From 5343536f2bb402bc767db2d015e45ac87189d7c3 Mon Sep 17 00:00:00 2001
From: GitLab Bot <gitlab-bot@gitlab.com>
Date: Fri, 26 Nov 2021 12:12:49 +0000
Subject: [PATCH] Add latest changes from gitlab-org/gitlab@master

---
 .rubocop_manual_todo.yml                      |   4 -
 .../components/blob_button_group.vue          |   5 ++
 .../components/blob_content_viewer.vue        |   2 +
 .../components/delete_blob_modal.vue          |  13 ++-
 .../queries/blob_info.query.graphql           |   1 +
 .../projects/settings/ci_cd_controller.rb     |   1 -
 app/finders/ci/auth_job_finder.rb             |   2 +-
 app/graphql/types/repository/blob_type.rb     |   3 +
 app/models/namespace.rb                       |   2 +-
 app/presenters/blob_presenter.rb              |   6 ++
 .../projects/settings/ci_cd/show.html.haml    |  23 +++---
 .../development/ci_scoped_job_token.yml       |   8 --
 .../keyset_pagination_for_groups_api.yml      |   8 --
 .../validate_namespace_parent_type.yml        |   8 --
 ...migration_of_requirements_to_work_items.rb |  17 ++++
 db/schema_migrations/20211122193948           |   1 +
 doc/administration/gitaly/praefect.md         |   5 +-
 doc/api/graphql/reference/index.md            |   1 +
 doc/ci/jobs/ci_job_token.md                   |   6 +-
 .../database/multiple_databases.md            |  59 +++++++++++++-
 doc/integration/recaptcha.md                  |  21 ++---
 doc/topics/plan_and_track.md                  |   3 +
 doc/user/application_security/dast/index.md   |  21 -----
 doc/user/crm/crm_contacts_v14_6.png           | Bin 0 -> 11613 bytes
 doc/user/crm/crm_organizations_v14_6.png      | Bin 0 -> 8244 bytes
 doc/user/crm/index.md                         |  77 ++++++++++++++++++
 doc/user/crm/issue_crm_contacts_v14_6.png     | Bin 0 -> 6703 bytes
 doc/user/group/index.md                       |  10 +--
 doc/user/group/iterations/index.md            |  34 +-------
 doc/user/project/quick_actions.md             |  14 ++--
 lib/api/groups.rb                             |   2 +-
 lib/gitlab/checks/branch_check.rb             |   1 +
 spec/bin/feature_flag_spec.rb                 |   4 +-
 spec/factories/namespaces.rb                  |   6 +-
 spec/features/groups/navbar_spec.rb           |   1 -
 spec/finders/ci/auth_job_finder_spec.rb       |  11 ---
 .../components/blob_button_group_spec.js      |   1 +
 .../components/delete_blob_modal_spec.js      |  26 +++---
 spec/frontend/repository/mock_data.js         |   1 +
 .../mutations/merge_requests/create_spec.rb   |   5 +-
 spec/graphql/types/range_input_type_spec.rb   |   2 +-
 .../types/repository/blob_type_spec.rb        |   1 +
 spec/lib/gitlab/checks/branch_check_spec.rb   |   9 ++
 .../keyset/connection_generic_keyset_spec.rb  |   2 +-
 spec/models/group_spec.rb                     |  28 -------
 .../namespace/traversal_hierarchy_spec.rb     |   2 +-
 spec/models/namespace_spec.rb                 |  28 -------
 spec/presenters/blob_presenter_spec.rb        |  22 +++++
 spec/requests/api/groups_spec.rb              |  30 -------
 .../navbar_structure_context.rb               |   3 +-
 .../api/pypi_packages_shared_examples.rb      |   3 +-
 51 files changed, 290 insertions(+), 253 deletions(-)
 delete mode 100644 config/feature_flags/development/ci_scoped_job_token.yml
 delete mode 100644 config/feature_flags/development/keyset_pagination_for_groups_api.yml
 delete mode 100644 config/feature_flags/development/validate_namespace_parent_type.yml
 create mode 100644 db/post_migrate/20211122193948_cleanup_background_migration_of_requirements_to_work_items.rb
 create mode 100644 db/schema_migrations/20211122193948
 create mode 100644 doc/user/crm/crm_contacts_v14_6.png
 create mode 100644 doc/user/crm/crm_organizations_v14_6.png
 create mode 100644 doc/user/crm/index.md
 create mode 100644 doc/user/crm/issue_crm_contacts_v14_6.png

diff --git a/.rubocop_manual_todo.yml b/.rubocop_manual_todo.yml
index f47e76b858d..73fbbcb3909 100644
--- a/.rubocop_manual_todo.yml
+++ b/.rubocop_manual_todo.yml
@@ -2562,7 +2562,6 @@ Style/OpenStructUse:
     - 'lib/gitlab/import_export/after_export_strategies/base_after_export_strategy.rb'
     - 'lib/gitlab/testing/request_inspector_middleware.rb'
     - 'lib/mattermost/session.rb'
-    - 'spec/bin/feature_flag_spec.rb'
     - 'spec/controllers/admin/clusters_controller_spec.rb'
     - 'spec/controllers/groups/clusters_controller_spec.rb'
     - 'spec/controllers/import/fogbugz_controller_spec.rb'
@@ -2580,8 +2579,6 @@ Style/OpenStructUse:
     - 'spec/graphql/mutations/clusters/agents/delete_spec.rb'
     - 'spec/graphql/mutations/commits/create_spec.rb'
     - 'spec/graphql/mutations/merge_requests/accept_spec.rb'
-    - 'spec/graphql/mutations/merge_requests/create_spec.rb'
-    - 'spec/graphql/types/range_input_type_spec.rb'
     - 'spec/helpers/application_settings_helper_spec.rb'
     - 'spec/helpers/profiles_helper_spec.rb'
     - 'spec/initializers/doorkeeper_spec.rb'
@@ -2590,7 +2587,6 @@ Style/OpenStructUse:
     - 'spec/lib/gitlab/database/migrations/runner_spec.rb'
     - 'spec/lib/gitlab/gitaly_client/blobs_stitcher_spec.rb'
     - 'spec/lib/gitlab/gitaly_client/diff_stitcher_spec.rb'
-    - 'spec/lib/gitlab/graphql/pagination/keyset/connection_generic_keyset_spec.rb'
     - 'spec/lib/gitlab/graphql/pagination/keyset/connection_spec.rb'
     - 'spec/lib/gitlab/legacy_github_import/project_creator_spec.rb'
     - 'spec/lib/gitlab/quick_actions/command_definition_spec.rb'
diff --git a/app/assets/javascripts/repository/components/blob_button_group.vue b/app/assets/javascripts/repository/components/blob_button_group.vue
index e2ba5cea6cc..de6156d48dc 100644
--- a/app/assets/javascripts/repository/components/blob_button_group.vue
+++ b/app/assets/javascripts/repository/components/blob_button_group.vue
@@ -53,6 +53,10 @@ export default {
       type: Boolean,
       required: true,
     },
+    canPushToBranch: {
+      type: Boolean,
+      required: true,
+    },
     emptyRepo: {
       type: Boolean,
       required: true,
@@ -126,6 +130,7 @@ export default {
       :target-branch="targetBranch || ref"
       :original-branch="originalBranch || ref"
       :can-push-code="canPushCode"
+      :can-push-to-branch="canPushToBranch"
       :empty-repo="emptyRepo"
     />
   </div>
diff --git a/app/assets/javascripts/repository/components/blob_content_viewer.vue b/app/assets/javascripts/repository/components/blob_content_viewer.vue
index 2cc5a8a79d2..cea95645fa4 100644
--- a/app/assets/javascripts/repository/components/blob_content_viewer.vue
+++ b/app/assets/javascripts/repository/components/blob_content_viewer.vue
@@ -106,6 +106,7 @@ export default {
                 ideForkAndEditPath: '',
                 storedExternally: false,
                 canModifyBlob: false,
+                canCurrentUserPushToBranch: false,
                 rawPath: '',
                 externalStorageUrl: '',
                 replacePath: '',
@@ -266,6 +267,7 @@ export default {
             :replace-path="blobInfo.replacePath"
             :delete-path="blobInfo.webPath"
             :can-push-code="project.userPermissions.pushCode"
+            :can-push-to-branch="blobInfo.canCurrentUserPushToBranch"
             :empty-repo="project.repository.empty"
             :project-path="projectPath"
             :is-locked="isLocked"
diff --git a/app/assets/javascripts/repository/components/delete_blob_modal.vue b/app/assets/javascripts/repository/components/delete_blob_modal.vue
index e15f9b01c62..0d3dc06c2c8 100644
--- a/app/assets/javascripts/repository/components/delete_blob_modal.vue
+++ b/app/assets/javascripts/repository/components/delete_blob_modal.vue
@@ -71,6 +71,10 @@ export default {
       type: Boolean,
       required: true,
     },
+    canPushToBranch: {
+      type: Boolean,
+      required: true,
+    },
     emptyRepo: {
       type: Boolean,
       required: true,
@@ -176,9 +180,12 @@ export default {
       </template>
       <template v-else>
         <input type="hidden" name="original_branch" :value="originalBranch" />
-        <!-- Once "push to branch" permission is made available, will need to add to conditional
-          Follow-up issue: https://gitlab.com/gitlab-org/gitlab/-/issues/335462 -->
-        <input v-if="createNewMr" type="hidden" name="create_merge_request" value="1" />
+        <input
+          v-if="createNewMr || !canPushToBranch"
+          type="hidden"
+          name="create_merge_request"
+          value="1"
+        />
         <gl-form-group
           :label="$options.i18n.COMMIT_LABEL"
           label-for="commit_message"
diff --git a/app/assets/javascripts/repository/queries/blob_info.query.graphql b/app/assets/javascripts/repository/queries/blob_info.query.graphql
index cf3892802fd..539719175e3 100644
--- a/app/assets/javascripts/repository/queries/blob_info.query.graphql
+++ b/app/assets/javascripts/repository/queries/blob_info.query.graphql
@@ -28,6 +28,7 @@ query getBlobInfo($projectPath: ID!, $filePath: String!, $ref: String!) {
           forkAndEditPath
           ideForkAndEditPath
           canModifyBlob
+          canCurrentUserPushToBranch
           storedExternally
           rawPath
           replacePath
diff --git a/app/controllers/projects/settings/ci_cd_controller.rb b/app/controllers/projects/settings/ci_cd_controller.rb
index 4fe37352995..887f98362b4 100644
--- a/app/controllers/projects/settings/ci_cd_controller.rb
+++ b/app/controllers/projects/settings/ci_cd_controller.rb
@@ -12,7 +12,6 @@ module Projects
       before_action :define_variables
       before_action do
         push_frontend_feature_flag(:ajax_new_deploy_token, @project)
-        push_frontend_feature_flag(:ci_scoped_job_token, @project, default_enabled: :yaml)
       end
 
