diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index e6b860fbdc..ae3d476cf6 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -74,12 +74,14 @@ coverity scan ipq807x prpl:
       aarch64-openwrt-linux-musl-gcc
 
 run test Turris Omnia initramfs:
+  allow_failure: true
   needs:
     - job: build test mvebu prpl security
       optional: true
   extends: .turris-omnia testbed
 
 run test Haze initramfs:
+  allow_failure: true
   needs:
     - job: build test ipq807x prpl security
       optional: true
diff --git a/.gitlab/cdrouter/mxl25641-hdk-6.yml b/.gitlab/cdrouter/mxl25641-hdk-6.yml
index 3671f50952..e0cb25079e 100644
--- a/.gitlab/cdrouter/mxl25641-hdk-6.yml
+++ b/.gitlab/cdrouter/mxl25641-hdk-6.yml
@@ -72,6 +72,7 @@ CDRouter-IPv6-Top-100+mDNS MXL25641-HDK-6 eMMC:
 
 prpl-Certification MXL25641-HDK-6 eMMC:
   <<: *mxl25641_cdrouter_ipv6
+  allow_failure: true
   rules:
     - if: '$CI_PIPELINE_SOURCE == "schedule"'
       when: never
@@ -107,6 +108,7 @@ CDRouter-TR-069 MXL25641-HDK-6 eMMC:
 
 CDRouter-USP-prpl MXL25641-HDK-6 eMMC:
   <<: *mxl25641_cdrouter
+  allow_failure: true
   rules:
     - if: '$CI_PIPELINE_SOURCE == "schedule"'
       when: never
diff --git a/.gitlab/cdrouter/prpl-haze.yml b/.gitlab/cdrouter/prpl-haze.yml
index 95be5530fd..4a74d9b9e5 100644
--- a/.gitlab/cdrouter/prpl-haze.yml
+++ b/.gitlab/cdrouter/prpl-haze.yml
@@ -1,4 +1,5 @@
 .prpl-haze: &prpl_haze
+  allow_failure: true
   rules:
     - if: '$CI_PIPELINE_SOURCE == "schedule"'
       when: never
@@ -62,7 +63,6 @@ CDRouter-Wireless Haze initramfs:
 
 CDRouter-UPnP-IPv46 Haze initramfs:
   <<: *prpl_haze_ipv6
-  allow_failure: true
   variables:
     CDROUTER_TEST_CONFIG: generic-ipv6-upnp
     DUT_INIT_SCRIPTS: |
diff --git a/.gitlab/cdrouter/turris-omnia.yml b/.gitlab/cdrouter/turris-omnia.yml
index f0b1d8bca5..d35e086ad9 100644
--- a/.gitlab/cdrouter/turris-omnia.yml
+++ b/.gitlab/cdrouter/turris-omnia.yml
@@ -1,4 +1,5 @@
 .turris-cdrouter: &turris_cdrouter
+  allow_failure: true
   needs:
     - job: build test mvebu prpl security
       optional: true
@@ -62,7 +63,6 @@ CDRouter-Wireless Turris initramfs:
 
 CDRouter-UPnP-IPv46 Turris initramfs:
   <<: *turris_cdrouter_ipv6
-  allow_failure: true
   variables:
     CDROUTER_TEST_CONFIG: generic-ipv6-upnp
     DUT_INIT_SCRIPTS: |
diff --git a/.gitlab/cdrouter/urx851-hdk-3.yml b/.gitlab/cdrouter/urx851-hdk-3.yml
index 15a1edc922..a4b8be74b8 100644
--- a/.gitlab/cdrouter/urx851-hdk-3.yml
+++ b/.gitlab/cdrouter/urx851-hdk-3.yml
@@ -70,6 +70,7 @@ CDRouter-IPv6-Top-100+mDNS URX851-HDK-3 eMMC:
 
 prpl-Certification URX851-HDK-3 eMMC:
   <<: *urx851_cdrouter_ipv6
+  allow_failure: true
   rules:
     - if: '$CI_PIPELINE_SOURCE == "schedule"'
       when: never
@@ -105,6 +106,7 @@ CDRouter-TR-069 URX851-HDK-3 eMMC:
 
 CDRouter-USP-prpl URX851-HDK-3 eMMC:
   <<: *urx851_cdrouter
+  allow_failure: true
   rules:
     - if: '$CI_PIPELINE_SOURCE == "schedule"'
       when: never
diff --git a/.gitlab/cdrouter/wnc-freedom.yml b/.gitlab/cdrouter/wnc-freedom.yml
index 17ca5477e5..778cd70581 100644
--- a/.gitlab/cdrouter/wnc-freedom.yml
+++ b/.gitlab/cdrouter/wnc-freedom.yml
@@ -72,6 +72,7 @@ CDRouter-IPv6-Top-100+mDNS Freedom initramfs:
 
 prpl-Certification Freedom initramfs:
   <<: *wnc_freedom_ipv6
+  allow_failure: true
   rules:
     - if: '$CI_PIPELINE_SOURCE == "schedule"'
       when: never
@@ -110,6 +111,7 @@ CDRouter-TR-069 Freedom eMMC:
 
 CDRouter-USP-prpl Freedom initramfs:
   <<: *wnc_freedom
+  allow_failure: true
   rules:
     - if: '$CI_PIPELINE_SOURCE == "schedule"'
       when: never