Include the HSM tests in the nightlies

Related: https://pagure.io/freeipa/issue/9273 Signed-off-by: Rob Crittenden <rcritten@redhat.com> Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
2025-02-25 18:55:28 -06:00 · 2024-04-26 18:16:43 -04:00
parent bcd8d2d90a
commit 879a937ddd
7 changed files with 1302 additions and 0 deletions
--- a/ipatests/prci_definitions/nightly_latest.yaml
+++ b/ipatests/prci_definitions/nightly_latest.yaml
@@ -1909,3 +1909,171 @@ jobs:
        template: *ci-master-latest
        timeout: 600
        topology: *master_1repl
+
+  fedora-latest/test_hsm_TestHSMInstall:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMInstall
+        template: *ci-master-latest
+        timeout: 5400
+        topology: *master_3repl_1client
+
+  fedora-latest/test_hsm_TestHSMInstallADTrustBase:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMInstallADTrustBase
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-latest/test_hsm_TestADTrustInstallWithDNS_KRA_ADTrust:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        test_suite: test_integration/test_hsm.py::TestADTrustInstallWithDNS_KRA_ADTrust
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-latest/test_hsm_TestHSMcertRenewal:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMcertRenewal
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-latest/test_hsm_TestHSMCALessToExternalToSelfSignedCA:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMCALessToExternalToSelfSignedCA
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-latest/test_hsm_TestHSMExternalToSelfSignedCA:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMExternalToSelfSignedCA
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-latest/test_hsm_TestHSMcertFix:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMcertFix
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-latest/test_hsm_TestHSMcertFixKRA:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMcertFixKRA
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-latest/test_hsm_TestHSMcertFixReplica:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMcertFixReplica
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-latest/test_hsm_TestHSMNegative:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMNegative
+        template: *ci-master-latest
+        timeout: 1800
+        topology: *master_1repl
+
+  fedora-latest/test_hsm_TestHSMACME:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMACME
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl_1client
+
+  fedora-latest/test_hsm_TestHSMBackupRestore:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMBackupRestore
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-latest/test_hsm_TestHSMACMEPrune:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMACMEPrune
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl_1client
+
+  fedora-latest/test_hsm_TestHSMVault:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMVault
+        template: *ci-master-latest
+        timeout: 12000
+        topology: *master_1repl_1client
--- a/ipatests/prci_definitions/nightly_latest_pki.yaml
+++ b/ipatests/prci_definitions/nightly_latest_pki.yaml
@@ -1100,3 +1100,199 @@ jobs:
        template: *ci-master-latest
        timeout: 10800
        topology: *master_1repl
+
+  pki-fedora/test_hsm_TestHSMInstall:
+    requires: [pki-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{pki-fedora/build_url}'
+        update_packages: True
+        copr: '@pki/master'
+        test_suite: test_integration/test_hsm.py::TestHSMInstall
+        template: *ci-master-latest
+        timeout: 10800
+        topology: *master_3repl_1client
+
+  pki-fedora/test_hsm_TestHSMInstallADTrustBase:
+    requires: [pki-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{pki-fedora/build_url}'
+        update_packages: True
+        copr: '@pki/master'
+        test_suite: test_integration/test_hsm.py::TestHSMInstallADTrustBase
+        template: *ci-master-latest
+        timeout: 5400
+        topology: *master_1repl
+
+  pki-fedora/test_hsm_TestADTrustInstallWithDNS_KRA_ADTrust:
+    requires: [pki-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{pki-fedora/build_url}'
+        update_packages: True
+        copr: '@pki/master'
+        test_suite: test_integration/test_hsm.py::TestADTrustInstallWithDNS_KRA_ADTrust
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  pki-fedora/test_hsm_TestHSMcertRenewal:
+    requires: [pki-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{pki-fedora/build_url}'
+        update_packages: True
+        copr: '@pki/master'
+        test_suite: test_integration/test_hsm.py::TestHSMcertRenewal
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  pki-fedora/test_hsm_TestHSMCALessToExternalToSelfSignedCA:
+    requires: [pki-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{pki-fedora/build_url}'
+        update_packages: True
+        copr: '@pki/master'
+        test_suite: test_integration/test_hsm.py::TestHSMCALessToExternalToSelfSignedCA
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  pki-fedora/test_hsm_TestHSMExternalToSelfSignedCA:
+    requires: [pki-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{pki-fedora/build_url}'
+        update_packages: True
+        copr: '@pki/master'
+        test_suite: test_integration/test_hsm.py::TestHSMExternalToSelfSignedCA
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  pki-fedora/test_hsm_TestHSMcertFix:
+    requires: [pki-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{pki-fedora/build_url}'
+        update_packages: True
+        copr: '@pki/master'
+        test_suite: test_integration/test_hsm.py::TestHSMcertFix