       helper_method :highlight_badge
diff --git a/app/finders/ci/auth_job_finder.rb b/app/finders/ci/auth_job_finder.rb
index d207a522aa8..2dbdcb3c472 100644
--- a/app/finders/ci/auth_job_finder.rb
+++ b/app/finders/ci/auth_job_finder.rb
@@ -16,7 +16,7 @@ module Ci
 
         validate_job!(job)
 
-        if job.user && Feature.enabled?(:ci_scoped_job_token, job.project, default_enabled: :yaml)
+        if job.user
           job.user.set_ci_job_token_scope!(job)
         end
       end
diff --git a/app/graphql/types/repository/blob_type.rb b/app/graphql/types/repository/blob_type.rb
index 104171e6772..cd4993ea86d 100644
--- a/app/graphql/types/repository/blob_type.rb
+++ b/app/graphql/types/repository/blob_type.rb
@@ -91,6 +91,9 @@ module Types
             calls_gitaly: true,
             description: 'Whether the current user can modify the blob.'
 
+      field :can_current_user_push_to_branch, GraphQL::Types::Boolean, null: true, method: :can_current_user_push_to_branch?,
+            description: 'Whether the current user can push to the branch.'
+
       def raw_text_blob
         object.data unless object.binary?
       end
diff --git a/app/models/namespace.rb b/app/models/namespace.rb
index c4665ca6828..75e06ac2b86 100644
--- a/app/models/namespace.rb
+++ b/app/models/namespace.rb
@@ -94,7 +94,7 @@ class Namespace < ApplicationRecord
 
   validates :max_artifacts_size, numericality: { only_integer: true, greater_than: 0, allow_nil: true }
 
-  validate :validate_parent_type, if: -> { Feature.enabled?(:validate_namespace_parent_type, default_enabled: :yaml) }
+  validate :validate_parent_type
 
   # ProjectNamespaces excluded as they are not meant to appear in the group hierarchy at the moment.
   validate :nesting_level_allowed, unless: -> { project_namespace? }
diff --git a/app/presenters/blob_presenter.rb b/app/presenters/blob_presenter.rb
index 5835a77d0b9..3555c6c3d0c 100644
--- a/app/presenters/blob_presenter.rb
+++ b/app/presenters/blob_presenter.rb
@@ -78,6 +78,12 @@ class BlobPresenter < Gitlab::View::Presenter::Delegated
     super(blob, project, blob.commit_id)
   end
 
+  def can_current_user_push_to_branch?
+    return false unless current_user && project.repository.branch_exists?(blob.commit_id)
+
+    user_access(project).can_push_to_branch?(blob.commit_id)
+  end
+
   def ide_edit_path
     super(project, blob.commit_id, blob.path)
   end
diff --git a/app/views/projects/settings/ci_cd/show.html.haml b/app/views/projects/settings/ci_cd/show.html.haml
index 75bd985560b..f342728feee 100644
--- a/app/views/projects/settings/ci_cd/show.html.haml
+++ b/app/views/projects/settings/ci_cd/show.html.haml
@@ -96,15 +96,14 @@
     .settings-content
       = render 'ci/deploy_freeze/index'
 
-- if Feature.enabled?(:ci_scoped_job_token, @project, default_enabled: :yaml)
-  %section.settings.no-animate#js-token-access{ class: ('expanded' if expanded) }
-    .settings-header
-      %h4.settings-title.js-settings-toggle.js-settings-toggle-trigger-only
-        = _("Token Access")
-      %button.btn.gl-button.btn-default.js-settings-toggle{ type: 'button' }
-        = expanded ? _('Collapse') : _('Expand')
-      %p
-        = _("Control which projects can be accessed by API requests authenticated with this project's CI_JOB_TOKEN CI/CD variable. It is a security risk to disable this feature, because unauthorized projects might attempt to retrieve an active token and access the API.")
-        = link_to _('Learn more'), help_page_path('ci/jobs/ci_job_token'), target: '_blank', rel: 'noopener noreferrer'
-    .settings-content
-      = render 'ci/token_access/index'
+%section.settings.no-animate#js-token-access{ class: ('expanded' if expanded) }
+  .settings-header
+    %h4.settings-title.js-settings-toggle.js-settings-toggle-trigger-only
+      = _("Token Access")
+    %button.btn.gl-button.btn-default.js-settings-toggle{ type: 'button' }
+      = expanded ? _('Collapse') : _('Expand')
+    %p
+      = _("Control which projects can be accessed by API requests authenticated with this project's CI_JOB_TOKEN CI/CD variable. It is a security risk to disable this feature, because unauthorized projects might attempt to retrieve an active token and access the API.")
+      = link_to _('Learn more'), help_page_path('ci/jobs/ci_job_token'), target: '_blank', rel: 'noopener noreferrer'
+  .settings-content
+    = render 'ci/token_access/index'
diff --git a/config/feature_flags/development/ci_scoped_job_token.yml b/config/feature_flags/development/ci_scoped_job_token.yml
deleted file mode 100644
index a885a1e6391..00000000000
--- a/config/feature_flags/development/ci_scoped_job_token.yml
+++ /dev/null
@@ -1,8 +0,0 @@
----
-name: ci_scoped_job_token
-introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/62733
-rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/332272
-milestone: '14.0'
-type: development
-group: group::pipeline execution
-default_enabled: true
diff --git a/config/feature_flags/development/keyset_pagination_for_groups_api.yml b/config/feature_flags/development/keyset_pagination_for_groups_api.yml
deleted file mode 100644
index d4bd37565ee..00000000000
--- a/config/feature_flags/development/keyset_pagination_for_groups_api.yml
+++ /dev/null
@@ -1,8 +0,0 @@
----
-name: keyset_pagination_for_groups_api
-introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/68346
-rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/339831
-milestone: '14.3'
-type: development
-group: group::access
-default_enabled: false
diff --git a/config/feature_flags/development/validate_namespace_parent_type.yml b/config/feature_flags/development/validate_namespace_parent_type.yml
deleted file mode 100644
index 5c2e0add243..00000000000
--- a/config/feature_flags/development/validate_namespace_parent_type.yml
+++ /dev/null
@@ -1,8 +0,0 @@
----
-name: validate_namespace_parent_type
-introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/54094
-rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/322101
-milestone: '13.10'
-type: development
-group: group::access
-default_enabled: true
diff --git a/db/post_migrate/20211122193948_cleanup_background_migration_of_requirements_to_work_items.rb b/db/post_migrate/20211122193948_cleanup_background_migration_of_requirements_to_work_items.rb
new file mode 100644
index 00000000000..df4867d6ae7
--- /dev/null
+++ b/db/post_migrate/20211122193948_cleanup_background_migration_of_requirements_to_work_items.rb
@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+class CleanupBackgroundMigrationOfRequirementsToWorkItems < Gitlab::Database::Migration[1.0]
+  disable_ddl_transaction!
+
+  MIGRATION = 'MigrateRequirementsToWorkItems'
+
+  disable_ddl_transaction!
+
+  def up
+    finalize_background_migration(MIGRATION)
+  end
+
+  def down
+    # no-op
+  end
+end
diff --git a/db/schema_migrations/20211122193948 b/db/schema_migrations/20211122193948
new file mode 100644
index 00000000000..94dbab4cd73
--- /dev/null
+++ b/db/schema_migrations/20211122193948
@@ -0,0 +1 @@
+12203afb7b66a12946d971dd601d2ce91e1408fcdf36d9d8b2fadcf09d7c1e56
\ No newline at end of file
diff --git a/doc/administration/gitaly/praefect.md b/doc/administration/gitaly/praefect.md
index b5f27f6d1f4..c39ea2e6b8c 100644
--- a/doc/administration/gitaly/praefect.md
+++ b/doc/administration/gitaly/praefect.md
@@ -1160,8 +1160,7 @@ Praefect regularly checks the health of each Gitaly node. This is used to automa
 to a newly-elected primary Gitaly node if the current primary node is found to be unhealthy.
 
