and test -+ user with no posix attributes. -+ """ -+ self.mod_idrange_auto_private_group(type) -+ nonposixuser = "nonposixuser@%s" % self.ad_domain -+ (uid, gid) = self.get_user_id(self.clients[0], nonposixuser) -+ if type == "true": -+ assert uid == gid -+ else: -+ test_group = self.clients[0].run_command(["id", nonposixuser]) -+ gid_str = "gid={0}(domain users@{1})".format(gid, self.ad_domain) -+ grp_str = "groups={0}(domain users@{1})".format(gid, -+ self.ad_domain) -+ assert gid_str in test_group.stdout_text -+ assert grp_str in test_group.stdout_text -+ assert uid != gid -+ -+ @pytest.mark.parametrize('type', ['hybrid', 'true', "false"]) -+ def test_idoverride_with_auto_private_group(self, type): -+ """ -+ Override ad trusted user in default trust view -+ and set auto-private-groups=[hybrid,true,false] -+ and ensure that overridden values takes effect. -+ """ -+ nonposixuser = "nonposixuser@%s" % self.ad_domain -+ with self.set_idoverrideuser(nonposixuser, -+ self.uid_override, -+ self.gid_override -+ ): -+ self.mod_idrange_auto_private_group(type) -+ (uid, gid) = self.get_user_id(self.clients[0], nonposixuser) -+ assert (uid == self.uid_override and gid == self.gid_override) -+ test_group = self.clients[0].run_command( -+ ["id", nonposixuser]).stdout_text -+ assert "domain users@{0}".format(self.ad_domain) in test_group -+ -+ @pytest.mark.parametrize('type', ['hybrid', 'true', "false"]) -+ def test_nonposixuser_nondefault_primary_group(self, type): -+ """ -+ Test for non default primary group. -+ For hybrid/false gid corresponds to the group testgroup1. -+ """ -+ nonposixuser1 = "nonposixuser1@%s" % self.ad_domain -+ self.mod_idrange_auto_private_group(type) -+ (uid, gid) = self.get_user_id(self.clients[0], nonposixuser1) -+ if type == "true": -+ assert uid == gid -+ else: -+ test_group = self.clients[0].run_command(["id", nonposixuser1]) -+ gid_str = "gid={0}(testgroup1@{1})".format(gid, self.ad_domain) -+ group = "groups={0}(testgroup1@{1})".format(gid, self.ad_domain) -+ assert (gid_str in test_group.stdout_text -+ and group in test_group.stdout_text) -+ -+ -+class TestPosixAutoPrivateGroup(BaseTestTrust): -+ """ -+ Tests for auto-private-groups option with posix AD trust -+ Related : https://pagure.io/freeipa/issue/8807 -+ """ -+ topology = 'line' -+ num_ad_domains = 1 -+ num_clients = 1 -+ num_ad_subdomains = 0 -+ num_ad_treedomains = 0 -+ uid_override = "99999999" -+ gid_override = "78878787" -+ -+ def test_add_posix_trust(self): -+ tasks.configure_dns_for_trust(self.master, self.ad) -+ tasks.establish_trust_with_ad( -+ self.master, self.ad_domain, -+ extra_args=['--range-type', 'ipa-ad-trust-posix']) -+ -+ @pytest.mark.parametrize('type', ['hybrid', 'true', "false"]) -+ def test_gidnumber_not_corresponding_existing_group(self, type): -+ """ -+ Test checks that sssd can resolve AD users which -+ contain posix attributes (uidNumber and gidNumber) -+ but there is no group with the corresponding gidNumber. -+ """ -+ posixuser = "testuser2@%s" % self.ad_domain -+ self.mod_idrange_auto_private_group(type) -+ if type != "true": -+ result = self.clients[0].run_command(['id', posixuser], -+ raiseonerr=False) -+ tasks.assert_error(result, "no such user") -+ else: -+ (uid, gid) = self.get_user_id(self.clients[0], posixuser) -+ assert uid == gid -+ assert uid == '10060' -+ -+ @pytest.mark.parametrize('type', ['hybrid', 'true', "false"]) -+ def test_only_uid_number_auto_private_group_default(self, type): -+ """ -+ Test checks that posix user with only uidNumber defined -+ and gidNumber not set, auto-private-group -+ is set to false/true/hybrid -+ """ -+ posixuser = "testuser1@%s" % self.ad_domain -+ self.mod_idrange_auto_private_group(type) -+ if type == "true": -+ (uid, gid) = self.get_user_id(self.clients[0], posixuser) -+ assert uid == gid -+ else: -+ for host in [self.master, self.clients[0]]: -+ result = host.run_command(['id', posixuser], raiseonerr=False) -+ tasks.assert_error(result, "no such user") -+ -+ @pytest.mark.parametrize('type', ['hybrid', 'true', "false"]) -+ def test_auto_private_group_primary_group(self, type): -+ """ -+ Test checks that AD users which contain posix attributes -+ (uidNumber and gidNumber) and there is primary group -+ with gid number defined. -+ """ -+ posixuser = "testuser@%s" % self.ad_domain -+ self.mod_idrange_auto_private_group(type) -+ (uid, gid) = self.get_user_id(self.clients[0], posixuser) -+ test_grp = self.clients[0].run_command(["id", posixuser]) -+ assert uid == '10042' -+ if type == "true": -+ assert uid == gid -+ groups = "groups=10042(testuser@{0}),10047(testgroup@{1})".format( -+ self.ad_domain, self.ad_domain) -+ assert groups in test_grp.stdout_text -+ else: -+ assert gid == '10047' -+ groups = "10047(testgroup@{0})".format(self.ad_domain) -+ assert groups in test_grp.stdout_text -+ -+ @pytest.mark.parametrize('type', ['hybrid', 'true', "false"]) -+ def test_idoverride_with_auto_private_group(self, type): -+ """ -+ Override ad trusted user in default trust view -+ and set auto-private-groups=[hybrid,true,false] -+ and ensure that overridden values takes effect. -+ """ -+ posixuser = "testuser@%s" % self.ad_domain -+ with self.set_idoverrideuser(posixuser, -+ self.uid_override, -+ self.gid_override): -+ self.mod_idrange_auto_private_group(type) -+ (uid, gid) = self.get_user_id(self.clients[0], posixuser) -+ assert(uid == self.uid_override -+ and gid == self.gid_override) -+ result = self.clients[0].run_command(['id', posixuser]) -+ assert "10047(testgroup@{0})".format( -+ self.ad_domain) in result.stdout_text --- -2.34.1 - diff --git a/SOURCES/0025-mark-xfail-for-test_idoverride_with_auto_private_gro.patch b/SOURCES/0025-mark-xfail-for-test_idoverride_with_auto_private_gro.patch deleted file mode 100644 index 2b84d99..0000000 --- a/SOURCES/0025-mark-xfail-for-test_idoverride_with_auto_private_gro.patch +++ /dev/null @@ -1,43 +0,0 @@ -From 84381001d2e114b1f29fe89e16155c040b56b80f Mon Sep 17 00:00:00 2001 -From: Anuja More -Date: Thu, 10 Feb 2022 17:07:45 +0530 -Subject: [PATCH] mark xfail for - test_idoverride_with_auto_private_group[hybrid] - -Related : https://github.com/SSSD/sssd/issues/5989 - -Signed-off-by: Anuja More -Reviewed-By: Florence Blanc-Renaud -Reviewed-By: Anuja More ---- - ipatests/test_integration/test_trust.py | 7 ++++++- - 1 file changed, 6 insertions(+), 1 deletion(-) - -diff --git a/ipatests/test_integration/test_trust.py b/ipatests/test_integration/test_trust.py -index ff2dd9cc819e1c5620ce449384957a633ae6d1f0..54bd154628cb8fb063d9839d7928acd37647e2a4 100644 ---- a/ipatests/test_integration/test_trust.py -+++ b/ipatests/test_integration/test_trust.py -@@ -15,6 +15,7 @@ from ipaplatform.paths import paths - from ipatests.test_integration.base import IntegrationTest - from ipatests.pytest_ipa.integration import tasks - from ipatests.pytest_ipa.integration import fips -+from ipatests.util import xfail_context - from ipapython.dn import DN - from collections import namedtuple - from contextlib import contextmanager -@@ -1110,7 +1111,11 @@ class TestNonPosixAutoPrivateGroup(BaseTestTrust): - assert (uid == self.uid_override and gid == self.gid_override) - test_group = self.clients[0].run_command( - ["id", nonposixuser]).stdout_text -- assert "domain users@{0}".format(self.ad_domain) in test_group -+ version = tasks.get_sssd_version(self.clients[0]) -+ with xfail_context(version <= tasks.parse_version('2.6.3') -+ and type == "hybrid", -+ 'https://github.com/SSSD/sssd/issues/5989'): -+ assert "domain users@{0}".format(self.ad_domain) in test_group - - @pytest.mark.parametrize('type', ['hybrid', 'true', "false"]) - def test_nonposixuser_nondefault_primary_group(self, type): --- -2.34.1 - diff --git