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  pki-fedora/test_hsm_TestHSMcertFixKRA:
+    requires: [pki-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{pki-fedora/build_url}'
+        update_packages: True
+        copr: '@pki/master'
+        test_suite: test_integration/test_hsm.py::TestHSMcertFixKRA
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  pki-fedora/test_hsm_TestHSMcertFixReplica:
+    requires: [pki-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{pki-fedora/build_url}'
+        update_packages: True
+        copr: '@pki/master'
+        test_suite: test_integration/test_hsm.py::TestHSMcertFixReplica
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  pki-fedora/test_hsm_TestHSMNegative:
+    requires: [pki-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{pki-fedora/build_url}'
+        update_packages: True
+        copr: '@pki/master'
+        test_suite: test_integration/test_hsm.py::TestHSMNegative
+        template: *ci-master-latest
+        timeout: 1800
+        topology: *master_1repl
+
+  pki-fedora/test_hsm_TestHSMACME:
+    requires: [pki-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{pki-fedora/build_url}'
+        update_packages: True
+        copr: '@pki/master'
+        test_suite: test_integration/test_hsm.py::TestHSMACME
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl_1client
+
+  pki-fedora/test_hsm_TestHSMBackupRestore:
+    requires: [pki-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{pki-fedora/build_url}'
+        update_packages: True
+        copr: '@pki/master'
+        test_suite: test_integration/test_hsm.py::TestHSMBackupRestore
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  pki-fedora/test_hsm_TestHSMACMEPrune:
+    requires: [pki-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{pki-fedora/build_url}'
+        update_packages: True
+        copr: '@pki/master'
+        test_suite: test_integration/test_hsm.py::TestHSMACMEPrune
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl_1client
+
+  pki-fedora/test_hsm_TestHSMVault:
+    requires: [pki-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{pki-fedora/build_url}'
+        update_packages: True
+        copr: '@pki/master'
+        test_suite: test_integration/test_hsm.py::TestHSMVault
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl_1client
--- a/ipatests/prci_definitions/nightly_latest_selinux.yaml
+++ b/ipatests/prci_definitions/nightly_latest_selinux.yaml
@@ -2061,3 +2061,185 @@ jobs:
        template: *ci-master-latest
        timeout: 600
        topology: *master_1repl
+
+  fedora-latest/test_hsm_TestHSMInstall:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        selinux_enforcing: True
+        test_suite: test_integration/test_hsm.py::TestHSMInstall
+        template: *ci-master-latest
+        timeout: 5400
+        topology: *master_3repl_1client
+
+  fedora-latest/test_hsm_TestHSMInstallADTrustBase:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        selinux_enforcing: True
+        test_suite: test_integration/test_hsm.py::TestHSMInstallADTrustBase
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-latest/test_hsm_TestADTrustInstallWithDNS_KRA_ADTrust:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        selinux_enforcing: True
+        test_suite: test_integration/test_hsm.py::TestADTrustInstallWithDNS_KRA_ADTrust
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-latest/test_hsm_TestHSMcertRenewal:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        selinux_enforcing: True
+        test_suite: test_integration/test_hsm.py::TestHSMcertRenewal
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-latest/test_hsm_TestHSMCALessToExternalToSelfSignedCA:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        selinux_enforcing: True
+        test_suite: test_integration/test_hsm.py::TestHSMCALessToExternalToSelfSignedCA
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-latest/test_hsm_TestHSMExternalToSelfSignedCA:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        selinux_enforcing: True
+        test_suite: test_integration/test_hsm.py::TestHSMExternalToSelfSignedCA
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-latest/test_hsm_TestHSMcertFix:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        selinux_enforcing: True
+        test_suite: test_integration/test_hsm.py::TestHSMcertFix
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-latest/test_hsm_TestHSMcertFixKRA:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        selinux_enforcing: True
+        test_suite: test_integration/test_hsm.py::TestHSMcertFixKRA
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-latest/test_hsm_TestHSMcertFixReplica:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        selinux_enforcing: True
+        test_suite: test_integration/test_hsm.py::TestHSMcertFixReplica
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-latest/test_hsm_TestHSMNegative:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        selinux_enforcing: True
+        test_suite: test_integration/test_hsm.py::TestHSMNegative
+        template: *ci-master-latest
+        timeout: 1800
+        topology: *master_1repl
+
+  fedora-latest/test_hsm_TestHSMACME:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        selinux_enforcing: True
+        test_suite: test_integration/test_hsm.py::TestHSMACME
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl_1client
+
+  fedora-latest/test_hsm_TestHSMBackupRestore:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        selinux_enforcing: True
+        test_suite: test_integration/test_hsm.py::TestHSMBackupRestore
