ci: harden test selection and nightly coverage (#6341)

docs/testing/e2e-suite-inventory.md

@@ -5,12 +5,10 @@
 > ```bash
 > cargo nextest list -p e2e_test --message-format json | jq -r '.["rust-suites"][]?.testcases | to_entries[] | select(.value.ignored == false) | .key | split("::")[0]' | sort | uniq -c
 > ```
-> Modules marked ✅ are in the PR smoke profile `e2e-smoke`
-> (`.config/nextest.toml`); admission criteria: `crates/e2e_test/README.md`.
-> 🌙 marks tests in the scheduled `e2e-repl-nightly` profile (backlog#1147
-> repl-1): `replication_extension_test` splits 20 fast tests into the PR smoke
-> lane and 28 slow / `_real_dual_node` / `_real_three_node` / `_real_single_node` tests into the
-> nightly lane (`.github/workflows/e2e-replication-nightly.yml`).
+> Modules marked ✅ are in the PR smoke profile `e2e-smoke`; 🌙 marks the
+> cluster, protocol, and replication subsets in the consolidated nightly
+> workflow. The `e2e-full` merge/main profile covers the remaining default
+> single-node tests. Committed test-ID digests are enforced before each run.
 > Note: counts exclude `#[ignore]`d tests (nextest lists them separately).
 > Managed-SSE (SSE-S3/SSE-KMS) replication contracts assert successful
 > re-encryption on the target (backlog#1783); SSE-C replication still pins a
@@ -19,19 +17,21 @@
 | module | tests | PR smoke |
 |---|---|---|
 | admin_auth_test | 4 | ✅ |
-| admin_iam_crud_test | 2 | ✅ |
+| admin_iam_crud_test | 3 | ✅ |
 | admin_pools_test | 1 | ✅ |
-| admin_timeout_regression_test | 1 |  |
+| admin_timeout_regression_test | 1 | 🌙 |
 | anonymous_access_test | 4 | ✅ |
 | api_rate_limit_test | 3 |  |
 | archive_download_integrity_test | 13 |  |
 | bucket_logging_test | 3 |  |
 | bucket_policy_check_test | 1 | ✅ |
+| bucket_stats_regression_test | 3 |  |
+| chaos | 2 |  |
 | checksum_upload_test | 7 |  |
-| cluster_concurrency_test | 2 |  |
-| cluster_multidrive_pool_test | 2 |  |
-| common | 12 |  |
-| compression_test | 1 |  |
+| cluster_concurrency_test | 2 | 🌙 |
+| cluster_multidrive_pool_test | 2 | 🌙 |
+| common | 14 |  |
+| compression_test | 6 | ✅ |
 | connection_cap_test | 2 |  |
 | console_smoke_test | 1 | ✅ |
 | content_encoding_test | 3 | ✅ |
@@ -45,48 +45,58 @@
 | delete_marker_migration_semantics_test | 2 | ✅ |
 | delete_object_no_content_length_test | 1 |  |
 | delete_objects_versioning_test | 2 | ✅ |
+| delete_regression_test | 5 |  |
+| distributed_startup_regression_test | 3 |  |
 | existing_object_tag_policy_test | 4 |  |
-| fake_s3_target | 4 | ✅ |
+| fake_s3_target | 6 | ✅ |
 | fault_proxy | 7 |  |
 | get_codec_streaming_compat_test | 1 |  |
+| get_stream_failure_observability_test | 1 |  |
+| group_delete_test | 1 |  |
 | head_object_consistency_test | 1 | ✅ |
 | head_object_range_test | 1 | ✅ |
-| heal_erasure_disk_rebuild_test | 3 |  |
-| inline_fast_path_cluster_test | 14 |  |
+| heal_erasure_disk_rebuild_test | 4 | 🌙 |
+| inline_fast_path_cluster_test | 16 |  |
 | internode_rpc_signature_e2e_test | 5 |  |
-| kms | 41 |  |
+| kms | 48 |  |
 | leading_slash_key_test | 2 | ✅ |
+| lifecycle_regression_test | 4 |  |
+| list_buckets_auth_test | 1 | ✅ |
 | list_buckets_double_slash_test | 3 | ✅ |
+| list_buckets_iam_filter_test | 1 | ✅ |
 | list_object_versions_metadata_extension_test | 1 |  |
 | list_object_versions_regression_test | 2 | ✅ |
 | list_objects_duplicates_test | 3 | ✅ |
 | list_objects_v2_metadata_extension_test | 1 |  |
 | list_objects_v2_pagination_test | 12 | ✅ |
+| listing_regression_test | 4 |  |
 | mc_mirror_small_bucket_test | 1 |  |
 | multipart_auth_test | 75 |  |
 | multipart_storage_class_test | 3 | ✅ |
-| namespace_lock_quorum_test | 2 |  |
+| namespace_lock_quorum_test | 2 | 🌙 |
 | negative_sigv4_test | 6 | ✅ |
+| notification_startup_regression_test | 2 |  |
 | notification_webhook_test | 3 | ✅ |
-| object_lambda_test | 16 |  |
-| object_lock | 33 |  |
+| object_lambda_test | 16 | 🌙 |
+| object_lock | 34 |  |
 | overwrite_cleanup_regression_test | 1 |  |
 | presigned_negative_test | 7 | ✅ |
-| protocols | 16 |  |
+| protocols | 16 | 🌙 |
 | quota_test | 14 |  |
-| reliability_disk_fault_test | 3 |  |
-| reliant | 24 | 18 ✅ |
-| replication_extension_test | 50 | 20 ✅ +30 🌙 |
+| reliability_disk_fault_test | 4 |  |
+| reliant | 25 | 19 ✅ |
+| replication_extension_test | 75 | 20 ✅ +55 🌙 |
 | security_boundary_test | 4 |  |
-| ssec_copy_test | 2 | ✅ |
 | server_startup_failfast_test | 1 |  |
 | snowball_auto_extract_test | 6 |  |
 | special_chars_test | 14 | ✅ |
-| stale_multipart_cleanup_cluster_test | 1 |  |
+| ssec_copy_test | 2 | ✅ |
+| stale_multipart_cleanup_cluster_test | 1 | 🌙 |
 | storage_class_capability_test | 4 | ✅ |
-| sts_query_compat_test | 3 | ✅ |
+| sts_query_compat_test | 6 | ✅ |
+| tier_transition_regression_test | 3 |  |
 | tls_gen | 3 |  |
 | tls_hot_reload_test | 1 | ✅ |
 | version_id_regression_test | 10 | ✅ |
 
-**Total listed: 530 tests across 70 modules · PR smoke subset: 148 tests / 33 modules** (31 full modules + 18 `reliant` tests + 20 of `replication_extension_test`) **· nightly `e2e-repl-nightly`: 30 tests** · updated 2026-08-09.
+**Total listed: 577 tests across 82 modules · PR smoke: 163 tests / 36 modules · merge/main full: 455 tests / 73 modules · nightly replication: 55 tests · nightly cluster faults: 28 tests / 7 modules · nightly protocols: 16 tests** · updated 2026-08-21.