a/SOURCES/0026-Mark-xfail-test_gidnumber_not_corresponding_existing.patch b/SOURCES/0026-Mark-xfail-test_gidnumber_not_corresponding_existing.patch deleted file mode 100644 index a45d917..0000000 --- a/SOURCES/0026-Mark-xfail-test_gidnumber_not_corresponding_existing.patch +++ /dev/null @@ -1,38 +0,0 @@ -From 7ad500e5d3f7d9af81e8a3137158672c6fafb0b4 Mon Sep 17 00:00:00 2001 -From: Anuja More -Date: Thu, 10 Feb 2022 17:29:45 +0530 -Subject: [PATCH] Mark xfail - test_gidnumber_not_corresponding_existing_group[true,hybrid] - -Related : https://github.com/SSSD/sssd/issues/5988 - -Signed-off-by: Anuja More -Reviewed-By: Florence Blanc-Renaud -Reviewed-By: Anuja More ---- - ipatests/test_integration/test_trust.py | 9 ++++++--- - 1 file changed, 6 insertions(+), 3 deletions(-) - -diff --git a/ipatests/test_integration/test_trust.py b/ipatests/test_integration/test_trust.py -index 54bd154628cb8fb063d9839d7928acd37647e2a4..c128378151ec4c0fb295823d75f2a04df2f7ffa0 100644 ---- a/ipatests/test_integration/test_trust.py -+++ b/ipatests/test_integration/test_trust.py -@@ -1169,9 +1169,12 @@ class TestPosixAutoPrivateGroup(BaseTestTrust): - raiseonerr=False) - tasks.assert_error(result, "no such user") - else: -- (uid, gid) = self.get_user_id(self.clients[0], posixuser) -- assert uid == gid -- assert uid == '10060' -+ sssd_version = tasks.get_sssd_version(self.clients[0]) -+ with xfail_context(sssd_version <= tasks.parse_version('2.6.3'), -+ 'https://github.com/SSSD/sssd/issues/5988'): -+ (uid, gid) = self.get_user_id(self.clients[0], posixuser) -+ assert uid == gid -+ assert uid == '10060' - - @pytest.mark.parametrize('type', ['hybrid', 'true', "false"]) - def test_only_uid_number_auto_private_group_default(self, type): --- -2.34.1 - diff --git a/SOURCES/0027-KRB-instance-make-provision-to-work-with-crypto-poli.patch b/SOURCES/0027-KRB-instance-make-provision-to-work-with-crypto-poli.patch deleted file mode 100644 index fb75eeb..0000000 --- a/SOURCES/0027-KRB-instance-make-provision-to-work-with-crypto-poli.patch +++ /dev/null @@ -1,108 +0,0 @@ -From a51900819bd5332bc05ec9d513f062844b3a7763 Mon Sep 17 00:00:00 2001 -From: Alexander Bokovoy -Date: Fri, 25 Feb 2022 08:58:24 +0200 -Subject: [PATCH] KRB instance: make provision to work with crypto policy - without SHA-1 HMAC types - -RHEL 9 system-wide crypto policies aim at eventual removal of SHA-1 use. - -Due to bootstrapping process, force explicitly supported encryption -types in kdc.conf or we may end up with AES128-SHA1 and AES256-SHA2 only -in FIPS mode at bootstrap time which then fails to initialize kadmin -principals requiring use of AES256-SHA2 and AES128-SHA2. - -Camellia ciphers must be filtered out in FIPS mode, we do that already -in the kerberos.ldif. - -At this point we are not changing the master key encryption type to -AES256-SHA2 because upgrading existing deployments is complicated and -at the time when a replica configuration is deployed, we don't know what -is the encryption type of the master key of the original server as well. - -Fixes: https://pagure.io/freeipa/issue/9119 - -Signed-off-by: Alexander Bokovoy -Reviewed-By: Julien Rische -Reviewed-By: Francisco Trivino ---- - install/share/kdc.conf.template | 3 ++- - install/share/kerberos.ldif | 2 ++ - ipaserver/install/krbinstance.py | 21 ++++++++++++++++++++- - 3 files changed, 24 insertions(+), 2 deletions(-) - -diff --git a/install/share/kdc.conf.template b/install/share/kdc.conf.template -index 232fedc445f660c30a88d8844d9f1b6042db41a7..685d42f3b7fb263e86b7a6db98be8bcc53e7bbe6 100644 ---- a/install/share/kdc.conf.template -+++ b/install/share/kdc.conf.template -@@ -6,7 +6,8 @@ - - [realms] - $REALM = { -- master_key_type = aes256-cts -+ master_key_type = $MASTER_KEY_TYPE -+ supported_enctypes = $SUPPORTED_ENCTYPES - max_life = 7d - max_renewable_life = 14d - acl_file = $KRB5KDC_KADM5_ACL -diff --git a/install/share/kerberos.ldif b/install/share/kerberos.ldif -index 3b75b445641fd86e2029ceb51e479c6ccb17856c..51e5cf9bca4b0b2cf2e1fe3ec85777deb61b76b0 100644 ---- a/install/share/kerberos.ldif -+++ b/install/share/kerberos.ldif -@@ -28,6 +28,8 @@ ${FIPS}krbSupportedEncSaltTypes: camellia256-cts-cmac:normal - ${FIPS}krbSupportedEncSaltTypes: camellia256-cts-cmac:special - krbMaxTicketLife: 86400 - krbMaxRenewableAge: 604800 -+krbDefaultEncSaltTypes: aes256-sha2:special -+krbDefaultEncSaltTypes: aes128-sha2:special - krbDefaultEncSaltTypes: aes256-cts:special - krbDefaultEncSaltTypes: aes128-cts:special - -diff --git a/ipaserver/install/krbinstance.py b/ipaserver/install/krbinstance.py -index 216c1032d8abd9fc119d98d8f9976ce17d246ea4..852edcd9978f4a47d355e206fbb4a513ea699865 100644 ---- a/ipaserver/install/krbinstance.py -+++ b/ipaserver/install/krbinstance.py -@@ -51,6 +51,14 @@ logger = logging.getLogger(__name__) - - PKINIT_ENABLED = 'pkinitEnabled' - -+MASTER_KEY_TYPE = 'aes256-sha1' -+SUPPORTED_ENCTYPES = ('aes256-sha2:special', 'aes128-sha2:special', -+ 'aes256-sha2:normal', 'aes128-sha2:normal', -+ 'aes256-cts:special', 'aes128-cts:special', -+ 'aes256-cts:normal', 'aes128-cts:normal', -+ 'camellia256-cts:special', 'camellia128-cts:special', -+ 'camellia256-cts:normal', 'camellia128-cts:normal') -+ - - def get_pkinit_request_ca(): - """ -@@ -252,6 +260,7 @@ class KrbInstance(service.Service): - else: - includes = '' - -+ fips_enabled = tasks.is_fips_enabled() - self.sub_dict = dict(FQDN=self.fqdn, - IP=self.ip, - PASSWORD=self.kdc_password, -@@ -269,7 +278,17 @@ class KrbInstance(service.Service): - KDC_CA_BUNDLE_PEM=paths.KDC_CA_BUNDLE_PEM, - CA_BUNDLE_PEM=paths.CA_BUNDLE_PEM, - INCLUDES=includes, -- FIPS='#' if tasks.is_fips_enabled() else '') -+ FIPS='#' if fips_enabled else '') -+ -+ if fips_enabled: -+ supported_enctypes = list( -+ filter(lambda e: not e.startswith('camelia'), -+ SUPPORTED_ENCTYPES)) -+ else: -+ supported_enctypes = SUPPORTED_ENCTYPES -+ self.sub_dict['SUPPORTED_ENCTYPES'] = ' '.join(supported_enctypes) -+ -+ self.sub_dict['MASTER_KEY_TYPE'] = MASTER_KEY_TYPE - - # IPA server/KDC is not a subdomain of default domain - # Proper domain-realm mapping needs to be specified --- -2.34.1 - diff --git a/SOURCES/0028-tests-ensure-AD-SUPPORT-subpolicy-is-active.patch b/SOURCES/0028-tests-ensure-AD-SUPPORT-subpolicy-is-active.patch deleted file mode 100644 index 562bba7..0000000 --- a/SOURCES/0028-tests-ensure-AD-SUPPORT-subpolicy-is-active.patch +++ /dev/null @@ -1,58 +0,0 @@ -From b016683552a58f9cc2a05cf628cc467234eaf599 Mon Sep 17 00:00:00 2001 -From: Alexander Bokovoy -Date: Mon, 28 Feb 2022 11:10:49 +0200 -Subject: [PATCH] tests: ensure AD-SUPPORT subpolicy is active - -Use AD-SUPPORT subpolicy when testing trust to Active Directory in FIPS -mode. This is required in FIPS mode due to AD not supporting Kerberos -AES-bases encryption types using FIPS-compliant PBKDF2 and KDF, as -defined in RFC 8009. - -Fixes: https://pagure.io/freeipa/issue/9119 - -Signed-off-by: Alexander Bokovoy -Reviewed-By: Julien Rische -Reviewed-By: Francisco Trivino ---- - ipatests/pytest_ipa/integration/fips.py | 6 ++++++ - ipatests/pytest_ipa/integration/tasks.py | 3 +++ - 2 files changed, 9 insertions(+) - -diff --git a/ipatests/pytest_ipa/integration/fips.py b/ipatests/pytest_ipa/integration/fips.py -index 694ec8a9927da917fe99482094f68540a1032c14..b33aa91b14552d6f47191c913db4f974a5a5948c 100644 ---- a/ipatests/pytest_ipa/integration/fips.py -+++ b/ipatests/pytest_ipa/integration/fips.py -@@ -68,3 +68,9 @@ def disable_userspace_fips(host): - # sanity check - assert not is_fips_enabled(host) - host.run_command(["openssl", "md5", "/dev/null"]) -+ -+ -+def enable_crypto_subpolicy(host, subpolicy): -+ result = host.run_command(["update-crypto-policies", "--show"]) -+ policy = result.stdin_text.strip() + ":" + subpolicy -+ host.run_command(["update-crypto-policies", "--set", policy]) -diff --git a/ipatests/pytest_ipa/integration/tasks.py b/ipatests/pytest_ipa/integration/tasks.py -index 7e1b7c24dab00986ff6e75430bf55e55dd1a6b8e..13d84e23fa7dc8a5e562e8498c9142e2bcad696a 100755 ---- a/ipatests/pytest_ipa/integration/tasks.py -+++ b/ipatests/pytest_ipa/integration/tasks.py -@@ -66,6 +66,7 @@ from .env_config import env_to_script - from .host import Host - from .firewall import Firewall - from .resolver import ResolvedResolver -+from .fips import is_fips_enabled, enable_crypto_subpolicy - - logger = logging.getLogger(__name__) - -@@ -362,6 +363,8 @@ def install_master(host, setup_dns=True, setup_kra=False, setup_adtrust=False, - if setup_adtrust: - args.append('--setup-adtrust') - fw_services.append("freeipa-trust") -+ if is_fips_enabled(host): -+ enable_crypto_subpolicy(host, "AD-SUPPORT") - if external_ca: - args.append('--external-ca') - --- -2.34.1 - diff --git a/SOURCES/0029-ipatests-extend-AES-keyset-to-SHA2-based-ones.patch b/SOURCES/0029-ipatests-extend-AES-keyset-to-SHA2-based-ones.patch deleted file mode 100644 index b20a590..0000000 --- a/SOURCES/0029-ipatests-extend-AES-keyset-to-SHA2-based-ones.patch +++ /dev/null @@ -1,46 +0,0 @@ -From 49d9147e38c5b50c52a1ebc7283753c779c2f81f Mon Sep 17 00:00:00 2001 -From: Alexander Bokovoy -Date: Thu, 3 Mar 2022 14:38:57 +0200 -Subject: [PATCH] ipatests: extend AES keyset to SHA2-based ones - -Fixes: https://pagure.io/freeipa/issue/9119 - -Signed-off-by: Alexander Bokovoy -Reviewed-By: Julien Rische -Reviewed-By: Francisco Trivino ---- - ipaserver/install/plugins/adtrust.py | 3 ++- - ipatests/pytest_ipa/integration/tasks.py | 3 ++- - 2 files changed, 4 insertions(+), 2 deletions(-) - -diff --git a/ipaserver/install/plugins/adtrust.py b/ipaserver/install/plugins/adtrust.py -index 5b87ac47c6919de287b07c9ceef7ae22e1e79398..67e372bdb40a0b1f6815f107fc567f0ae056dad8 100644 ---- a/ipaserver/install/plugins/adtrust.py -+++ b/ipaserver/install/plugins/adtrust.py -@@ -754,7 +754,8 @@ class update_host_cifs_keytabs(Updater): - """ - - host_princ_template = "host/{master}@{realm}" -- valid_etypes = ['aes256-cts-hmac-sha1-96', 'aes128-cts-hmac-sha1-96'] -+ valid_etypes = ['aes256-cts-hmac-sha384-192', 'aes128-cts-hmac-sha256-128', -+ 'aes256-cts-hmac-sha1-96', 'aes128-cts-hmac-sha1-96'] - - def extract_key_refs(self, keytab): - host_princ = self.host_princ_template.format( -diff --git a/ipatests/pytest_ipa/integration/tasks.py b/ipatests/pytest_ipa/integration/tasks.py -index 13d84e23fa7dc8a5e562e8498c9142e2bcad696a..d06f8eb2cf6c36956ec200a1abb7c488d1dad9aa 100755 ---- a/ipatests/pytest_ipa/integration/tasks.py -+++ b/ipatests/pytest_ipa/integration/tasks.py -@@ -2261,7 +2261,8 @@ class KerberosKeyCopier: - copier.copy_keys('/etc/krb5.keytab', tmpname, replacement=replacement) - """ - host_princ_template = "host/{master}@{realm}" -- valid_etypes = ['aes256-cts-hmac-sha1-96', 'aes128-cts-hmac-sha1-96'] -+ valid_etypes = ['aes256-cts-hmac-sha384-192', 'aes128-cts-hmac-sha256-128', -+ 'aes256-cts-hmac-sha1-96', 'aes128-cts-hmac-sha1-96'] - - def __init__(self, host): - self.host = host --- -2.34.1 - diff --git a/SOURCES/0030-freeipa.spec-bump-crypto-policies-dependency-for-Cen.patch b/SOURCES/0030-freeipa.spec-bump-crypto-policies-dependency-for-Cen.patch deleted file mode 100644 index 4c61492..0000000 --- a/SOURCES/0030-freeipa.spec-bump-crypto-policies-dependency-for-Cen.patch +++ /dev/null @@ -1,35 +0,0 @@ -From ee39de46a1c1ea96bbe524f159ae435319b2d072 Mon Sep 17 00:00:00 2001 -From: Alexander Bokovoy -Date: Thu, 3 Mar 2022 14:43:11 +0200 -Subject: [PATCH] freeipa.spec: bump crypto-policies dependency for CentOS 9 - Stream - -Fixes: https://pagure.io/freeipa/issue/9119 - -Signed-off-by: Alexander Bokovoy -Reviewed-By: Julien Rische -Reviewed-By: Francisco Trivino ---- - freeipa.spec.in | 6 ++++++ - 1 file changed, 6 insertions(+) - -diff --git a/freeipa.spec.in b/freeipa.spec.in -index 0b24febc0baff6f60fd2b4cb254971bd3e3aa3b8..c1d81605068c6fc3e6c765ad01c4967fa9f03c95 100755 ---- a/freeipa.spec.in -+++ b/freeipa.spec.in -@@ -695,6 +695,12 @@ Provides: %{name}-admintools = %{version}-%{release} - Conflicts: crypto-policies < 20200629-1 - %endif - -+%if 0%{?rhel} == 9 -+# Conflict with crypto-policies < 20220223-1 to get upgraded AD-SUPPORT and -+# AD-SUPPORT-LEGACY policy modules -+Conflicts: crypto-policies < 20220223-1 -+%endif -+ - %description client - IPA is an integrated solution to provide centrally managed Identity (users, - hosts, services), Authentication (SSO, 2FA), and Authorization --- -2.34.1 - diff --git a/SOURCES/0031-Kerberos-instance-default-to-AES256-SHA2-for-master-.patch b/SOURCES/0031-Kerberos-instance-default-to-AES256-SHA2-for-master-.patch deleted file mode 100644 index 4cb65b1..0000000 --- a/SOURCES/0031-Kerberos-instance-default-to-AES256-SHA2-for-master-.patch +++ /dev/null @@ -1,56 +0,0 @@ -From 3e54c4362490b4da1b6cb3e141bb6e08fecc58c0 Mon Sep 17 00:00:00 2001 -From: Alexander Bokovoy -Date: Mon, 14 Mar 2022 13:23:04 +0200 -Subject: [PATCH] Kerberos instance: default to AES256-SHA2 for master key - encryption - -KDC configuration in /var/kerberos/krb5kdc/kdc.conf is generated from -the template in install/share/kdc.conf.template. Master key encryption -type specified there is used to bootstrap the master key in LDAP -database. Once it is done, actual deployment does not rely on the -master_key_type value anymore. The actual master key(s) get loaded from -LDAP database where they stored in a BER-encoded format, preserving all -parameters, including encryption type. - -This means we can safely migrate to AES256-SHA2 as the default master -key encryption type for new installations. Replicas will get their -master key encryption type details from the server they were provisioned -from. - -MIT Kerberos supports AES256-SHA2 since 1.15 (2015), meaning RHEL 7.4 is -the earliest supported version as it provides krb5 1.15.1. Current -supported RHEL 7 version is RHEL 7.9. Since RHEL 6 already cannot be -used as a replica to IPA 4.5+ due to a domain level 1 upgrade, this -change does not affect old releases. - -Migration from the previously deployed master key encryption type is -described by MIT Kerberos upstream in -http://web.mit.edu/kerberos/krb5-latest/doc/admin/advanced/retiring-des.html#the-database-master-key - -One would need to use '-x ipa-setup-override-restrictions' to allow -the `kdb5_util` utility to modify the data over IPA KDB driver. - -Fixes: https://pagure.io/freeipa/issue/9119 - -Signed-off-by: Alexander Bokovoy -Reviewed-By: Francisco Trivino ---- - ipaserver/install/krbinstance.py | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/ipaserver/install/krbinstance.py b/ipaserver/install/krbinstance.py -index 01b3309d50c0e8025e3381eac577225b1ef0be9d..a5eaa7b17133498f08e84d01c90764236e8ebe84 100644 ---- a/ipaserver/install/krbinstance.py -+++ b/ipaserver/install/krbinstance.py -@@ -51,7 +51,7 @@ logger = logging.getLogger(__name__) - - PKINIT_ENABLED = 'pkinitEnabled' - --MASTER_KEY_TYPE = 'aes256-sha1' -+MASTER_KEY_TYPE = 'aes256-sha2' - SUPPORTED_ENCTYPES = ('aes256-sha2:special', 'aes128-sha2:special', - 'aes256-sha2:normal', 'aes128-sha2:normal', - 'aes256-cts:special', 'aes128-cts:special', --- -2.34.1 - diff --git a/SOURCES/0032-test_otp-do-not-use-paramiko-unless-it-is-really-nee.patch b/SOURCES/0032-test_otp-do-not-use-paramiko-unless-it-is-really-nee.patch deleted file mode 100644 index 368346f..0000000 --- a/SOURCES/0032-test_otp-do-not-use-paramiko-unless-it-is-really-nee.patch +++ /dev/null @@ -1,44 +0,0 @@ -From 3baae8d1bd0a0c4c707314524289e86e6ecbc0df Mon Sep 17 00:00:00 2001 -From: Alexander Bokovoy -Date: Mon, 14 Mar 2022 21:09:36 +0200 -Subject: [PATCH] test_otp: do not use paramiko unless it is really needed - -paramiko cannot be used in FIPS mode. We have few tests that import -generic methods from test_otp (add_token/del_token) and those tests fail -in FIPS mode due to unconditional 'import paramiko'. - -Instead, move 'import paramiko' to the ssh_2f() helper which is not used -in FIPS mode (the whole SSH 2FA test is skipped then). - -Related: https://pagure.io/freeipa/issue/9119 - -Signed-off-by: Alexander Bokovoy -Reviewed-By: Francisco Trivino ---- - ipatests/test_integration/test_otp.py | 3 ++- - 1 file changed, 2 insertions(+), 1 deletion(-) - -diff --git a/ipatests/test_integration/test_otp.py b/ipatests/test_integration/test_otp.py -index bec76d205bf37699483b65ebbc5613cbbb466bb4..04bef4626077e727654898b07a76acab4f1d5971 100644 ---- a/ipatests/test_integration/test_otp.py -+++ b/ipatests/test_integration/test_otp.py -@@ -5,7 +5,6 @@ - """ - import base64 - import logging --import paramiko - import pytest - import re - import time -@@ -102,6 +101,8 @@ def ssh_2f(hostname, username, answers_dict, port=22): - logger.info( - "Answer to ssh prompt is: '%s'", answers_dict[prmpt_str]) - return resp -+ -+ import paramiko - trans = paramiko.Transport((hostname, port)) - trans.connect() - trans.auth_interactive(username, answer_handler) --- -2.34.1 - diff --git a/SOURCES/0033-test_krbtpolicy-skip-SPAKE-related-tests-in-FIPS-mod.patch b/SOURCES/0033-test_krbtpolicy-skip-SPAKE-related-tests-in-FIPS-mod.patch deleted file mode 100644 index de21062..0000000 --- a/SOURCES/0033-test_krbtpolicy-skip-SPAKE-related-tests-in-FIPS-mod.patch +++ /dev/null @@ -1,44 +0,0 @@ -From 2e70535f74e7d9dd76e728eca1119ce522fd138a Mon Sep 17 00:00:00 2001 -From: Alexander Bokovoy -Date: Tue, 15 Mar 2022 11:39:46 +0200 -Subject: [PATCH] test_krbtpolicy: skip SPAKE-related tests in FIPS mode - -SPAKE is based on the crypto primitives which are not FIPS compliant -yet. This means that in FIPS mode use of 'hardened' authentication -indicator is not possible. Skip corresponding tests in FIPS mode. - -Related: https://pagure.io/freeipa/issue/9119 - -Signed-off-by: Alexander Bokovoy -Reviewed-By: Francisco Trivino ---- - ipatests/test_integration/test_krbtpolicy.py | 6 ++++++ - 1 file changed, 6 insertions(+) - -diff --git a/ipatests/test_integration/test_krbtpolicy.py b/ipatests/test_integration/test_krbtpolicy.py -index 9489fbc97b7836aecf491b57627f254d4849eb56..eae16247bdfb195c1d91209cf2d11eac4c25018f 100644 ---- a/ipatests/test_integration/test_krbtpolicy.py -+++ b/ipatests/test_integration/test_krbtpolicy.py -@@ -105,6 +105,9 @@ class TestPWPolicy(IntegrationTest): - - def test_krbtpolicy_password_and_hardended(self): - """Test a pwd and hardened kerberos ticket policy with 10min tickets""" -+ if self.master.is_fips_mode: -+ pytest.skip("SPAKE pre-auth is not compatible with FIPS mode") -+ - master = self.master - master.run_command(['ipa', 'user-mod', USER1, - '--user-auth-type', 'password', -@@ -133,6 +136,9 @@ class TestPWPolicy(IntegrationTest): - - def test_krbtpolicy_hardended(self): - """Test a hardened kerberos ticket policy with 30min tickets""" -+ if self.master.is_fips_mode: -+ pytest.skip("SPAKE pre-auth is not compatible with FIPS mode") -+ - master = self.master - master.run_command(['ipa', 'user-mod', USER1, - '--user-auth-type', 'hardened']) --- -2.34.1 - diff --git a/SOURCES/0034-Support-AES-for-KRA-archival-wrapping.patch b/SOURCES/0034-Support-AES-for-KRA-archival-wrapping.patch deleted file mode 100644 index 8d4ec8a..0000000 --- a/SOURCES/0034-Support-AES-for-KRA-archival-wrapping.patch +++ /dev/null @@ -1,555 +0,0 @@ -From 895e99b6843c2fa2274acab824607c33c1a560a4 Mon Sep 17 00:00:00 2001 -From: Christian Heimes -Date: Mon, 7 Oct 2019 14:13:03 +0200 -Subject: [PATCH] Support AES for KRA archival wrapping - -The vault plugin has used TripleDES (des-ede3-cbc) as default wrapping -algorithm since the plugin was introduced. Allow use of AES-128-CBC as -alternative wrapping algorithm for transport of secrets. - -Fixes: https://pagure.io/freeipa/issue/6524 - -Signed-off-by: Christian Heimes -Reviewed-By: Christian Heimes -Reviewed-By: Alexander Bokovoy ---- - API.txt | 7 +- - VERSION.m4 | 5 +- - ipaclient/plugins/vault.py | 155 +++++++++++++++++++++++++------------ - ipalib/capabilities.py | 4 + - ipalib/constants.py | 12 +++ - ipaserver/plugins/vault.py | 61 ++++++++++++--- - 6 files changed, 180 insertions(+), 64 deletions(-) - -diff --git a/API.txt b/API.txt -index 576fa7c51e31886b257ccf176aaf232c0f2ea5ee..f95f2c8457e39f2268386a8a2336952d3285e008 100644 ---- a/API.txt -+++ b/API.txt -@@ -6548,7 +6548,7 @@ output: Output('completed', type=[]) - output: Output('failed', type=[]) - output: Entry('result') - command: vault_archive_internal/1 --args: 1,9,3 -+args: 1,10,3 - arg: Str('cn', cli_name='name') - option: Flag('all', autofill=True, cli_name='all', default=False) - option: Bytes('nonce') -@@ -6559,6 +6559,7 @@ option: Flag('shared?', autofill=True, default=False) - option: Str('username?', cli_name='user') - option: Bytes('vault_data') - option: Str('version?') -+option: StrEnum('wrapping_algo?', autofill=True, default=u'des-ede3-cbc', values=[u'des-ede3-cbc', u'aes-128-cbc']) - output: Entry('result') - output: Output('summary', type=[, ]) - output: PrimaryKey('value') -@@ -6649,7 +6650,7 @@ output: Output('completed', type=[]) - output: Output('failed', type=[]) - output: Entry('result') - command: vault_retrieve_internal/1 --args: 1,7,3 -+args: 1,8,3 - arg: Str('cn', cli_name='name') - option: Flag('all', autofill=True, cli_name='all', default=False) - option: Flag('raw', autofill=True, cli_name='raw', default=False) -@@ -6658,6 +6659,7 @@ option: Bytes('session_key') - option: Flag('shared?', autofill=True, default=False) - option: Str('username?', cli_name='user') - option: Str('version?') -+option: StrEnum('wrapping_algo?', autofill=True, default=u'des-ede3-cbc', values=[u'des-ede3-cbc', u'aes-128-cbc']) - output: Entry('result') - output: Output('summary', type=[, ]) - output: PrimaryKey('value') -@@ -7327,6 +7329,7 @@ default: vaultcontainer_del/1 - default: vaultcontainer_remove_owner/1 - default: vaultcontainer_show/1 - default: whoami/1 -+capability: vault_aes_keywrap 2.246 - capability: messages 2.52 - capability: optional_uid_params 2.54 - capability: permissions2 2.69 -diff --git a/VERSION.m4 b/VERSION.m4 -index 70aaff4c9b9514a5937eae60074376e1a592464e..997ac35e74fa6f2a96da027ed3ce93cf809b62a7 100644 ---- a/VERSION.m4 -+++ b/VERSION.m4 -@@ -86,9 +86,8 @@ define(IPA_DATA_VERSION, 20100614120000) - # # - ######################################################## - define(IPA_API_VERSION_MAJOR, 2) --# Last change: add enable_sid to config --define(IPA_API_VERSION_MINOR, 245) -- -+# Last change: Add wrapping algorithm to vault archive/retrieve -+define(IPA_API_VERSION_MINOR, 246) - - ######################################################## - # Following values are auto-generated from values above -diff --git a/ipaclient/plugins/vault.py b/ipaclient/plugins/vault.py -index d3a1d370efaccc7e5b0088bd3df341d76884d509..115171c7768d44251c17d0bcdac9c37b3a25db99 100644 ---- a/ipaclient/plugins/vault.py -+++ b/ipaclient/plugins/vault.py -@@ -25,11 +25,12 @@ import io - import json - import logging - import os -+import ssl - import tempfile - - from cryptography.fernet import Fernet, InvalidToken - from cryptography.hazmat.backends import default_backend --from cryptography.hazmat.primitives import hashes, serialization -+from cryptography.hazmat.primitives import hashes - from cryptography.hazmat.primitives.kdf.pbkdf2 import PBKDF2HMAC - from cryptography.hazmat.primitives.asymmetric