 We recommend using [repository-specific primary nodes](#repository-specific-primary-nodes). This is
-[planned to be the only available election strategy](https://gitlab.com/gitlab-org/gitaly/-/issues/3574)
-from GitLab 14.0.
+[the only available election strategy](https://gitlab.com/gitlab-org/gitaly/-/issues/3574) from GitLab 14.0.
 
 ### Repository-specific primary nodes
 
@@ -1275,7 +1274,7 @@ To migrate existing clusters:
 ### Deprecated election strategies
 
 WARNING:
-The below election strategies are deprecated and are scheduled for removal in GitLab 14.0.
+The below election strategies are deprecated and were removed in GitLab 14.0.
 Migrate to [repository-specific primary nodes](#repository-specific-primary-nodes).
 
 - **PostgreSQL:** Enabled by default until GitLab 14.0, and equivalent to:
diff --git a/doc/api/graphql/reference/index.md b/doc/api/graphql/reference/index.md
index d49eee5d15c..c4167e3ecd2 100644
--- a/doc/api/graphql/reference/index.md
+++ b/doc/api/graphql/reference/index.md
@@ -14072,6 +14072,7 @@ Returns [`Tree`](#tree).
 
 | Name | Type | Description |
 | ---- | ---- | ----------- |
+| <a id="repositoryblobcancurrentuserpushtobranch"></a>`canCurrentUserPushToBranch` | [`Boolean`](#boolean) | Whether the current user can push to the branch. |
 | <a id="repositoryblobcanmodifyblob"></a>`canModifyBlob` | [`Boolean`](#boolean) | Whether the current user can modify the blob. |
 | <a id="repositoryblobeditblobpath"></a>`editBlobPath` | [`String`](#string) | Web path to edit the blob in the old-style editor. |
 | <a id="repositoryblobexternalstorageurl"></a>`externalStorageUrl` | [`String`](#string) | Web path to download the raw blob via external storage, if enabled. |
diff --git a/doc/ci/jobs/ci_job_token.md b/doc/ci/jobs/ci_job_token.md
index b6a3011a3d6..5982a08af64 100644
--- a/doc/ci/jobs/ci_job_token.md
+++ b/doc/ci/jobs/ci_job_token.md
@@ -61,11 +61,7 @@ tries to steal tokens from other jobs.
 
 > - [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/328553) in GitLab 14.1. [Deployed behind the `:ci_scoped_job_token` feature flag](../../user/feature_flags.md), disabled by default.
 > - [Enabled on GitLab.com and self-managed](https://gitlab.com/gitlab-org/gitlab/-/issues/332272) in GitLab 14.4.
-
-FLAG:
-On self-managed GitLab, by default this feature is available. To hide the feature,
-ask an administrator to [disable the `ci_scoped_job_token` flag](../../administration/feature_flags.md).
-On GitLab.com, this feature is available.
+> - [Feature flag removed](https://gitlab.com/gitlab-org/gitlab/-/issues/332272) in GitLab 14.6.
 
 You can limit the access scope of a project's CI/CD job token to increase the
 job token's security. A job token might give extra permissions that aren't necessary
diff --git a/doc/development/database/multiple_databases.md b/doc/development/database/multiple_databases.md
index c95b18abb60..661f0f46d9f 100644
--- a/doc/development/database/multiple_databases.md
+++ b/doc/development/database/multiple_databases.md
@@ -15,10 +15,46 @@ To scale GitLab, the we are
 database for CI/CD tables was [introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/64289)
 in GitLab 14.1. This feature is still under development, and is not ready for production use.
 
+### Development setup
+
 By default, GitLab is configured to use only one main database. To
 opt-in to use a main database, and CI database, modify the
 `config/database.yml` file to have a `main` and a `ci` database
-configurations. For example, given a `config/database.yml` like below:
+configurations.
+
+You can set this up using [GDK](#gdk-configuration) or by
+[manually configuring `config/database.yml`](#manually-set-up-the-cicd-database).
+
+#### GDK configuration
+
+If you are using GDK, you can follow the following steps:
+
+1. On the GDK root directory, run:
+
+   ```shell
+   gdk config set gitlab.rails.multiple_databases true
+   ```
+
+1. Open your `gdk.yml`, and confirm that it has the following lines:
+
+   ```yaml
+   gitlab:
+     rails:
+       multiple_databases: true
+   ```
+
+1. Reconfigure GDK:
+
+   ```shell
+   gdk reconfigure
+   ```
+
+1. [Create the new CI/CD database](#create-the-new-database).
+
+#### Manually set up the CI/CD database
+
+You can manually edit `config/database.yml` to split the databases.
+To do so, consider a `config/database.yml` file like the example below:
 
 ```yaml
 development:
@@ -44,7 +80,7 @@ test: &test
       statement_timeout: 120s
 ```
 
-Edit the `config/database.yml` to look like this:
+Edit it to split the databases into `main` and `ci`:
 
 ```yaml
 development:
@@ -88,6 +124,25 @@ test: &test
       statement_timeout: 120s
 ```
 
+Next, [create the new CI/CD database](#create-the-new-database).
+
+#### Create the new database
+
+After configuring GitLab for the two databases, create the new CI/CD database:
+
+1. Create the new `ci:` database, load the DB schema into the `ci:` database,
+   and run any pending migrations:
+
+    ```shell
+    bundle exec rails rails db:create db:schema:load:ci db:migrate
+    ```
+
+1. Restart GDK:
+
+    ```shell
+    gdk restart
+    ```
+
 <!--
 NOTE: The `validate_cross_joins!` method in `spec/support/database/prevent_cross_joins.rb` references
       the following heading in the code, so if you make a change to this heading, make sure to update
diff --git a/doc/integration/recaptcha.md b/doc/integration/recaptcha.md
index 60e2d70ce32..4963dea19a4 100644
--- a/doc/integration/recaptcha.md
+++ b/doc/integration/recaptcha.md
@@ -12,20 +12,21 @@ to confirm that a real user, not a bot, is attempting to create an account.
 
 ## Configuration
 
-To use reCAPTCHA, first you must create a site and private key.
+To use reCAPTCHA, first create a site and private key.
 
 1. Go to the [Google reCAPTCHA page](https://www.google.com/recaptcha/admin).
-1. Fill out the form necessary to obtain reCAPTCHA v2 keys.
-1. Log in to your GitLab server, with administrator credentials.
-1. Go to Reporting Applications Settings in the Admin Area (`admin/application_settings/reporting`).
-1. Expand the **Spam and Anti-bot Protection** section.
-1. Fill all reCAPTCHA fields with keys from previous steps.
+1. To get reCAPTCHA v2 keys, fill in the form and select **Submit**.
+1. Sign in to your GitLab server as an administrator.
+1. On the top bar, select **Menu > Admin**.
+1. On the left sidebar, select **Settings > Reporting** (`admin/application_settings/reporting`).
+1. Expand **Spam and Anti-bot Protection**.
+1. In the reCAPTCHA fields, enter the keys you obtained in the previous steps.
 1. Select the **Enable reCAPTCHA** checkbox.
 1. To enable reCAPTCHA for logins via password, select the **Enable reCAPTCHA for login** checkbox.
-1. Save the configuration.
-1. Change the first line of the `#execute` method in `app/services/spam/spam_verdict_service.rb`
-   to `return CONDITIONAL_ALLOW` so that the spam check short-circuits and triggers the response to
-   return `recaptcha_html`.
+1. Select **Save changes**.
+1. To short-circuit the spam check and trigger the response to return `recaptcha_html`:
+   1. Open `app/services/spam/spam_verdict_service.rb`.
+   1. Change the first line of the `#execute` method to `return CONDITIONAL_ALLOW`.
 