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-latest/test_hsm_TestHSMACMEPrune:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        selinux_enforcing: True
+        test_suite: test_integration/test_hsm.py::TestHSMACMEPrune
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl_1client
+
+  fedora-latest/test_hsm_TestHSMVault:
+    requires: [fedora-latest/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-latest/build_url}'
+        selinux_enforcing: True
+        test_suite: test_integration/test_hsm.py::TestHSMVault
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl_1client
--- a/ipatests/prci_definitions/nightly_latest_testing.yaml
+++ b/ipatests/prci_definitions/nightly_latest_testing.yaml
@@ -2214,3 +2214,199 @@ jobs:
        template: *ci-master-latest
        timeout: 600
        topology: *master_1repl
+
+  testing-fedora/test_hsm_TestHSMInstall:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMInstall
+        template: *ci-master-latest
+        timeout: 5400
+        topology: *master_3repl_1client
+
+  testing-fedora/test_hsm_TestHSMInstallADTrustBase:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMInstallADTrustBase
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  testing-fedora/test_hsm_TestADTrustInstallWithDNS_KRA_ADTrust:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestADTrustInstallWithDNS_KRA_ADTrust
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  testing-fedora/test_hsm_TestHSMcertRenewal:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMcertRenewal
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  testing-fedora/test_hsm_TestHSMCALessToExternalToSelfSignedCA:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMCALessToExternalToSelfSignedCA
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  testing-fedora/test_hsm_TestHSMExternalToSelfSignedCA:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMExternalToSelfSignedCA
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  testing-fedora/test_hsm_TestHSMcertFix:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMcertFix
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  testing-fedora/test_hsm_TestHSMcertFixKRA:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMcertFixKRA
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  testing-fedora/test_hsm_TestHSMcertFixReplica:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMcertFixReplica
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  testing-fedora/test_hsm_TestHSMNegative:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMNegative
+        template: *ci-master-latest
+        timeout: 1800
+        topology: *master_1repl
+
+  testing-fedora/test_hsm_TestHSMACME:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMACME
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl_1client
+
+  testing-fedora/test_hsm_TestHSMBackupRestore:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMBackupRestore
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  testing-fedora/test_hsm_TestHSMACMEPrune:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMACMEPrune
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl_1client
+
+  testing-fedora/test_hsm_TestHSMVault:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMVault
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl_1client
--- a/ipatests/prci_definitions/nightly_latest_testing_selinux.yaml
+++ b/ipatests/prci_definitions/nightly_latest_testing_selinux.yaml
@@ -2366,3 +2366,213 @@ jobs:
        template: *ci-master-latest
        timeout: 600
        topology: *master_1repl
+
+  testing-fedora/test_hsm_TestHSMInstall:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        selinux_enforcing: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMInstall
+        template: *ci-master-latest
+        timeout: 5400
+        topology: *master_3repl_1client
+
+  testing-fedora/test_hsm_TestHSMInstallADTrustBase:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        selinux_enforcing: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMInstallADTrustBase
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  testing-fedora/test_hsm_TestADTrustInstallWithDNS_KRA_ADTrust:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        selinux_enforcing: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestADTrustInstallWithDNS_KRA_ADTrust
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  testing-fedora/test_hsm_TestHSMcertRenewal:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        selinux_enforcing: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMcertRenewal
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  testing-fedora/test_hsm_TestHSMCALessToExternalToSelfSignedCA:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        selinux_enforcing: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMCALessToExternalToSelfSignedCA
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  testing-fedora/test_hsm_TestHSMExternalToSelfSignedCA:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        selinux_enforcing: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMExternalToSelfSignedCA
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  testing-fedora/test_hsm_TestHSMcertFix:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        selinux_enforcing: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMcertFix
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  testing-fedora/test_hsm_TestHSMcertFixKRA:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        selinux_enforcing: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMcertFixKRA
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  testing-fedora/test_hsm_TestHSMcertFixReplica:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        selinux_enforcing: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMcertFixReplica
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  testing-fedora/test_hsm_TestHSMNegative:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        selinux_enforcing: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMNegative
+        template: *ci-master-latest
+        timeout: 1800
+        topology: *master_1repl
+
+  testing-fedora/test_hsm_TestHSMACME:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        selinux_enforcing: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMACME
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl_1client
+
+  testing-fedora/test_hsm_TestHSMBackupRestore:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        selinux_enforcing: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMBackupRestore
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl
+
+  testing-fedora/test_hsm_TestHSMACMEPrune:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        selinux_enforcing: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMACMEPrune
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl_1client
+
+  testing-fedora/test_hsm_TestHSMVault:
+    requires: [testing-fedora/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{testing-fedora/build_url}'
+        update_packages: True
+        selinux_enforcing: True
+        enable_testing_repo: True
+        test_suite: test_integration/test_hsm.py::TestHSMVault
+        template: *ci-master-latest
+        timeout: 3600
+        topology: *master_1repl_1client
--- a/ipatests/prci_definitions/nightly_previous.yaml
+++ b/ipatests/prci_definitions/nightly_previous.yaml
@@ -1909,3 +1909,171 @@ jobs:
        template: *ci-master-previous
        timeout: 600
        topology: *master_1repl
+
+  fedora-previous/test_hsm_TestHSMInstall:
+    requires: [fedora-previous/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-previous/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMInstall
+        template: *ci-master-previous
+        timeout: 5400
+        topology: *master_3repl_1client
+
+  fedora-previous/test_hsm_TestHSMInstallADTrustBase:
+    requires: [fedora-previous/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-previous/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMInstallADTrustBase
+        template: *ci-master-previous
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-previous/test_hsm_TestADTrustInstallWithDNS_KRA_ADTrust:
+    requires: [fedora-previous/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-previous/build_url}'
+        test_suite: test_integration/test_hsm.py::TestADTrustInstallWithDNS_KRA_ADTrust
+        template: *ci-master-previous
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-previous/test_hsm_TestHSMcertRenewal:
+    requires: [fedora-previous/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-previous/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMcertRenewal
+        template: *ci-master-previous
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-previous/test_hsm_TestHSMCALessToExternalToSelfSignedCA:
+    requires: [fedora-previous/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-previous/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMCALessToExternalToSelfSignedCA
+        template: *ci-master-previous
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-previous/test_hsm_TestHSMExternalToSelfSignedCA:
+    requires: [fedora-previous/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-previous/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMExternalToSelfSignedCA
+        template: *ci-master-previous
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-previous/test_hsm_TestHSMcertFix:
+    requires: [fedora-previous/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-previous/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMcertFix
+        template: *ci-master-previous
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-previous/test_hsm_TestHSMcertFixKRA:
+    requires: [fedora-previous/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-previous/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMcertFixKRA
+        template: *ci-master-previous
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-previous/test_hsm_TestHSMcertFixReplica:
+    requires: [fedora-previous/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-previous/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMcertFixReplica
+        template: *ci-master-previous
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-previous/test_hsm_TestHSMNegative:
+    requires: [fedora-previous/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-previous/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMNegative
+        template: *ci-master-previous
+        timeout: 1800
+        topology: *master_1repl
+
+  fedora-previous/test_hsm_TestHSMACME:
+    requires: [fedora-previous/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-previous/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMACME
+        template: *ci-master-previous
+        timeout: 3600
+        topology: *master_1repl_1client
+
+  fedora-previous/test_hsm_TestHSMBackupRestore:
+    requires: [fedora-previous/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-previous/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMBackupRestore
+        template: *ci-master-previous
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-previous/test_hsm_TestHSMACMEPrune:
+    requires: [fedora-previous/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-previous/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMACMEPrune
+        template: *ci-master-previous
+        timeout: 3600
+        topology: *master_1repl_1client
+
+  fedora-previous/test_hsm_TestHSMVault:
+    requires: [fedora-previous/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-previous/build_url}'
+        test_suite: test_integration/test_hsm.py::TestHSMVault
+        template: *ci-master-previous
+        timeout: 12000
+        topology: *master_1repl_1client
--- a/ipatests/prci_definitions/nightly_rawhide.yaml
+++ b/ipatests/prci_definitions/nightly_rawhide.yaml
@@ -2061,3 +2061,185 @@ jobs:
        template: *ci-master-frawhide
        timeout: 600
        topology: *master_1repl
+
+  fedora-rawhide/test_hsm_TestHSMInstall:
+    requires: [fedora-rawhide/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-rawhide/build_url}'
+        update_packages: True
+        test_suite: test_integration/test_hsm.py::TestHSMInstall
+        template: *ci-master-frawhide
+        timeout: 5400
+        topology: *master_3repl_1client
+
+  fedora-rawhide/test_hsm_TestHSMInstallADTrustBase:
+    requires: [fedora-rawhide/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-rawhide/build_url}'
+        update_packages: True
+        test_suite: test_integration/test_hsm.py::TestHSMInstallADTrustBase
+        template: *ci-master-frawhide
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-rawhide/test_hsm_TestADTrustInstallWithDNS_KRA_ADTrust:
+    requires: [fedora-rawhide/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-rawhide/build_url}'
+        update_packages: True
+        test_suite: test_integration/test_hsm.py::TestADTrustInstallWithDNS_KRA_ADTrust
+        template: *ci-master-frawhide
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-rawhide/test_hsm_TestHSMcertRenewal:
+    requires: [fedora-rawhide/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-rawhide/build_url}'
+        update_packages: True
+        test_suite: test_integration/test_hsm.py::TestHSMcertRenewal
+        template: *ci-master-frawhide
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-rawhide/test_hsm_TestHSMCALessToExternalToSelfSignedCA:
+    requires: [fedora-rawhide/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-rawhide/build_url}'
+        update_packages: True
+        test_suite: test_integration/test_hsm.py::TestHSMCALessToExternalToSelfSignedCA
+        template: *ci-master-frawhide
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-rawhide/test_hsm_TestHSMExternalToSelfSignedCA:
+    requires: [fedora-rawhide/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-rawhide/build_url}'
+        update_packages: True
+        test_suite: test_integration/test_hsm.py::TestHSMExternalToSelfSignedCA
+        template: *ci-master-frawhide
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-rawhide/test_hsm_TestHSMcertFix:
+    requires: [fedora-rawhide/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-rawhide/build_url}'
+        update_packages: True
+        test_suite: test_integration/test_hsm.py::TestHSMcertFix
+        template: *ci-master-frawhide
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-rawhide/test_hsm_TestHSMcertFixKRA:
+    requires: [fedora-rawhide/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-rawhide/build_url}'
+        update_packages: True
+        test_suite: test_integration/test_hsm.py::TestHSMcertFixKRA
+        template: *ci-master-frawhide
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-rawhide/test_hsm_TestHSMcertFixReplica:
+    requires: [fedora-rawhide/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-rawhide/build_url}'
+        update_packages: True
+        test_suite: test_integration/test_hsm.py::TestHSMcertFixReplica
+        template: *ci-master-frawhide
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-rawhide/test_hsm_TestHSMNegative:
+    requires: [fedora-rawhide/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-rawhide/build_url}'
+        update_packages: True
+        test_suite: test_integration/test_hsm.py::TestHSMNegative
+        template: *ci-master-frawhide
+        timeout: 1800
+        topology: *master_1repl
+
+  fedora-rawhide/test_hsm_TestHSMACME:
+    requires: [fedora-rawhide/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-rawhide/build_url}'
+        update_packages: True
+        test_suite: test_integration/test_hsm.py::TestHSMACME
+        template: *ci-master-frawhide
+        timeout: 3600
+        topology: *master_1repl_1client
+
+  fedora-rawhide/test_hsm_TestHSMBackupRestore:
+    requires: [fedora-rawhide/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-rawhide/build_url}'
+        update_packages: True
+        test_suite: test_integration/test_hsm.py::TestHSMBackupRestore
+        template: *ci-master-frawhide
+        timeout: 3600
+        topology: *master_1repl
+
+  fedora-rawhide/test_hsm_TestHSMACMEPrune:
+    requires: [fedora-rawhide/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-rawhide/build_url}'
+        update_packages: True
+        test_suite: test_integration/test_hsm.py::TestHSMACMEPrune
+        template: *ci-master-frawhide
+        timeout: 3600
+        topology: *master_1repl_1client
+
+  fedora-rawhide/test_hsm_TestHSMVault:
+    requires: [fedora-rawhide/build]
+    priority: 50
+    job:
+      class: RunPytest
+      args:
+        build_url: '{fedora-rawhide/build_url}'
+        update_packages: True
+        test_suite: test_integration/test_hsm.py::TestHSMVault
+        template: *ci-master-frawhide
+        timeout: 3600
+        topology: *master_1repl_1client