import padding - from cryptography.hazmat.primitives.ciphers import Cipher, algorithms, modes -@@ -39,7 +40,7 @@ from cryptography.hazmat.primitives.serialization import ( - - from ipaclient.frontend import MethodOverride - from ipalib import x509 --from ipalib.constants import USER_CACHE_PATH -+from ipalib import constants - from ipalib.frontend import Local, Method, Object - from ipalib.util import classproperty - from ipalib import api, errors -@@ -546,42 +547,49 @@ class vault_mod(Local): - return response - - --class _TransportCertCache: -+class _KraConfigCache: -+ """The KRA config cache stores vaultconfig-show result. -+ """ - def __init__(self): - self._dirname = os.path.join( -- USER_CACHE_PATH, 'ipa', 'kra-transport-certs' -+ constants.USER_CACHE_PATH, 'ipa', 'kra-config' - ) - - def _get_filename(self, domain): -- basename = DNSName(domain).ToASCII() + '.pem' -+ basename = DNSName(domain).ToASCII() + '.json' - return os.path.join(self._dirname, basename) - -- def load_cert(self, domain): -- """Load cert from cache -+ def load(self, domain): -+ """Load config from cache - - :param domain: IPA domain -- :return: cryptography.x509.Certificate or None -+ :return: dict or None - """ - filename = self._get_filename(domain) - try: - try: -- return x509.load_certificate_from_file(filename) -- except EnvironmentError as e: -+ with open(filename) as f: -+ return json.load(f) -+ except OSError as e: - if e.errno != errno.ENOENT: - raise - except Exception: - logger.warning("Failed to load %s", filename, exc_info=True) - return None - -- def store_cert(self, domain, transport_cert): -- """Store a new cert or override existing cert -+ def store(self, domain, response): -+ """Store config in cache - - :param domain: IPA domain -- :param transport_cert: cryptography.x509.Certificate -- :return: True if cert was stored successfully -+ :param config: ipa vaultconfig-show response -+ :return: True if config was stored successfully - """ -+ config = response['result'].copy() -+ # store certificate as PEM-encoded ASCII -+ config['transport_cert'] = ssl.DER_cert_to_PEM_cert( -+ config['transport_cert'] -+ ) - filename = self._get_filename(domain) -- pem = transport_cert.public_bytes(serialization.Encoding.PEM) - try: - try: - os.makedirs(self._dirname) -@@ -589,9 +597,9 @@ class _TransportCertCache: - if e.errno != errno.EEXIST: - raise - with tempfile.NamedTemporaryFile(dir=self._dirname, delete=False, -- mode='wb') as f: -+ mode='w') as f: - try: -- f.write(pem) -+ json.dump(config, f) - ipautil.flush_sync(f) - f.close() - os.rename(f.name, filename) -@@ -604,8 +612,8 @@ class _TransportCertCache: - else: - return True - -- def remove_cert(self, domain): -- """Remove a cert from cache, ignores errors -+ def remove(self, domain): -+ """Remove a config from cache, ignores errors - - :param domain: IPA domain - :return: True if cert was found and removed -@@ -621,7 +629,7 @@ class _TransportCertCache: - return True - - --_transport_cert_cache = _TransportCertCache() -+_kra_config_cache = _KraConfigCache() - - - @register(override=True, no_fail=True) -@@ -636,13 +644,8 @@ class vaultconfig_show(MethodOverride): - - response = super(vaultconfig_show, self).forward(*args, **options) - -- # cache transport certificate -- transport_cert = x509.load_der_x509_certificate( -- response['result']['transport_cert']) -- -- _transport_cert_cache.store_cert( -- self.api.env.domain, transport_cert -- ) -+ # cache config -+ _kra_config_cache.store(self.api.env.domain, response) - - if file: - with open(file, 'wb') as f: -@@ -652,10 +655,54 @@ class vaultconfig_show(MethodOverride): - - - class ModVaultData(Local): -- def _generate_session_key(self): -- key_length = max(algorithms.TripleDES.key_sizes) -- algo = algorithms.TripleDES(os.urandom(key_length // 8)) -- return algo -+ def _generate_session_key(self, name): -+ if name not in constants.VAULT_WRAPPING_SUPPORTED_ALGOS: -+ msg = _("{algo} is not a supported vault wrapping algorithm") -+ raise errors.ValidationError(msg.format(algo=repr(name))) -+ if name == constants.VAULT_WRAPPING_AES128_CBC: -+ return algorithms.AES(os.urandom(128 // 8)) -+ elif name == constants.VAULT_WRAPPING_3DES: -+ return algorithms.TripleDES(os.urandom(196 // 8)) -+ else: -+ # unreachable -+ raise ValueError(name) -+ -+ def _get_vaultconfig(self, force_refresh=False): -+ config = None -+ if not force_refresh: -+ config = _kra_config_cache.load(self.api.env.domain) -+ if config is None: -+ # vaultconfig_show also caches data -+ response = self.api.Command.vaultconfig_show() -+ config = response['result'] -+ transport_cert = x509.load_der_x509_certificate( -+ config['transport_cert'] -+ ) -+ else: -+ # cached JSON uses PEM-encoded ASCII string -+ transport_cert = x509.load_pem_x509_certificate( -+ config['transport_cert'].encode('ascii') -+ ) -+ -+ default_algo = config.get('wrapping_default_algorithm') -+ if default_algo is None: -+ # old server -+ wrapping_algo = constants.VAULT_WRAPPING_AES128_CBC -+ elif default_algo in constants.VAULT_WRAPPING_SUPPORTED_ALGOS: -+ # try to use server default -+ wrapping_algo = default_algo -+ else: -+ # prefer server's sorting order -+ for algo in config['wrapping_supported_algorithms']: -+ if algo in constants.VAULT_WRAPPING_SUPPORTED_ALGOS: -+ wrapping_algo = algo -+ break -+ else: -+ raise errors.ValidationError( -+ "No overlapping wrapping algorithm between server and " -+ "client." -+ ) -+ return transport_cert, wrapping_algo - - def _do_internal(self, algo, transport_cert, raise_unexpected, - *args, **options): -@@ -675,29 +722,23 @@ class ModVaultData(Local): - except (errors.InternalError, - errors.ExecutionError, - errors.GenericError): -- _transport_cert_cache.remove_cert(self.api.env.domain) -+ _kra_config_cache.remove(self.api.env.domain) - if raise_unexpected: - raise - return None - -- def internal(self, algo, *args, **options): -+ def internal(self, algo, transport_cert, *args, **options): - """ - Calls the internal counterpart of the command. - """ -- domain = self.api.env.domain -- - # try call with cached transport certificate -- transport_cert = _transport_cert_cache.load_cert(domain) -- if transport_cert is not None: -- result = self._do_internal(algo, transport_cert, False, -+ result = self._do_internal(algo, transport_cert, False, - *args, **options) -- if result is not None: -- return result -+ if result is not None: -+ return result - - # retrieve transport certificate (cached by vaultconfig_show) -- response = self.api.Command.vaultconfig_show() -- transport_cert = x509.load_der_x509_certificate( -- response['result']['transport_cert']) -+ transport_cert = self._get_vaultconfig(force_refresh=True)[0] - # call with the retrieved transport certificate - return self._do_internal(algo, transport_cert, True, - *args, **options) -@@ -777,7 +818,7 @@ class vault_archive(ModVaultData): - def _wrap_data(self, algo, json_vault_data): - """Encrypt data with wrapped session key and transport cert - -- :param bytes algo: wrapping algorithm instance -+ :param algo: wrapping algorithm instance - :param bytes json_vault_data: dumped vault data - :return: - """ -@@ -929,15 +970,24 @@ class vault_archive(ModVaultData): - - json_vault_data = json.dumps(vault_data).encode('utf-8') - -+ # get config -+ transport_cert, wrapping_algo = self._get_vaultconfig() -+ # let options override wrapping algo -+ # For backwards compatibility do not send old legacy wrapping algo -+ # to server. Only send the option when non-3DES is used. -+ wrapping_algo = options.pop('wrapping_algo', wrapping_algo) -+ if wrapping_algo != constants.VAULT_WRAPPING_3DES: -+ options['wrapping_algo'] = wrapping_algo -+ - # generate session key -- algo = self._generate_session_key() -+ algo = self._generate_session_key(wrapping_algo) - # wrap vault data - nonce, wrapped_vault_data = self._wrap_data(algo, json_vault_data) - options.update( - nonce=nonce, - vault_data=wrapped_vault_data - ) -- return self.internal(algo, *args, **options) -+ return self.internal(algo, transport_cert, *args, **options) - - - @register(no_fail=True) -@@ -1061,10 +1111,19 @@ class vault_retrieve(ModVaultData): - vault = self.api.Command.vault_show(*args, **options)['result'] - vault_type = vault['ipavaulttype'][0] - -+ # get config -+ transport_cert, wrapping_algo = self._get_vaultconfig() -+ # let options override wrapping algo -+ # For backwards compatibility do not send old legacy wrapping algo -+ # to server. Only send the option when non-3DES is used. -+ wrapping_algo = options.pop('wrapping_algo', wrapping_algo) -+ if wrapping_algo != constants.VAULT_WRAPPING_3DES: -+ options['wrapping_algo'] = wrapping_algo -+ - # generate session key -- algo = self._generate_session_key() -+ algo = self._generate_session_key(wrapping_algo) - # send retrieval request to server -- response = self.internal(algo, *args, **options) -+ response = self.internal(algo, transport_cert, *args, **options) - # unwrap data with session key - vault_data = self._unwrap_response( - algo, -diff --git a/ipalib/capabilities.py b/ipalib/capabilities.py -index 55b84aa6bc73d583e7bd5d03d2f4f1cc5c8e7c0b..4d8ae408bf67c280d27ce494baa9db9aaff0cd69 100644 ---- a/ipalib/capabilities.py -+++ b/ipalib/capabilities.py -@@ -54,6 +54,10 @@ capabilities = dict( - - # dns_name_values: dnsnames as objects - dns_name_values=u'2.88', -+ -+ # vault supports aes key wrapping -+ vault_aes_keywrap='2.246' -+ - ) - - -diff --git a/ipalib/constants.py b/ipalib/constants.py -index 9f19b0f9941ba5068f1e6c218092e3b76fdc7599..11171b2e8aeb6f7306299b2bd7db3a3f39d29d4a 100644 ---- a/ipalib/constants.py -+++ b/ipalib/constants.py -@@ -374,3 +374,15 @@ KRA_TRACKING_REQS = { - } - - ALLOWED_NETBIOS_CHARS = string.ascii_uppercase + string.digits + '-' -+ -+# vault data wrapping algorithms -+VAULT_WRAPPING_3DES = 'des-ede3-cbc' -+VAULT_WRAPPING_AES128_CBC = 'aes-128-cbc' -+VAULT_WRAPPING_SUPPORTED_ALGOS = ( -+ # old default was 3DES -+ VAULT_WRAPPING_3DES, -+ # supported since pki-kra >= 10.4 -+ VAULT_WRAPPING_AES128_CBC, -+) -+# 3DES for backwards compatibility -+VAULT_WRAPPING_DEFAULT_ALGO = VAULT_WRAPPING_3DES -diff --git a/ipaserver/plugins/vault.py b/ipaserver/plugins/vault.py -index aebac7dff7bb9d183c6012cc685577d476e18c4e..4d40f66c6a793a831e91c5fe25c8b5277cbd1972 100644 ---- a/ipaserver/plugins/vault.py -+++ b/ipaserver/plugins/vault.py -@@ -23,6 +23,10 @@ from ipalib.frontend import Command, Object - from ipalib import api, errors - from ipalib import Bytes, Flag, Str, StrEnum - from ipalib import output -+from ipalib.constants import ( -+ VAULT_WRAPPING_SUPPORTED_ALGOS, VAULT_WRAPPING_DEFAULT_ALGO, -+ VAULT_WRAPPING_3DES, VAULT_WRAPPING_AES128_CBC, -+) - from ipalib.crud import PKQuery, Retrieve - from ipalib.parameters import Principal - from ipalib.plugable import Registry -@@ -39,14 +43,8 @@ from ipaserver.masters import is_service_enabled - if api.env.in_server: - import pki.account - import pki.key -- # pylint: disable=no-member -- try: -- # pki >= 10.4.0 -- from pki.crypto import DES_EDE3_CBC_OID -- except ImportError: -- DES_EDE3_CBC_OID = pki.key.KeyClient.DES_EDE3_CBC_OID -- # pylint: enable=no-member -- -+ from pki.crypto import DES_EDE3_CBC_OID -+ from pki.crypto import AES_128_CBC_OID - - if six.PY3: - unicode = str -@@ -652,6 +652,20 @@ class vault(LDAPObject): - ), - ) - -+ def _translate_algorithm(self, name): -+ if name is None: -+ name = VAULT_WRAPPING_DEFAULT_ALGO -+ if name not in VAULT_WRAPPING_SUPPORTED_ALGOS: -+ msg = _("{algo} is not a supported vault wrapping algorithm") -+ raise errors.ValidationError(msg.format(algo=name)) -+ if name == VAULT_WRAPPING_3DES: -+ return DES_EDE3_CBC_OID -+ elif name == VAULT_WRAPPING_AES128_CBC: -+ return AES_128_CBC_OID -+ else: -+ # unreachable -+ raise ValueError(name) -+ - def get_dn(self, *keys, **options): - """ - Generates vault DN from parameters. -@@ -992,14 +1006,18 @@ class vaultconfig_show(Retrieve): - ) - - def execute(self, *args, **options): -- - if not self.api.Command.kra_is_enabled()['result']: - raise errors.InvocationError( - format=_('KRA service is not enabled')) - -+ config = dict( -+ wrapping_supported_algorithms=VAULT_WRAPPING_SUPPORTED_ALGOS, -+ wrapping_default_algorithm=VAULT_WRAPPING_DEFAULT_ALGO, -+ ) -+ - with self.api.Backend.kra.get_client() as kra_client: - transport_cert = kra_client.system_certs.get_transport_cert() -- config = {'transport_cert': transport_cert.binary} -+ config['transport_cert'] = transport_cert.binary - - self.api.Object.config.show_servroles_attributes( - config, "KRA server", **options) -@@ -1029,6 +1047,13 @@ class vault_archive_internal(PKQuery): - 'nonce', - doc=_('Nonce'), - ), -+ StrEnum( -+ 'wrapping_algo?', -+ doc=_('Key wrapping algorithm'), -+ values=VAULT_WRAPPING_SUPPORTED_ALGOS, -+ default=VAULT_WRAPPING_DEFAULT_ALGO, -+ autofill=True, -+ ), - ) - - has_output = output.standard_entry -@@ -1045,6 +1070,9 @@ class vault_archive_internal(PKQuery): - nonce = options.pop('nonce') - wrapped_session_key = options.pop('session_key') - -+ wrapping_algo = options.pop('wrapping_algo', None) -+ algorithm_oid = self.obj._translate_algorithm(wrapping_algo) -+ - # retrieve vault info - vault = self.api.Command.vault_show(*args, **options)['result'] - -@@ -1071,7 +1099,7 @@ class vault_archive_internal(PKQuery): - pki.key.KeyClient.PASS_PHRASE_TYPE, - wrapped_vault_data, - wrapped_session_key, -- algorithm_oid=DES_EDE3_CBC_OID, -+ algorithm_oid=algorithm_oid, - nonce_iv=nonce, - ) - -@@ -1098,6 +1126,13 @@ class vault_retrieve_internal(PKQuery): - 'session_key', - doc=_('Session key wrapped with transport certificate'), - ), -+ StrEnum( -+ 'wrapping_algo?', -+ doc=_('Key wrapping algorithm'), -+ values=VAULT_WRAPPING_SUPPORTED_ALGOS, -+ default=VAULT_WRAPPING_DEFAULT_ALGO, -+ autofill=True, -+ ), - ) - - has_output = output.standard_entry -@@ -1112,6 +1147,9 @@ class vault_retrieve_internal(PKQuery): - - wrapped_session_key = options.pop('session_key') - -+ wrapping_algo = options.pop('wrapping_algo', None) -+ algorithm_oid = self.obj._translate_algorithm(wrapping_algo) -+ - # retrieve vault info - vault = self.api.Command.vault_show(*args, **options)['result'] - -@@ -1132,6 +1170,9 @@ class vault_retrieve_internal(PKQuery): - - key_info = response.key_infos[0] - -+ # XXX hack -+ kra_client.keys.encrypt_alg_oid = algorithm_oid -+ - # retrieve encrypted data from KRA - key = kra_client.keys.retrieve_key( - key_info.get_key_id(), --- -2.34.1 - diff --git a/SOURCES/0035-Set-AES-as-default-for-KRA-archival-wrapping.patch b/SOURCES/0035-Set-AES-as-default-for-KRA-archival-wrapping.patch deleted file mode 100644 index f762229..0000000 --- a/SOURCES/0035-Set-AES-as-default-for-KRA-archival-wrapping.patch +++ /dev/null @@ -1,86 +0,0 @@ -From 984190eea01ac42cd1f97567a67dd9446e5b0bf9 Mon Sep 17 00:00:00 2001 -From: Francisco Trivino -Date: Fri, 11 Mar 2022 17:47:38 +0100 -Subject: [PATCH] Set AES as default for KRA archival wrapping - -This commit sets AES-128-CBC as default wrapping algorithm as -TripleDES (des-ede3-cbc) is not supported anymore in C9S. - -Fixes: https://pagure.io/freeipa/issue/6524 - -Signed-off-by: Francisco Trivino -Reviewed-By: Christian Heimes -Reviewed-By: Alexander Bokovoy ---- - API.txt | 6 +++--- - ipalib/constants.py | 14 +++++++++----- - 2 files changed, 12 insertions(+), 8 deletions(-) - -diff --git a/API.txt b/API.txt -index f95f2c8457e39f2268386a8a2336952d3285e008..1f27dcc616a6395c56ef91f3453e7620625c7645 