 NOTE:
 Make sure you are viewing an issuable in a project that is public. If you're working with an issue, the issue is public.
diff --git a/doc/topics/plan_and_track.md b/doc/topics/plan_and_track.md
index c70c896e411..753fafb82ee 100644
--- a/doc/topics/plan_and_track.md
+++ b/doc/topics/plan_and_track.md
@@ -26,6 +26,9 @@ Planning features everyone needs to use day-to-day.
 Get work done as a team.
 
 - [Comments and threads](../user/discussions/index.md)
+- [Customer relations (CRM)](../user/crm/index.md)
+  - [Contacts](../user/crm/index.md#contacts)
+  - [Organizations](../user/crm/index.md#organizations)
 - [Issues](../user/project/issues/index.md)
 - [Iterations](../user/group/iterations/index.md)
 - [Labels](../user/project/labels.md)
diff --git a/doc/user/application_security/dast/index.md b/doc/user/application_security/dast/index.md
index 190592a56e9..bfe0d8c2b9e 100644
--- a/doc/user/application_security/dast/index.md
+++ b/doc/user/application_security/dast/index.md
@@ -1348,27 +1348,6 @@ The DAST tool always emits a JSON report file called `gl-dast-report.json` and
 sample reports can be found in the
 [DAST repository](https://gitlab.com/gitlab-org/security-products/dast/-/tree/master/test/end-to-end/expect).
 
-### Other formats
-
-Reports can also be generated in Markdown, HTML, and XML. These can be published as artifacts using the following configuration:
-
-```yaml
-include:
-  template: DAST.gitlab-ci.yml
-
-dast:
-  variables:
-    DAST_HTML_REPORT: report.html
-    DAST_MARKDOWN_REPORT: report.md
-    DAST_XML_REPORT: report.xml
-  artifacts:
-    paths:
-      - $DAST_HTML_REPORT
-      - $DAST_MARKDOWN_REPORT
-      - $DAST_XML_REPORT
-      - gl-dast-report.json
-```
-
 ## Optimizing DAST
 
