diff --git a/.freeipa-pr-ci.yaml b/.freeipa-pr-ci.yaml
index 88d34d58f..3a982940d 100644
--- a/.freeipa-pr-ci.yaml
+++ b/.freeipa-pr-ci.yaml
@@ -13,7 +13,7 @@ topologies:
     memory: 6700
 
 jobs:
-  fedora-27/build:
+  fedora-28/build:
     requires: []
     priority: 100
     job:
@@ -21,189 +21,189 @@ jobs:
       args:
         git_repo: '{git_repo}'
         git_refspec: '{git_refspec}'
-        template: &ci-master-f27
-          name: freeipa/ci-master-f27
-          version: 1.0.3
+        template: &ci-master-f28
+          name: freeipa/ci-master-f28
+          version: 0.1.5
         timeout: 1800
         topology: *build
 
-  fedora-27/simple_replication:
-    requires: [fedora-27/build]
+  fedora-28/simple_replication:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_simple_replication.py
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl
 
-  fedora-27/caless:
-    requires: [fedora-27/build]
+  fedora-28/caless:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_caless.py::TestServerReplicaCALessToCAFull
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl
 
-  fedora-27/external_ca:
-    requires: [fedora-27/build]
+  fedora-28/external_ca:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_external_ca.py::TestExternalCA test_integration/test_external_ca.py::TestSelfExternalSelf test_integration/test_external_ca.py::TestExternalCAInstall
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl
 
-  fedora-27/test_topologies:
-    requires: [fedora-27/build]
+  fedora-28/test_topologies:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_topologies.py
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl
 
-  fedora-27/test_sudo:
-    requires: [fedora-27/build]
+  fedora-28/test_sudo:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_sudo.py
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl_1client
 
-  fedora-27/test_ipa_cli:
-    requires: [fedora-27/build]
+  fedora-28/test_ipa_cli:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_ipa_cli.py
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl
 
-  fedora-27/test_kerberos_flags:
-    requires: [fedora-27/build]
+  fedora-28/test_kerberos_flags:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_kerberos_flags.py
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl_1client
 
-  fedora-27/test_http_kdc_proxy:
-    requires: [fedora-27/build]
+  fedora-28/test_http_kdc_proxy:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_http_kdc_proxy.py
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl_1client
 
-  fedora-27/test_forced_client_enrolment:
-    requires: [fedora-27/build]
+  fedora-28/test_forced_client_enrolment:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_forced_client_reenrollment.py
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl_1client
 
-  fedora-27/test_advise:
-    requires: [fedora-27/build]
+  fedora-28/test_advise:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_advise.py
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl
 
-  fedora-27/test_testconfig:
-    requires: [fedora-27/build]
+  fedora-28/test_testconfig:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_testconfig.py
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl
 
-  fedora-27/test_service_permissions:
-    requires: [fedora-27/build]
+  fedora-28/test_service_permissions:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_service_permissions.py
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl
 
-  fedora-27/test_netgroup:
-    requires: [fedora-27/build]
+  fedora-28/test_netgroup:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_netgroup.py
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl
 
-  fedora-27/test_vault:
-    requires: [fedora-27/build]
+  fedora-28/test_vault:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_vault.py
-        template: *ci-master-f27
-        timeout: 3600
+        template: *ci-master-f28
+        timeout: 4500
         topology: *master_1repl
 
-  fedora-27/test_authconfig:
-    requires: [fedora-27/build]
+  fedora-28/test_authconfig:
+    requires: [fedora-28/build]
     priority: 50
     job:
       class: RunPytest
       args:
-        build_url: '{fedora-27/build_url}'
+        build_url: '{fedora-28/build_url}'
         test_suite: test_integration/test_authselect.py
-        template: *ci-master-f27
+        template: *ci-master-f28
         timeout: 3600
         topology: *master_1repl_1client