100644 ---- a/API.txt -+++ b/API.txt -@@ -6559,7 +6559,7 @@ option: Flag('shared?', autofill=True, default=False) - option: Str('username?', cli_name='user') - option: Bytes('vault_data') - option: Str('version?') --option: StrEnum('wrapping_algo?', autofill=True, default=u'des-ede3-cbc', values=[u'des-ede3-cbc', u'aes-128-cbc']) -+option: StrEnum('wrapping_algo?', autofill=True, default=u'aes-128-cbc', values=[u'aes-128-cbc', u'des-ede3-cbc']) - output: Entry('result') - output: Output('summary', type=[, ]) - output: PrimaryKey('value') -@@ -6659,7 +6659,7 @@ option: Bytes('session_key') - option: Flag('shared?', autofill=True, default=False) - option: Str('username?', cli_name='user') - option: Str('version?') --option: StrEnum('wrapping_algo?', autofill=True, default=u'des-ede3-cbc', values=[u'des-ede3-cbc', u'aes-128-cbc']) -+option: StrEnum('wrapping_algo?', autofill=True, default=u'aes-128-cbc', values=[u'aes-128-cbc', u'des-ede3-cbc']) - output: Entry('result') - output: Output('summary', type=[, ]) - output: PrimaryKey('value') -@@ -7329,10 +7329,10 @@ default: vaultcontainer_del/1 - default: vaultcontainer_remove_owner/1 - default: vaultcontainer_show/1 - default: whoami/1 --capability: vault_aes_keywrap 2.246 - capability: messages 2.52 - capability: optional_uid_params 2.54 - capability: permissions2 2.69 - capability: primary_key_types 2.83 - capability: datetime_values 2.84 - capability: dns_name_values 2.88 -+capability: vault_aes_keywrap 2.246 -diff --git a/ipalib/constants.py b/ipalib/constants.py -index 11171b2e8aeb6f7306299b2bd7db3a3f39d29d4a..68178004181bebcc8c093dac55e18d5afe0251e5 100644 ---- a/ipalib/constants.py -+++ b/ipalib/constants.py -@@ -29,6 +29,8 @@ from ipaplatform.constants import constants as _constants - from ipapython.dn import DN - from ipapython.fqdn import gethostfqdn - from ipapython.version import VERSION, API_VERSION -+from cryptography.hazmat.primitives.ciphers import algorithms, modes -+from cryptography.hazmat.backends.openssl.backend import backend - - - FQDN = gethostfqdn() -@@ -379,10 +381,12 @@ ALLOWED_NETBIOS_CHARS = string.ascii_uppercase + string.digits + '-' - VAULT_WRAPPING_3DES = 'des-ede3-cbc' - VAULT_WRAPPING_AES128_CBC = 'aes-128-cbc' - VAULT_WRAPPING_SUPPORTED_ALGOS = ( -- # old default was 3DES -- VAULT_WRAPPING_3DES, -- # supported since pki-kra >= 10.4 -+ # new default and supported since pki-kra >= 10.4 - VAULT_WRAPPING_AES128_CBC, - ) --# 3DES for backwards compatibility --VAULT_WRAPPING_DEFAULT_ALGO = VAULT_WRAPPING_3DES -+VAULT_WRAPPING_DEFAULT_ALGO = VAULT_WRAPPING_AES128_CBC -+ -+# Add 3DES for backwards compatibility if supported -+if backend.cipher_supported(algorithms.TripleDES(b"\x00" * 8), -+ modes.CBC(b"\x00" * 8)): -+ VAULT_WRAPPING_SUPPORTED_ALGOS += (VAULT_WRAPPING_3DES,) --- -2.34.1 - diff --git a/SOURCES/freeipa-4.10.0.tar.gz.asc b/SOURCES/freeipa-4.10.0.tar.gz.asc new file mode 100644 index 0000000..e8eaec1 --- /dev/null +++ b/SOURCES/freeipa-4.10.0.tar.gz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCAAdFiEE11Z2TU1+KXxtrRFyaYdvcqbi008FAmK8aYIACgkQaYdvcqbi +00/mYQ/9GsTlD3aiAVvkTn+PLngLdsg3zFSDXUUI/I4ylOeoubzYmdWrX2yWJfvk +soVcxtHeLkrI/uLo44iiZkxYILxMY56dPzoUn6I46VQFppdoOzwlvdYhlOXYtvtB +yYIZhMdCsTkCORMlZ/RR8qNH8iZ1Zjzd4sf6CMWDdxK6ruAfPzaKAMm4EMa1+Rv7 +67OfSJKqfNksfeKNndYyNki1FmZo7ukKqcA5/lE+ZaN3/yg6IMydqJVD462OJizF +aHyYZDEaUQv3Or9d8V5G/qJpUz6wCjvzLGvNp3nn4goyX2RG1yY6AX6W8P5/FGiN +A5emCV2LmufWE02CGHZ/9i88BIRqh0laPYJianEw/4iJa3BVYDjnlCTWxjDqVfv/ +WBlEnZm/bQkHJITEe6hIwmnHJIFPrhuPxsaBIRUNU1oLTIoU+VFnPRyGGeFuKPSX +girFx1ip3roB6ChoXhYprS1eJ8CjP61ffjT+GLXl9b8OyqFmbxLCMRp19uFt96L1 +DHWZv9ytfcwoZW7zzKlCwcGcLsui4PCmriSS8uaGUNvouBfeshHU4OgilwJnjQMP +kPvqagQCF7xe1ZoOdgoKgYvhXI+jABrZ0LVQoj4QMHGjCxkdFmhNNM37xtHogae9 +NwfSWqa9UZO+LHy4tNiHrv9W0WnDoPjLFrod2yxIfhh/reYs3GU= +=Zzx6 +-----END PGP SIGNATURE----- diff --git a/SOURCES/freeipa-4.9.8.tar.gz.asc b/SOURCES/freeipa-4.9.8.tar.gz.asc deleted file mode 100644 index c14420c..0000000 --- a/SOURCES/freeipa-4.9.8.tar.gz.asc +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQIzBAABCAAdFiEE11Z2TU1+KXxtrRFyaYdvcqbi008FAmGf1XcACgkQaYdvcqbi -00/kMQ//Vano94V0/L3YsLaqKiFcGo/py5pTq1Os3wB9zzCYSuU0P/eajuHLBYNe -MfxecZihFFlmUdNooNWbewT4CE0ey1qFLwPfGXuLrse6fXVLLaYnAv2mkPUmDSpM -XfXO0PFU0BtdkMAUsdUATngPCpQzYjVUKsAMwPovi3UcLzFZ8tWJKMA55urhwC4q -E042wPLqzcX6Ee5JBSBkfNe35vG2LY7o3Ynh8SVCee2lBJvdWiuFT5XRhybXUsOp -q3eTsVPz68p7CvOrjlLSsWPP0nbGF1O1UQsN+oaDZAav1Nx8lTOlxUCUQXWbs2X6 -BTUAOmZ6VjYu61sNgNSj+BSHlHIT3uRJ55JO5nLH/hLm0Oxn6SGRTVMueqV376QA -CsIk7UrdcX9QUtu70eRxuu1aAWJ5eaF4GDWnFP+62wzd/d6LjWEE+9kXgvrcTF0C -UzjWrmbI8x23bB4kqcROHz8lryMsBpZ94QKPHVppMiPgapDKRkculYkSeRLboADi -q4mh2prkDSq9diWV4HvZTGwPU77oiLrQsvbGuvwD62PAlyQ4rZpfW3FllTL2Lcxy -urA8a9UnQWQtDOsZIyxmMJ7R04gjI5fZfDhq6S09L9MfjFEKjsqO4FzXamj+SbAo -w25sIp1qT0sV1vOt+/R/HYSIyggQyTZpQJu5UB34QLqpfDdUwFg= -=t9up ------END PGP SIGNATURE----- diff --git a/SPECS/freeipa.spec b/SPECS/freeipa.spec index 12c75a3..a386ef9 100644 --- a/SPECS/freeipa.spec +++ b/SPECS/freeipa.spec @@ -150,8 +150,8 @@ # RHEL 8.2+, F32+ has 3.58 %global nss_version 3.44.0-4 -# RHEL 8.3+, F32+ -%global sssd_version 2.4.0 +# RHEL 8.7+, F35+, adds IdP integration +%global sssd_version 2.7.0 %define krb5_base_version %(LC_ALL=C /usr/bin/pkgconf --modversion krb5 | grep -Eo '^[^.]+\.[^.]+' || echo %krb5_version) %global kdcproxy_version 0.4-3 @@ -185,7 +185,7 @@ # Work-around fact that RPM SPEC parser does not accept # "Version: @VERSION@" in freeipa.spec.in used for Autoconf string replacement -%define IPA_VERSION 4.9.8 +%define IPA_VERSION 4.10.0 # Release candidate version -- uncomment with one percent for RC versions #%%global rc_version %%nil %define AT_SIGN @ @@ -198,7 +198,7 @@ Name: %{package_name} Version: %{IPA_VERSION} -Release: 7%{?rc_version:.%rc_version}%{?dist} +Release: 6%{?rc_version:.%rc_version}%{?dist} Summary: The Identity, Policy and Audit system License: GPLv3+ @@ -218,41 +218,20 @@ Source1: https://releases.pagure.org/freeipa/freeipa-%{version}%{?rc_vers # RHEL spec file only: START %if %{NON_DEVELOPER_BUILD} %if 0%{?rhel} >= 8 -Patch0001: 0001-ipa-kdb-issue-PAC_REQUESTER_SID-only-for-TGTs.patch -Patch0002: 0002-ipa-kdb-fix-requester-SID-check-according-to-MS-KILE.patch -Patch0003: 0003-ipatests-Fix-test_ipa_cert_fix.py-TestCertFixReplica.patch -Patch0004: 0004-Extend-test-to-see-if-replica-is-not-shown-when-runn.patch -Patch0005: 0005-ipatests-Test-default-value-of-nsslapd-sizelimit.patch -Patch0006: 0006-ipatests-Test-empty-cert-request-doesn-t-force-certm.patch -Patch0007: 0007-Test-cases-for-ipa-replica-conncheck-command.patch -Patch0008: 0008-PEP8-Fixes.patch -Patch0009: 0009-ipatests-webui-Tests-for-subordinate-ids.patch -Patch0010: 0010-Config-plugin-return-EmptyModlist-when-no-change-is-.patch -Patch0011: 0011-config-plugin-add-a-test-ensuring-EmptyModlist-is-re.patch -Patch0012: 0012-ipatests-webui-Use-safe-loader-for-loading-YAML-conf.patch -Patch0013: 0013-Added-test-automation-for-SHA384withRSA-CSR-support.patch -Patch0014: 0014-ipa-pki-proxy.conf-provide-access-to-kra-admin-kra-g.patch -Patch0015: 0015-ipa-kdb-do-not-remove-keys-for-hardened-auth-enabled.patch -Patch0016: 0016-ipatests-add-case-for-hardened-only-ticket-policy.patch -Patch0017: 0017-Don-t-always-override-the-port-in-import_included_pr.patch -Patch0018: 0018-Remove-ipa-join-errors-from-behind-the-debug-option.patch -Patch0019: 0019-Enable-the-ccache-sweep-timer-during-installation.patch -Patch0020: 0020-Test-ipa-ccache-sweep.timer-enabled-by-default-durin.patch -Patch0021: 0021-ipa_cldap-fix-memory-leak.patch -Patch0022: 0022-ipatests-remove-additional-check-for-failed-units_rhbz#2053025.patch -Patch0023: 0023-ipatests-fix-TestOTPToken-rhbz#2053025.patch -Patch0024: 0024-ipatests-Tests-for-Autoprivate-group.patch -Patch0025: 0025-mark-xfail-for-test_idoverride_with_auto_private_gro.patch -Patch0026: 0026-Mark-xfail-test_gidnumber_not_corresponding_existing.patch -Patch0027: 0027-KRB-instance-make-provision-to-work-with-crypto-poli.patch -Patch0028: 0028-tests-ensure-AD-SUPPORT-subpolicy-is-active.patch -Patch0029: 0029-ipatests-extend-AES-keyset-to-SHA2-based-ones.patch -Patch0030: 0030-freeipa.spec-bump-crypto-policies-dependency-for-Cen.patch -Patch0031: 0031-Kerberos-instance-default-to-AES256-SHA2-for-master-.patch -Patch0032: 0032-test_otp-do-not-use-paramiko-unless-it-is-really-nee.patch -Patch0033: 0033-test_krbtpolicy-skip-SPAKE-related-tests-in-FIPS-mod.patch -Patch0034: 0034-Support-AES-for-KRA-archival-wrapping.patch -Patch0035: 0035-Set-AES-as-default-for-KRA-archival-wrapping.patch +Patch0001: 0001-Only-calculate-LDAP-password-grace-when-the-password.patch +Patch0002: 0002-webui-Do-not-allow-empty-pagination-size.patch +Patch0003: 0003-ipatests-add-nightly-definitions-for-ipa-4-10-branch.patch +Patch0004: 0004-Added-a-check-while-removing-cert_dir-.