 By default, DAST downloads all artifacts defined by previous jobs in the pipeline. If
diff --git a/doc/user/crm/crm_contacts_v14_6.png b/doc/user/crm/crm_contacts_v14_6.png
new file mode 100644
index 0000000000000000000000000000000000000000..fef1982db4f00bf73513e678150d337bd0cff06a
GIT binary patch
literal 11613
zcmcJ#XH-*N*Dee;L=dbX5JXgZ69f`!6qH_6q(cxx5lN`hn}s4RNbevbAcS5*CrIxg
zJqZK@gdUJyLg2*v`F=d#80S6Xl;{1CHTNDXd#^R;UTe-ZuX%+&(^0*AiTx4{4b5eB
zwI?rVXwFtrueUCq`P*vUzDX6dt}j%TXo?2_%ha25wvV+R)6kSfF&tZ-r{2>$sTsS{
z&@i?B{n2(h{;;B<5#CaN^7y4Egfu;4Z#L1mzqzP8oZkHE;{3NEv%`X{p+{mFKbLAg
zzYN4aeN*_X{eIEd-89>8SndMkGr1=<&XSjYsb_z`n(sHu6rb56e(AXy(TL|_=PhsU
ziwA`pCNsPCgZLO&q*desWp=1<t#L2P7!1a;A0B6hP$xtq+#*hGzh3O5w(su(&Qe8~
z6C<_d|5r!3(-a_|xYF-7JytAbj2y&|0d-qCW(Jr!<*>H$yHm+%*wXkXtGPkG`Mtty
zu#77)TzmR?r85zIbmU+EeFIfmd-T)P6?yv0gVXsB@+u9@tC=_j83(Diu_Atr*X<5f
z6{I~*Pbe6Sv0p`ee~w`$3B0woT%EA)TU~a9Pln2=Ck&t$bSOKcQ|R64jB>(3AK#3E
z=b!0xU5Mhi$J%Vcy1=9aAP;z4B2<-^(RdK#H%(jrLuK`G@440OD5pL}14SB|W+=#s
za8MFJS=~E4ut>~Um2*ek<Z3JScT=^1Bi&FX8*T9vhE7{4xgIyl>Nk<rP5ks9hk{={
ziobQ%phT)!<b#V^H>VdqpV|arK*R55zP-`z=@_>vveZZ>72uB_c!{Vcx9&E^Np9G#
z?qYIp6fh0Rb$22Iyipsc5W8My&6tLhwWeEFEM}6y+f&R(<fEe_izM6^r`#!g<f%+R
z3yJbGbo&$<RYki#JR6^tcXX6dVBXMJwnJV-q?`fEQa)(9%{ZE!QbO~hc6K?vj@m|t
zKW$8NS5=f`cps@H9LMl=A`LH)$(@SMGNTrir^`RXHJPoHFLrw1<#Ig8pRThe0!hj7
zQ%=`Jf#@2S1-_HjD*=!yTh!uVe|&AMZmJ$Y!GF`0d_JP^g4L&jA06o#GL+#iOoC6?
zT2#tJMT+iQV2Z9cQHM}*yto|>_MihO1dQCIqoMI^L3z0p(i=fWSJ~tG9a6(6#g)EW
zvh?F8SFR)cbnrbpJ3He9&*kczLF3+*&5o(iCg@@!Nt&-e5je<6{T6$U9H}#o_``#~
zvZh5*O7G1juy{pXtykxLY}38Y0a3+CUnj~MGdaVH;_5oOSi&W@hg*#awT7N1qwN9}
zHVwpWb2m5JxD1I`=JpPuodXbH@&TD{B4AtVw08m+>va6v0?8pADcX3XHS@K<y!&$J
z#A$|{a~pnspP5V8LZXByJ>`W+Kb%kP?++MEmmT(ajVip*u=RH8FnRavO6**}qrt|c
zaFe*)sK<O7Ofqv6u)UeCt>=d>n`u&0>>Wl@{93u*q*FHzfDz|cq-0Ueey@KVX8w`n
zUE#3rz>4Tc#+|b!&wHk#2@ks`hk!Q~1E%RZwTwY0CsbRmY@Ghe59cDoOuB6Oz+Y6W
zU+)e_k+{`q=>x#>Vxb_F?i^QD$qm^c<rmy?_+*)10rP!)(sDgd^-kT|&rM!I0MSWu
zKr^2`)vfpA>pc#j27FQ^(1z*As*m&b;2cCV#j%98q>`PB(6^v}4Z-DLhL)7xS&N!(
zeTCs)WF8}LM7G#^{Ye~AB_qcDeXN%`$Rku;nrTZ(9*F)_75hfagRJq6*VmoQdGU`y
zqKfzN(trTU?gWk(3f*?JJ<{$tQkn72%sjO;1xYsrlpby7jDV$RH)j`lIe8DYTnbJL
zJ_XNVP)=*t-rh#&_LHBGz8^|OTd8vJ2h>{?$Md;#st(d|r73RpVV+{x#L_dS&<PjG
zbDAfE<ohjq=(ojs5v50U&(1>Zq!fpfW0`BbH;raOtLMEc8r3mLh9&WaqYFSyLkOqr
zxW~?p#nusZ`kqRt(@zcKR*mAAKQr9L6RN)V@hA2-+XGhNe7Xn^8>mAmdLtiu7-a}-
z@^P~DT0hR@Y3{$gx63@(?YMdBzL%tK$sSiUUYkeO>4FZIh$`Ur*V=LA@CvuR<Q@B)
zsybcZ?_bW<lsh$eQHcJoL%SPVOOmSQF=BTYlf~4^v+KuQ6PsM3N6lW&{$2oPn#BYt
z^mq0LSjZ68;jX(em|4;EDW`@naa!nOr?n~VQ(_3}B2ww{6YH@9ep|em{K$j{me=pl
z?uo?uKC|Ls|HE~?dfm5Z153e`x^wG06(FiZIIQiRq3WuO-y;~|kHGD*VwcJ0;s8y0
z%Ip)2eQ!pVE5S%<Y<Gs4(?`QUXy)|OqD~{<%>HzP-}93p?Gv5#V>?y^P!UAzU9t%E
z3$R^3f7p*EkFTZg??jCuPUc5*tjTe%sZPg#2muBq5#5<f$qWiW-(^?VA*PnH-Z;uu
zpQr2YplwEM{Yt=5UY_W*PWEChc@9mD1_8vVli}sde5~G1+uz7%YfiY*K;$xVovU#m
zyyU}6W2yC>zK(!|0ZP{><g_-Gd83c&%0A1?k4{C@s#8Xryh&X1$@|^5#@^HZZr?YS
z$}(5En5e;4-r1UPi>maJdLWc49$iJyQpHoy1!{ZapPpy`@eXUk0R#2*Ux9DV3{bDB
zL4{_BLy~s!pU}DVH08bPKSS=^)ozygCw6*A^Zo|>Gnq!U>rRNjQT09KJ3UDC?=&BY
z4WCQ9_cz{tWwkpq@Q(sR;s0;1!&!qM$!x_r!84HB07vVEoUC795xeNlJU%Y_;^hlv
zAVTrSGx<r_wr@?Vw|ubJZB~b=k;@%DxLixwfc)ac6+tZgW|0`=*6j?V18hTOo}y|z
zm$W;-7g$baucM`a^G*0-pHHySM%M!3!(vD$KFLC7qEW{yVyqU*;9YG(CXa=(($SfX
zFh)WSoZOW6*W%-apvqzph{pJo>H<p?^ZqwxP9>_P(l2(3X_-;pSpGbjslsvWqZ`LP
zo1_o0Rh;f$t8~R8m?Hb*+RQT>qM`;%R(XM;R}h+$m|f?@5h7CTGINHQ+@vm+@AMX*
zYKyassUb9AsI2tQuVGQ!+<2kvs<~|UH<NnT5!53}Tre*_n#pzdxYYPPodwzwbsgao
z!TB4VQoh}B+-DC}?$o}*kzQL=FK1(mbVc!lXFvLP75ae`-=x^Qfvrpj1?}6iquC`k
zbed}Oz=AL{A9(4W?;N)J$Uh`uhK<Aj<f9I|(8KIb`)ors4Y_ahpovf?d9wtVN1rHj
zPM%Y@kEds;G^p(NT$$G0z`1Mg?tW9mN?9L_LTl@=N+Lx|8zfqd<efBeJDZhCteELI
zu2Jt~)sp1}>?fgU{Y_i6NjbHATT3P0&)3CgL?coSKnfMtxMqvRG9KC;&hLo$1vovh
zlb6<Ru5G;7*$wg_pE|i|WP~Q!;Een|j^_va91b~Wcfe+@-tF5<-H9ir1`!>3>vV=P
zwalIN;f@i@m<z!jsSeroN5@sbV7mE`4MP6v>gq&Za88nd<f6~v(J;=N?=1RO=IR0S
z5_!;ny`^iiMus(jOH#tEpAuN+4%YxOF`hX1_ZzrA1DLK?a*1f4whUZ#H)Tg?iV+sZ
zd%5}}(RX};{S~Uq%Orq`_Z|ItMP4(<t0b|31^VCl{<eap6zh+l!-mh83`K!=dZtK`
z@wtAkzON20!(&AXei_uQjs@vuuikvo_0ewOK49<^>fP7>939rXy`riIMVBf(Rq5}G
zVd72SPrw5zwjoK(%+vgGX&M&}A}6#ja%6f$F{4dtelLW4`1w3tGAum5s_cjm^lK5m
zf9qCEWIGQCqGr2{wn$|!<MX%lUEp$=MLm^4SC_ElLdvJR0b2|TR><{<{_zy3#2xTR
z^~x$T+vaXHTElH_$7MS{Yfdylt+@1hV_;<O3jv46{QZJKmbbS<aSlwC@HqDL!{Mps
z*RYSQX5QU~&Lc*}(-dgimb&spuKo5RHeum*Hg(MqHUK!pmk6Hf(}N|VsWjH#{U_r-
z0X$`7ZrZrHC#1(KTv9T9FsFVfv$kPxKXb$1aV}+maiFR;v1I~6oNwwb(LVL|-W<nb
z6M?z9slE5bXAg$j>NR_TB?z$N(cbT&aJ}&A1lECMhOrKC9I~(hUbp}IfZXd1J4weD
zTY){elZzT2Iuj^4V^vkeebPqo_vbKcCd6Q}cYW1R(u43~yK`Qz^&dX=g2Nk!E)ptH
zq^W&0>GPOoytz`y&ikUhcA%F2#Dz?*+dz>m3{hNfiFKqmcc?L*E&p)y(9|B8sU3BD
z!h+vJ+|)37HOk>4V}y=~sF;{e_sG{px{v@5x8?E3Ua{o5A-*ePV@W%2fw@kf?`t=d
zEvWoFv|os1;9tJzqU`ABtR&lSZ|FE>V(yK09)8D1iPm3iG{iTRdD}Z{EVPPyt#}@&
