diff --git a/images.yaml b/images.yaml
index 63d126f7..58d0edc8 100644
--- a/images.yaml
+++ b/images.yaml
@@ -62,13 +62,13 @@ sleep:
 
 tcp-echo:
   x86: docker.io/istio/tcp-echo-server:1.2
-  arm: docker.io/istio/tcp-echo-server:1.2
+  arm: docker.io/h0tbird/tcp-echo-server:1.2
   p: quay.io/maistra/tcp-echo-server:0.0-ibm-p
   z: quay.io/maistra/tcp-echo-server:2.0-ibm-z
 
 fortio:
   x86: fortio/fortio:latest_release
-  arm: quay.io/openshifttest/fortio:multiarch
+  arm: docker.io/fortio/fortio:latest
   p: quay.io/maistra/fortio.test:0.0-ibm-p
   z: quay.io/maistra/fortio:0.0-ibm-z
 
@@ -81,8 +81,10 @@ helloworld:
   x86: quay.io/jewertow/examples-helloworld-v1
   p: quay.io/maistra/helloworld-v1:0.0-ibm-p
   z: quay.io/maistra/helloworld-v1:0.0-ibm-z
+  arm: docker.io/tanjunchen/helloworld-v1:latest-arm
 
 ext-authz:
   x86: gcr.io/istio-testing/ext-authz:latest
   p: quay.io/maistra/ext-authz:0.0-ibm-p
   z: quay.io/maistra/ext-authz:0.0-ibm-z
+  arm: docker.io/istio/ext-authz:1.21.0-beta.0
diff --git a/pkg/tests/ossm/smm_test.go b/pkg/tests/ossm/smm_test.go
index 60154f03..5448c4e9 100644
--- a/pkg/tests/ossm/smm_test.go
+++ b/pkg/tests/ossm/smm_test.go
@@ -86,7 +86,7 @@ func TestSMMRAutoCreationAndDeletion(t *testing.T) {
 }
 
 func TestSMMReconciliation(t *testing.T) {
-	NewTest(t).Groups(Full, Disconnected).Run(func(t TestHelper) {
+	NewTest(t).Groups(Full, Disconnected, ARM).Run(func(t TestHelper) {
 		t.Log("This test verifies whether the member-of label is added back to the namespace")
 		t.Log("See https://issues.redhat.com/browse/OSSM-1397")
 
diff --git a/pkg/tests/tasks/security/authorization/ext_auth_test.go b/pkg/tests/tasks/security/authorization/ext_auth_test.go
index c6aa0b7f..e4e468c9 100644
--- a/pkg/tests/tasks/security/authorization/ext_auth_test.go
+++ b/pkg/tests/tasks/security/authorization/ext_auth_test.go
@@ -26,7 +26,7 @@ import (
 )
 
 func TestEnvoyExtAuthzHttpExtensionProvider(t *testing.T) {
-	test.NewTest(t).Id("T37").Groups(test.Full, test.InterOp).Run(func(t test.TestHelper) {
+	test.NewTest(t).Id("T37").Groups(test.Full, test.InterOp, test.ARM).Run(func(t test.TestHelper) {
 		if env.GetSMCPVersion().LessThan(version.SMCP_2_3) {
 			t.Skip("extensionProviders.envoyExtAuthzHttp was added in v2.3")
 		}
@@ -136,7 +136,7 @@ spec:
 }
 
 func TestEnvoyExtAuthzGrpcExtensionProvider(t *testing.T) {
-	test.NewTest(t).Id("T42").Groups(test.Full, test.InterOp).Run(func(t test.TestHelper) {
+	test.NewTest(t).Id("T42").Groups(test.Full, test.InterOp, test.ARM).Run(func(t test.TestHelper) {
 		if env.GetSMCPVersion().LessThan(version.SMCP_2_3) {
 			t.Skip("extensionProviders.envoyExtAuthzGrpc is not supported in versions below v2.3")
 		}
diff --git a/pkg/tests/tasks/security/authorization/tcp_test.go b/pkg/tests/tasks/security/authorization/tcp_test.go
index 1187c46e..7cb68a84 100644
--- a/pkg/tests/tasks/security/authorization/tcp_test.go
+++ b/pkg/tests/tasks/security/authorization/tcp_test.go
@@ -29,7 +29,7 @@ import (
 
 // TestAuthorizationTCPTraffic validates authorization polices for TCP traffic.
 func TestAuthorizationTCPTraffic(t *testing.T) {
-	test.NewTest(t).Id("T21").Groups(test.Full, test.InterOp).Run(func(t test.TestHelper) {
+	test.NewTest(t).Id("T21").Groups(test.Full, test.InterOp, test.ARM).Run(func(t test.TestHelper) {
 		ns := "foo"
 		t.Cleanup(func() {
 			oc.RecreateNamespace(t, ns)
diff --git a/pkg/tests/tasks/traffic/circuit_breaking_test.go b/pkg/tests/tasks/traffic/circuit_breaking_test.go
index b07013a6..d318545f 100644
--- a/pkg/tests/tasks/traffic/circuit_breaking_test.go
+++ b/pkg/tests/tasks/traffic/circuit_breaking_test.go
@@ -33,7 +33,7 @@ import (
 )
 
 func TestCircuitBreaking(t *testing.T) {
-	NewTest(t).Id("T6").Groups(Full, InterOp).Run(func(t TestHelper) {
+	NewTest(t).Id("T6").Groups(Full, InterOp, ARM).Run(func(t TestHelper) {
 		t.Log("This test checks whether the circuit breaker functions correctly. Check documentation: https://istio.io/latest/docs/tasks/traffic-management/circuit-breaking/")
 
 		ns := "bookinfo"
diff --git a/pkg/tests/tasks/traffic/ingress/secure_gateways_test.go b/pkg/tests/tasks/traffic/ingress/secure_gateways_test.go
index f757e2ed..bd8ab6d4 100644
--- a/pkg/tests/tasks/traffic/ingress/secure_gateways_test.go
+++ b/pkg/tests/tasks/traffic/ingress/secure_gateways_test.go
@@ -47,7 +47,7 @@ var (
 )
 
 func TestSecureGateways(t *testing.T) {
-	NewTest(t).Id("T9").Groups(Full, InterOp).Run(func(t TestHelper) {
+	NewTest(t).Id("T9").Groups(Full, InterOp, ARM).Run(func(t TestHelper) {
 		ns := "bookinfo"
 
 		t.Cleanup(func() {
diff --git a/pkg/tests/tasks/traffic/traffic_tcp_shifting_test.go b/pkg/tests/tasks/traffic/traffic_tcp_shifting_test.go
index c065bf8a..045b0435 100644
--- a/pkg/tests/tasks/traffic/traffic_tcp_shifting_test.go
+++ b/pkg/tests/tasks/traffic/traffic_tcp_shifting_test.go
@@ -31,7 +31,7 @@ import (
 
 // TestTcpTrafficShifting validates TCP traffic shifting feature.
 func TestTcpTrafficShifting(t *testing.T) {
-	test.NewTest(t).Id("T4").Groups(test.Full, test.InterOp).Run(func(t test.TestHelper) {
+	test.NewTest(t).Id("T4").Groups(test.Full, test.InterOp, test.ARM).Run(func(t test.TestHelper) {
 		ns := "foo"
 
 		t.Cleanup(func() {