-The-teardown.patch +Patch0005: 0005-ipatests-healthcheck-test-if-system-is-FIPS-enabled.patch +Patch0006: 0006-Disabling-gracelimit-does-not-prevent-LDAP-binds.patch +Patch0007: 0007-ipatests-ipa-client-install-subid-adds-entry-in-nssw.patch +Patch0008: 0008-webui-Allow-grace-login-limit.patch +Patch0009: 0009-Additional-tests-for-RSN-v3.patch +Patch0010: 0010-check_repl_update-in-progress-is-a-boolean.patch +Patch0011: 0011-ipatests-Fix-expected-object-classes.patch +Patch0012: 0012-doc-Update-LDAP-grace-period-design-with-default-val.patch +Patch0013: 0013-Set-default-gracelimit-on-group-password-policies-to.patch +Patch0014: 0014-Set-default-on-group-pwpolicy-with-no-grace-limit-in.patch Patch1001: 1001-Change-branding-to-IPA-and-Identity-Management.patch %endif %endif @@ -353,7 +332,9 @@ BuildRequires: python3-wheel %if %{with doc} BuildRequires: python3-sphinx -BuildRequires: python3-m2r +BuildRequires: plantuml +BuildRequires: fontconfig +BuildRequires: google-noto-sans-vf-fonts %endif # @@ -639,8 +620,8 @@ Requires: %{name}-common = %{version}-%{release} Requires: samba >= %{samba_version} Requires: samba-winbind -Requires: libsss_idmap Requires: sssd-winbind-idmap +Requires: libsss_idmap %if 0%{?rhel} Obsoletes: ipa-idoverride-memberof-plugin <= 0.1 %endif @@ -681,7 +662,12 @@ Requires: python3-sssdconfig >= %{sssd_version} Requires: cyrus-sasl-gssapi%{?_isa} Requires: chrony Requires: krb5-workstation >= %{krb5_version} -Requires: authselect >= 0.4-2 +# authselect: sssd profile with-subid +%if 0%{?fedora} >= 36 +Requires: authselect >= 1.4.0 +%else +Requires: authselect >= 1.2.5 +%endif Requires: curl # NIS domain name config: /usr/lib/systemd/system/*-domainname.service # All Fedora 28+ and RHEL8+ contain the service in hostname package @@ -693,6 +679,7 @@ Requires: xmlrpc-c >= 1.27.4 Requires: jansson %endif Requires: sssd-ipa >= %{sssd_version} +Requires: sssd-idp >= %{sssd_version} Requires: certmonger >= %{certmonger_version} Requires: nss-tools >= %{nss_version} Requires: bind-utils @@ -729,7 +716,7 @@ Conflicts: crypto-policies < 20200629-1 # Conflict with crypto-policies < 20220223-1 to get upgraded AD-SUPPORT and # AD-SUPPORT-LEGACY policy modules Conflicts: crypto-policies < 20220223-1 -%endif +%endif %description client IPA is an integrated solution to provide centrally managed Identity (users, @@ -1089,6 +1076,7 @@ rm %{buildroot}/%{plugin_dir}/libipa_extdom_extop.la rm %{buildroot}/%{plugin_dir}/libipa_range_check.la rm %{buildroot}/%{plugin_dir}/libipa_otp_counter.la rm %{buildroot}/%{plugin_dir}/libipa_otp_lasttoken.la +rm %{buildroot}/%{plugin_dir}/libipa_graceperiod.la rm %{buildroot}/%{plugin_dir}/libtopology.la rm %{buildroot}/%{_libdir}/krb5/plugins/kdb/ipadb.la rm %{buildroot}/%{_libdir}/samba/pdb/ipasam.la @@ -1272,6 +1260,7 @@ if [ $1 -gt 1 ] ; then %{__python3} -c 'from ipaclient.install.client import configure_krb5_snippet; configure_krb5_snippet()' >>/var/log/ipaupgrade.log 2>&1 %{__python3} -c 'from ipaclient.install.client import update_ipa_nssdb; update_ipa_nssdb()' >>/var/log/ipaupgrade.log 2>&1 + chmod 0600 /var/log/ipaupgrade.log SSH_CLIENT_SYSTEM_CONF="/etc/ssh/ssh_config" if [ -f "$SSH_CLIENT_SYSTEM_CONF" ]; then sed -E --in-place=.orig 's/^(HostKeyAlgorithms ssh-rsa,ssh-dss)$/# disabled by ipa-client update\n# \1/' "$SSH_CLIENT_SYSTEM_CONF" @@ -1447,6 +1436,7 @@ fi %attr(755,root,root) %{plugin_dir}/libipa_sidgen.so %attr(755,root,root) %{plugin_dir}/libipa_sidgen_task.so %attr(755,root,root) %{plugin_dir}/libipa_extdom_extop.so +%attr(755,root,root) %{plugin_dir}/libipa_graceperiod.so %attr(755,root,root) %{_libdir}/krb5/plugins/kdb/ipadb.so %{_mandir}/man1/ipa-replica-conncheck.1* %{_mandir}/man1/ipa-replica-install.1* @@ -1750,8 +1740,47 @@ fi %endif %changelog -* Mon Mar 21 2022 Florence Blanc-Renaud - 4.9.8-7 -- Resolves: rhbz#2057471 Consequences of FIPS crypto policy tightening in RHEL 9 +* Fri Aug 19 2022 Florence Blanc-Renaud - 4.10.0-6 +- Resolves: rhbz#2110014 ldap bind occurs when admin user changes password with gracelimit=0 +- Resolves: rhbz#2112901 RFE: Allow grace login limit to be set in IPA WebUI +- Resolves: rhbz#2115495 group password policy by default does not allow grace logins +- Resolves: rhbz#2116966 ipa-replica-manage displays traceback: Unexpected error: 'bool' object has no attribute 'lower' + +* Thu Jul 28 2022 Francisco Trivino - 4.10.0-5 +- Resolves: rhbz#2109645 + - Rebuild for samba-4.16.3-101.el9 + +* Thu Jul 21 2022 Francisco Trivino - 4.10.0-4 +- Resolves: rhbz#2109645 + - Rebuild for samba-4.16.3-100.el9 + +* Fri Jul 15 2022 Florence Blanc-Renaud - 4.10.0-3 +- Resolves: rhbz#2105294 IdM WebUI Pagination Size should not allow empty value + +* Thu Jun 30 2022 Florence Blanc-Renaud - 4.10.0-2 +- Resolves: rhbz#2091988 [RFE] Add code to check password expiration on ldap bind + +* Thu Jun 30 2022 Florence Blanc-Renaud - 4.10.0-1 +- Resolves: rhbz#747959 [RFE] Support random serial numbers in IPA certificates +- Resolves: rhbz#2100227 [UX] Preserving a user account produces output saying it was deleted + +* Fri Jun 17 2022 Florence Blanc-Renaud - 4.9.10-1 +- Resolves: rhbz#2079469 [Rebase] Rebase ipa to latest 4.9.x release +- Resolves: rhbz#2012911 named journalctl logs shows 'zone testrealm.test/IN: serial (serialnumber) write back to LDAP failed.' +- Resolves: rhbz#2069202 [RFE] add support for authenticating against external IdP services using OAUTH2 preauthenticaiton mechanism provided by SSSD +- Resolves: rhbz#2083218 ipa-dnskeysyncd floods /var/log/messages with DEBUG messages +- Resolves: rhbz#2089750 RFE: Improve error message with more detail for ipa-replica-install command +- Resolves: rhbz#2091988 [RFE] Add code to check password expiration on ldap bind +- Resolves: rhbz#2094400 [RFE] ipa-client-install should provide option to enable subid: sss in /etc/nsswitch.conf +- Resolves: rhbz#2096922 secret in ipa-pki-proxy.conf is not changed if new requiredSecret value is present in /etc/pki/pki-tomcat/server.xml + +* Wed Apr 06 2022 Florence Blanc-Renaud - 4.9.8-8 +- Resolves: rhbz#2067971 Consequences of FIPS crypto policy tightening in RHEL 9 + - tests: ensure AD-SUPPORT subpolicy is active in more cases + - ipatests: fix check for AD topology being present + +* Thu Mar 24 2022 Florence Blanc-Renaud - 4.9.8-7 +- Resolves: rhbz#2067971 Consequences of FIPS crypto policy tightening in RHEL 9 - KRB instance: make provision to work with crypto policy without SHA-1 HMAC types - tests: ensure AD-SUPPORT subpolicy is active - ipatests: extend AES keyset to SHA2-based ones