zU<fZInxQifiX2$VM@E26qlb@Wm2s~HL(HO!XX`tIdMEmGed%>Xtp>rMgWk>L!GuI`
zYMDK;ZMK>e?&9LOuH%oXIl^qM^dEMJ5&N7!zTNOQcUX>6w#hN&xA|nm?U2TlVQN%i
z4NH>V1*3O}TeGPpU0THq)^-NJT0{I5TwCLGgS{?x?xW3t;pJuCem#=ie@ypEb@ME|
zT%9qn%6r&!*j#GW;Y@ONhuck$<!;`bp1*5?&=Ha=Wo{Ic+2`|x_qSOH+O^^3!5nuz
zSf|rczCJS;9-xsBa%Q5zeQ?4R+ByCA;}aIMx*#KayyTU3q{A!hfP$poNYkN9$Bv@U
zT2-(`U|=J%Bk!o#w4I&*rr^UsD90zaNj`0ZFKGrDR+Ae6I9_}7OPCmt1bLuWv00>z
zpWAkDXxd8w&*ViKsp#VWXb-2u%-c5r78cP_Yr*f`rO7_qe<ao3er>$XFt&8z(O=Jn
z;YD14q`5P@t*tDj;G^!?QS{a8)@?QIN#+l8Y7hJOu7EeDPrI0Lt-v0pycpWs!KVdJ
z@V}7dD0cTVV1){k@+ABhZ85%pENIOk-^r63VsZV$HV!c}Lo2dLeex>uZFu#q$d3n%
zRo}>NGUPx0I46KVBR``q5Ld1LNdXJ53Lz&n@}YqmI;j9pM`F3%mo*%xphz+&G2yDZ
z+*qs%N_yJDOLMl`aR*Oz($!)X$j`>ol$_QvYmUS%=cFDThXCH&O}?hGUo!sSv5_8m
z9Touga$89lTCEr&U%M6qC51A?WK5>VaI?aEYab|xOCPs<IcdR<wHY$7u5J99pWx4|
zvrN}F;Z-Oi_eO*U@#O1I8+eBn)Q*+b&l{1yeeLDQDx|-p{MGNo#Sw+<Sh=7Ctk7ON
zxwFyXvW2Yhbz>|N1CQBG-*K;P2st2yIK^@5@SHU}YTgWO_bGljZ)NbtRBLV|^NBM(
zf>k4zRcJ4#rPx!=w=%1x`1mAN&rOPae-doQuoiWWkEA^1o5m7iJ7t=oUl8nNSx-rD
zJsP}LI9+qpaj?Xoti0~S-el$e61Kmhes6=L{bWd!dh*zl0hsPf8?0>v>of^~`(6Uo
z{aq*oJIOSsL+!)Iiyx1@E&cAD{78u$-g|tzuJ`xq#FUtD+Ux{<ozBwc2MYA#&rPJJ
zMM_k)*_-^x64HhTB1)|5Q%K>k#G%~;IOSI1Wkg1Tg>*M6O!H-bQSh{Nl-ppX;@DAj
zUBgvuYI9e}Bl0niBdX*d(;!nQf(HG=A&;yT?!RmQXWh)w%+&Dorjvmm*S4``NFl8M
z-D5z!NUrn+iUYU(%<MIQm=zhK<&P3u-nU2c{u$=$+?&5SU4p|{7%xV_D!^U6oy$E$
zi`;B4(n@$;^<Cu4%iFMeQ&&C~Wl2Z^`c#~+o@e?Mw*aQ8W->QFLvpL>xfJW}8ESB)
zT<*-&(QOd2C^VzMdSD)eNksL}O^*Zz-*@n_n|g3Qv<$p1iJ<c)AdEBP2<E1Zo}WK@
zDy@N|t5q03(G%#@m0qisH*_4(ZIos$8O~W-)H&fSvlq(j{S^3fvzAyjmg7MJ8t3pD
z6lY|{I9H+MZBce0R7C-sBaoG4msw8U2m8Rc|5+7Ua0|Cq5r)!yIq;7Ks|K^|(XhUm
zI29xBfPzg(B2cM}eyuuUi+e~hpgWa>6h|rp*!3A+j1?@SN8g|o527iT>Q6ph@M138
zm_PVyS3cY;LZ*uxUw{Je&$mIVy-XszFUH@_4eqr`3hm8I5X;@Or#aiY7(OF|&~zHs
zh0Vk|rio5T@TL2=?_B4~+IlLpY$7VW;(=hb!YC+8Pn<B9g{)6d)-w5$P1rM0r*XKz
zN-cQhJH?4BW*mM{%jNOm7LM#a#|10Lrv~|e1?PH-s^*1`#baHSRgV3s*9trqk30g}
zW(R*4yI4BgSvm{A_j~@XQ+?OxVngTBa5GNFgS{urc66$Pt6-0S07?o)8H;T$SwPWu
zZgIX|_VsST9Yt|7HarkN)wvak;qS+px-XaQ8?X*Ut(24oxVx<B0_#rf!YEVp+xZi_
znQI`$2YU+*eP3T(w`Vvlp*TivluV+lrFdEmhvF3Ax0+ho=0JBe#h$+)d4(Tr2Z4Vk
zq_Wi?8~@ANi+v%Fyg>LS_6pgytmjpC^ovp!=*aV#_ev{%Fr_qvOnP`9b8}dS=*fC8
zGBQPJ6HhaF$4|u{uAfxVR_wQjo*%K)U>)(XpTLg>+_e0C_^bC+cmQk%cJ^~z@jDg!
z7NKQ6vN6EILM*h0`?A%=*2Xe0Sk&PP*Zrp*NgEI6TAj~n``vKW;0EB#2q(#fS)0{~
z3;mG&o2Ofa<!}&cMr^RlEbDYKy0)YC5NW49li~C9<mLjld39pTy(H=1mbrN_HJci;
z_LgBJh4^UdiA{pjNB2QB|6f+J!_wls*bOe14wxIquJi{jClbldbEoMP95*QG-~U6|
z-uiL6&wn9UMQna1^5=(~|Hho>f1N@Z|C14Vv;8-vgl_zR65wi;Np{XgVSRse3(J}U
z?#eH<?c#M$fQRjBz5LnRDE9gv%4|<Uy<N>c<ei6sylnX9_4wj=o7vJih2%#jv9ec<
z3X7X>uV{g!KcU1iU96fdoBpv4F+{$RbCu1pdy|Aoz?&3TX@yY-*;~<ZPK@s~x}l#R
zIL;G5S{L0>w%&Am8mcX2Y)v+CDW@X$A9k!O#@Kd@?*EJ}ghxFxsW_H#u6v~TI1u_3
zitX?LEZiha7MBwB&b^;reFBoso)C?ND+B56b0dZ~VV6SM<GDV1IHva9SOwpxxGZUp
z4vyAp%77!RASn3vHwBko<Ybh5|ISo#rg+;n{F`KqefoDPzuw5v)phxWFP<%x=2JIw
z8qlc5wE8dL$Y{6s2{YX7Eu<h*7wcJgNbX>(v%HTTpYWa#=EepeSho>V?)O6XW>1jN
z*^ns4GOM-855GIUdL{P_60K?8nb1+yDywtiX`K{9?&SzOb$|O|twej_aGj^hJXb1t
z6wOi@$`@)J^U7DNRt`6sKp!cU&%<+*N0r;eQ95QSzt;#)pkNa!6UDx?X;%PI&$Eom
zf%f5^o(G&t^55&uF4<$)C7g$^o3VlAWBD_u;PTmi=73%zMUW*{^Wbe+HDTSj*t*SB
z`!%i8<c-eq01@b2#4PAixde?Ye1ZTfY`bgDZmlp9RDJLSlUUZ;RJ(gmcTKGjp7pbZ
zpEv${B$hdJ<E4a{Y7S3yI7WQbG7I0gcmF+B^}w<OV{4JBtVBtjC~FW(u6_mTX^0UY
zD?CUZxgoSnV;2~?Z`SYx(96R$B!R0Sn2nom(Q_*(*8r78Im6m}X+vTn;>wd{*eoQ}
zK3NUXF4as2Lyaph4f9w)dcr@#)NQ_aD2Y=K&~Ll?IA9OYt1hc-%L;aIf-o!kT?pgz
zCRq;f)%$L5!>}F;XuDTq6aJ3fY|7<v=5TH){$(2DA5yBTjl}f(0xZLCcNt%`>z!|R
z<)y{OF>yT>eAw8yR@t1D?dl0&GLZP#!|O%k^E#2>8SW;!uEAOxAs|2e=ElJLPQ4f<
z-_b4`+!yc`N~o_(2W0ELH5~IGK2F$Nyf3IA77uxIhv%%7guNoCL|H*jnbNIYLvaph
zoR)fWw+bwm^WFRT%5DW#+0aIDLt*lJ)3)()e2hWdXQ}J!{Y~6}?7T_m3Bh-}pj)^L
zOz#yc>YdEWw}QqbjSc$$IGElcjqfc5ciQF-G-UW)<{Lr6!((9c_+a(gKk0LlDP8th
z<P(!jb?c6v#7L68=?@%?7;6&~i@{23#bR99yITZ&lzT6bidZ&&rq_Nyo793Ci}e|Z
z8oM{!JyP_6am6#<X;AK9z<E*!q*4<7!O|+b8@7G+ixcBos(BDp9SRppuqX}JEaBWu
zm`N2*o-Z2cTEU#VlCBPi%f&_x(}ftk=+o|WhKw8Ix^AoAjeq$9S}vT#%fp!e1aoEf
ztKS?e7#AllU{D6W>a`FSqoKSV_#EX&_aG5@sq;uT<+CT)#m90D7w(PHV(e5gMN7n_
zsEzwnNI^b2ML?h-u8Q>?Kh;1N_6Cbj?=Uw*)bD<;+R%iue5IvXI!{HZ^r@KD`wV5!
zg=axjRBB1)KZuo4@$A3Fu%*jXlt*6XzY~umNdu~R?RPQtM;CN^yel9=G49c%-G#aY
z!M9Rx?`gA_K;4ZqgH+@nX}ea-ys)p_xlFS|le`~hWg>l@!m>@c-IqWIwX2ac-N<i#
z1X47+Es&|8L1@V8j~+{|w<X;Lq^?MT2dwl3AO4{Y{Z2KJ!fNz*y=t-u&u&L~j3Qqz
zqAwgCGFJQWVrNM2Jz|BbfEEakzo+m2?TByd?2EyFJ+WZfvdLWrBurK!G&s~{BLzvc
zlZ~$xdpkn?<d-L-6K<gDkN*fsTMRqd^q%Vaw{II6{~78LL^o9T?&P&tC00h493H7n
zUl!6+WV3)T#;HH7ECB!z!>^6A$5Tb%a;AM2g`RwtJ|I`c=@3fUBf(mA3yx(<TNHHQ
z;V^7j)ThA7W`T}|E-3ZZuC}vcoVpRFTLfe8amZEz-$Pu_hp8JZ&d=+3flwaAymt!x
zwaMknz_hm8a`ukRQxRUamqN&)NF!tM`s}qdIM<NcdLHF0z{%$dA}7pGp$!`srs<<T
zG4|3!t**pcu9|a9V$V0RQ4SYp*i^c9Ni`m5k(D)PceQ;*aDya~b#N3nQ7qH9a}{!s
z5>>^yXApTO;FqUTg@;6K800xt-(oc|2N<6=o}g|D7Pu~!$nuA)Q*&^yRBF{x7!Y&Y
zv1H*APNFHGhxDtS25`lupx|OB#%k<s4{Tu{Yd5azyWD03nqqYx`8q(5NiWlvHeY2F
zUfk)l@kkY>T|Ok05lr^XJyV|qp<X+m->jZ~i($>-dT{u?$&7W`7c@|vge@b*d7Q~7
zKAT(mI^-AcWnplN5D|`Ak5TSPEvcE#WXXSaNNiL{7htRyYZ_^ka1COYE~)x16VD+K
zf3GXU9aZQT=@}<;M=}`@1L@5a6oCeEAUq&r3UM-z$0-q>g@1KQAon?xthLfKpCD6i
zX>LW$*fXi~mK9*+W-_$eYg-6{Xe1~-7sue5k0IjqIql<1*wxEmb*LWjSF^?<|2mb<
z*0PtXA4Ze&3qQ`@4b$P@*&3=1$BDq>zUvxFWeRA5@CHAuiY5bLjx#H%9Xg+LgOxSg
zs4l);MkG0@+@O!a{%o#x0t6`w2zhN8T(ovu2Qv?m&x2j8x<UT#b$z4Df{7-hrsaM@
ze+c|xyiSa<s01Islb%I}!2TUTwZ$Z<Kz3YwW13hHj(OTSgp;VhRQcUPLIXVU6Gg46
z;8LF#NFe>zB4Z#9avsY|<w2xG#ku0Gg$f*fC+=dr1s>Ng`P{^A;X(cu=pojt6Q$&$
zwtF##H&qL(Fco|ir(j=R8INprPC9B0?^(|p)<k+1N?1=3%Uc$-8?tA)Y5ugm)Q$+U
z{^jh`&)r>2HQd19Yvz`++T@*qPX*ATF#T*Jtt4&Kn=!f_t*370iukz=fa)+5TX$8q
zXwpx4G2w{0vEolUlr1)^oBCach6t5vZ9QTeq!)wM4?kyuU>t0@5n8%;?Lt>vu{M`4
z#|@OK_u6RNTnc%}N6aBrKx3n_iJJAQQ~V_@+774bb4DBs+WfI*RI5FBD3`NpZmGyv
zzqJ9V_mgEy7{vQ<Ax7-v$J}9Q*(0V!HBXSyET|Gq@GE3=F>ekRiDvZ?NT(KC)|-`B
z6!6?fFZ-<0zP{aJ!aCBIl{v^<u1-b3Q8CiqTUsR69Jy%y*M1e7*Z3H4k~l*foQ$>d
z8w;|^g;&A`nXov;vp<+RPaI>P3eVa;BIh>xbe(TK@!S=*^~p-R(N};xcA@$61QRN5
z)z)$@Udz)RT0S9?BHPPD99|wSy6Aj?r5!T}7TTOTIWF##1E;eXES5jbo1e7dXJO3^
z)4abQd+v3G+$H_2*_Sg??i>i(cPi4=x0c^EfVc9m&^RpxjfS5i+<H%qEAMYBgG8zF
z_Z0-~*Ul@5UaF)<h5tx_=HKfuoAZCGK>zt#&%f$PRb(e$YUtRevLEX0P!J9~d{zC!
z)qd}yU&Fv9kR8Ly{%?Mci_4zk@45izT&iPtGR}7GCGX|hNuid(Hcjx<5Yt%fb_@Mn
z!WzuQy~?eGAChz29ES7^8jMNHeg^T**Q;xzdBnFS0q6y=j7)l0)Dnd?KzL~2+^2rg
z!(Gff?dnt}mHRvZu4keGEU6uoIDIyRRD=zExujJ!yT9g9#ndz=7+e8}_rU(32;QVi
zuxJ<ZPbetnPrP^i?4(aULuVAbJAJ2*=J>6Z{r52g7PqbYVk~Yd?p-Gws7uh-G;H;M
zEe7)9QdD|?>|+WVJ*g6Qal#F7Ln*K!z{o%T<#O>JGU@f9t+;ua)ss?Rnn^KEKNo<N
z>$f;(_6kdPS8>rbjXcl&8$VrEAG@P^>{})Z0-)sxRzr5v<f2j`b7!b>`@#^PvdY*|
z2!H-#LxTE*_O((m=@%0-s;T<meEfHU8C1h-rqKOepflm{;bN;sSkSLH9_9)mNc%o*
z^>m}oAmp0fTIc3*5zl^XW*#1v{6TCjUr9#Axn)$Nu##We05vhbQb)F!e%Z37dlYY1
zUSu!7{4E)UT--u_*I<U#YjoQRG+uW_4dc$fN8oln5X8Jgl$)qd;)4F<;<(+us2`lw
zL_`cnVO%os-hNH?x^D18yk0mcOxN@=<mgf*JQ21}?6;o)5Q1bZkxz3RMV6DBP_NIY
z<o-&ahrdKkNSpoG{vy)yu;TkulUQ}1WdY*+NfqpJvQcnSlmN=nD!Z={k*GQF#)9>_
zk-s$ATu|ojjqt^HayuCnwRc6%n(D%3Br1J|C0q6@V{*HbC{5Lqm!iNq_ak$(tqxek
zzD(b&FI*GM|GRYJ{8^S?LHHe|c?b1S4LmfH>C>l=Gl;o`5ByTA9qJgx(n>pUIpPBj
zmOjF-l3PhK+txn4yI=EyO!|?)qUMID$2~VJjNCb;;$fF;^L`pwJ=MJy@wo~PIlO&)
zWu{?#E4Rg5ft7uL%UTzb2{(A>uh$13WEx!O!>fzi1)1xox4{Nqz%0L*c%7;bURm$|
zf@5e8tNxX(MY(a<6IqlzrtdYK5Xy5|#?)6RQN*sTa#}<nu?kkdCis~60i!=#wxEx(
zjULDa3epApB#=z~-DxI+n1Z0ug}(khLd5~j#{CAHHRd*>X{oX!XM}&mYZcX<&xYr0
zid?fWQXH8KdYD&~Ez%-edC#3vY(mD#I{A|JsVUF1?Q$Va4r!ogv5|CP`7?XOo`=4K
zAgQ?29CG73F;>s(&`Ek$4VVL66yK$$9`4xNwkrZ9mzOpDH4BCECo45!G7l;e1S_AL
z#)kT4%lNKt%VG2j;Y>S*7>q4_=CrOs!5<bH*&m+>pyZ#e?~Idx*2C{y9Tgcuaz;x=
z;FZ30HQ%(2USSOsEAoaU4UAr)@+V<zt<qL^Dt7~l2t#9Vj#?FQB1OVc+CU}n$f}hq
zHKUW?aeuxNliudMa$xRUkBMR7?-DHvQ|DotcXHgjOsLT)8|WvyN1~H7?Ddkb`t`~l
z-f~R6`=neP>@E}(gX8*P7|k@4OQ{HS06;+PqI5Lr)HJ984{KXi&y`OvYB}a#eUtPt
zr&*c+Qc(YpHgZaPU4y4L#@tisd@AROcGJ7|^SlDr?w<<AVzfbc?DWF-lF4V?c5pKL
zUUKtj9>-OTt1$+L@1}TJId+v`lDWhIo#Q*z@fq@%Titge4e9qAK5YO(NP%;2b2AF;
zv%eLW*NIr}<@u>&y9@(7r{7wM%#xL`(Wq$ioY`jTZX6zTsg_yY?}Qjq*r_RWqAtQZ
z?6QX8Yq{`cfAZoT>)4Vw`i*i|-q;^7vBCZ!+1>;|{l)y6dvNw`QLm$zgb4|CJ*zww
zHofGGlA;C_{IVnZ8{c9X+bH5rK*tp=5(D4KLnBP7L?V*0Gq&H!bDUP`OnB>fDc|6%
zn#=AV+E{!{gkFV|zg5fTT>cMap@Zi9v~HX97U_%BJ6PIeQ^AoEMqiLg7_A{l5nfi`
zTJ6||9sZ<!<so}m6{dii)}R4AuukUfxNdtIfWH@ihNd*Am<l<9B5!g|-}gcIIQ<QC
zlS;rq=zd|*AM)ehzqin=ieK2Ms0~dsOWl(FUxHvW{(nNV`!D%-|7AzH)A3(M;Xf1v
zPnUmV?ERNd{NHw9%|TSU9(<+3gG;di2gsK)F}dX9&}dvTmb!X0Kuw@ZA|<soJ#+KR
z&*W1HankDcv@}=LV$@$2XZgHB^3<DgM=hr~fR$J-#03UA(T84%)^@h^;qFm5ige3E
zD9T93=fWR>@U}shJd|aZfAW|EXlPz~eN<ogCGkU^(6e4S_Sv!!B6fH~R3nct$*P`N
zbrm7UT_i!p$$B$RumkA`x<j^T+g2KywU>#3P(9Qdrj&;(OYsFGjr29iS)TGMX})h;
zHrJD#Sh(8li76WIVhR{>v)Sa87WYIb!_Jdfd0ssQOV6Z<*rNMa`1};|haZ@H9-yI_
zAI{Os8O&M(UY|O-kNM89saC;b&6o;N$}jz07bFLZVw-?n`jBTerV}@1)k4x9v`LCw
zfR~G3{<)qoW#6*tkW(dKX8JZ=!*<KZG*<oWn-2vo<qGE<FnA8_t(w<~Qf@p|c6C+b
zR+I4t`3>V2?ojC<Uz`bTnlYi~vav~%Z{K`WkBRilXDE*RrHIv-jiBowEtqTJafR5>
zd1;L$Zj7KK;>%zRfWP|2ecN6XovGRSpCvU=!a_fXuwzRMmtsUAN%InG6t<4;QAa$d
zQr5R)hHVRA0fYWq6z-Q26&$@|$gbk14!1#zL>()o6*dG5H*q)L&(rR`<s2z32RjVY
zmm_G(E~LAt9@@8W2O|0CYz(9ImQq{Bp8D6eBF_>)hsJzAy6TT)o%GF~Pf9+<+Ii=y
z-%hnL)BDhbpW>Io%^8W5^3YT1rSn@(F<&NQiPr_#;sT*w*9YR#Q1=&W6c&Om%P*kM
z8+&E1@j{ove59&6%}=hWOub1~5WRK-6+Zt%nF_WUnG`?sP{EsI`B#K7QHQE=vcc$p
z@G(VoHlJH^ZFqL2p}Q$(+MTJ?SL#qbE_vKScG*`wtlN7s0llfu?h9nbt8eLERJ)0E
zFR(fvwWwZfts5`@XD{)=Yp<)iNsiSq*-TYb{98}EJ*A>x+u@Ck%)4HvHI0KbKJbsL
zh-z*rJF9q^7rL_5H!kY4|J~<ZM8cE9cS+XqS9D^gUPIRJ13G!+%)hqE^cs@V;_@$I
zmQ_pJXW@aG--(xN`TSzx9{&sx1m!RahY979p2PTVp0Y(3w5(UnS|BIsad+(uQ8zQr
zTP*K?KwY9D*6+1qj0#nROkY?pS0aD-5hU58PUdUazP&X2JkqRJ{<d0ZUfe=>&~QO3
zCsD0D;c5klP{R->d5uag@{oA$TJNa+J9H_*Y3k(M4JymX{wjjG;1d9`J@e*E1T9T-
z)?<+3kGjQwxuo0w!07*f=I{TxyZGO7N#m^{rwlJ2XUA^JdjCDV)2Khyc~Y$O>f`?a
DO#p{c

literal 0
HcmV?d00001

diff --git a/doc/user/crm/crm_organizations_v14_6.png b/doc/user/crm/crm_organizations_v14_6.png
new file mode 100644
index 0000000000000000000000000000000000000000..2bde3823cc71510a0887a53842033e331e0e90dd
GIT binary patch
literal 8244
zcmcI|cQhO9`*(^`wbFW8G*+v4tXQ>2&`FIN5i>@O5)!pXQB+ZFwPvkGDT+$07_o}9
zic*^(QEHS(Y-<0~=ljq5p7(ps@4WB#_vW1BzVCB#U)See*XMIx3HOX|bDX_&761Tn
z=-;_v1^_Tt(EHtI80f#;FEz0A=9Hh=Z9M>{kAI0iU~<<r(ggr2lh_WOPSeM%K6kAB
z007R8Ki^ZGs1GgxfKZqI4PA?1IF)3N;J@9{xxSg~FAn5oXgNcG;h(7iJK#BO!55w+
z$suI*?q@=8R7ts>>&tvF51e_R<{STNY~bsSPLLX6W*p=`F8@_onJ?we>-H<>FMo~w
z^uzol^cQA%X&^=^^y4Z^dM<|kp_O3v8b%cNk}~LkbO>h%^d|mN6feCo6#+5=0K%TS
z!r<M%^geG?*+a1kc7Geo5Mz%jHn#7;4k|Cs<IImD9V!c1y1KVHm)-`hlplAwQvz>}
zcF&<~ZOGV(LXMAP$Z&Q0gAuS&TVmQl0grJrSyIbu_0k@GulV87Uio@9?$+&=*F{3o
zbO3LgGze*CPW8?Xs91-{#>uCaFj#R>(MtQR(K4YNFK>;I^`YfiSt(rh5!F^d<qOvk
zPlTV-zIbCznZGctb+cz;LN+mo?2YnhwW&rZD6<nH;v(NjHwA7iD<0ulN0GTGZ;w`0
zxV44WqetOCTx=1Y+cz7l^e>8^?Ie5o{|E?NcRU3EYzWlr9418`-rqDl?D$=hz7u5-
zI$62%s7D^7&_6gR-w+fP{At0Chz-ldISG@SIlm|6+><$ZkdcbZwwLif+I5%@M5e6F
zG}1TF(ThJmqg#ts!U`QXS2nq0@wBjlzKta|rBjmWty}OOOHaQ>X{C`3i%L~!y1|R<
zo0bX>sgWkNhhr}GOc;YVc;xXfbPGIZNhOJ?=503ob(3o*PU?hzNe<z#%DY!gwsfyr
zZ|K5|+1S9P?82+ej(SS&m$ql~pfdAzoac`n)L+)&YH9>ldCM`)a@l_|YuEcU$(->c
z3(QWqxFZnL0^CX@W80)4csWL2_k27LYJ!E=A`;VwrKHO&Rb=ptp^bK0=il-+Am8fu
zQx83S_YWVA5GsdYLX<_0Xhq@E={aAfjrT=mVMQ7?#?Ljo1P8jO9wTS0oc!nVySMjA
zJ%P~NtzBE2h_C<!HG6eWiXJhs=}wJ(6Rx(Hg$)4c|0)&~@4cMH^EscR(-UXhj!biy
z4x`3;)FqrHfI%o1FE6j3I?@A@ixHl1;q)hC+6venc8Hr+(-e77du_XWKXLmrc7M{=
z_{E8%WKE#q@aPy1^qIE@Lg<aHtwSSZ?N(1hl3-c6VB|3Q_&B_)&1`()1ZU(cfOZqX
zpRhmd6jvhN2vHa$Yx_9N|KLIFp7`f)lMX0wVfewj+WepJ?HF#ET=l^a0b_@gYovi9
zjlJ3ViNpF(8Il~eW_Nn;Vfaz;5}UV-fO&}fr!I{bzT~T``?t4--Wzn$-$!co*6uMk
z7&sOLz2rsVMZ=2A)Hf{eQdkCq&&QWLlrd7v2P>PktN?(=x0J(N+FLNGq1|aE`A>-R
zzNT1`G_VY&&Dy!oxh^){VeVm7$;P31{B^!q2QD13{(CvQyc`9u-%sl)fX|gi^iTL6
zr%&Zyz^$KrBfm+#aquPny(9O^Rc%Yzy3BZltMa;NlA*M*e@*T7^gx}QYq2(KqK7a%
zQaQY#(PzV`f#Tuk0>5RKX`oT0j307WHkp*iinfiRPl+#HGsx3aJJuZcsF%%nvx#4J
zcL*u}?#&xNUoy`fS;ghLGT%lIeb=g%6bYX1EUdv97OzH3tzvCbV(NhL)haP69E9n}
zlcORJE9(<{EA*!5>I{s!{uLAuWff9sdEj|Ci?T4r?_0%QmG#wE4oH$8*U^OX#2-Bo
zU%$(+9?O@J&jI-olC0y!J$V4dVdY{$;K_0lemv0G(b%%65t(}K#BVCx+(;q6MIgI3
zekWjoU3I&7;FwWZ^RC&O70TyuoF2nNIIKFV9^<nfdK+<|GjixdAPfG9JR;eVB^U)e
zX^xC3#kSARNr`RQ5QW!A_O<0xm&sXaOMRp1V`oJiMl2(&ZFA6q4PaIee03o%Ec9V`
zIF%9=c%jHkbyPAVsm}i^wSV!axUDff{E90jEsFbCgxgzS<A6C+`j@z7f*oad+8YWY
zo!oSl#f{W!TCH@dCVA0X?iB9^cpf$+yz?wR&oma<qzH!aE^g##=HwmJ!a*=mw=sC!
zkbu6?iA3~H4;RUtX`650PM?ke`qr)#_lSw?TQ3C8dK!}N4x6-{IA}Fn3}{v!81VeF
zUKLit_fC@~MMvuPp97kk)CBhAAE@VQGObt^Mp=1|$6eWgBk-{cr=2g{g3(S2%Z`*n
ze&ua%oAV&MhcFZqOn1h}TqAOWB+E*Wssq=nA1Ur9jPoQ8EzVJ_7vx7jXYXiOb&~ON
zm{z`8YvG8!jj;(A^dpoZ^_Ru&@B6rciwu>l-sQfi;O4;Qlhm!!?cXTybI5u%3BSiM
zU0HWa4DzsXM`MNhfI0)+RQy(s4Pt-fD(KMH6Tj{LX)*WKo`CZvPES-de|w^sXYTG3
zY{^Bjk+Vl%Zy3W=*a=D(%Ct(?wIF}qk7h^|?*kX=Xl(ju4;S@30PyLYj_{YF(w{<8
z4u{+GJr3KE@VOVKLjJl00Q~qM47_iim~!HM3?i0yYOv4_9q-bk|4U{Dc{=~)-x6k~
zUyR{@$B9hN^grBqp~Fsh`QcnVeG*XV|8COhsNZ~a8$QFt6$(>S@CABbb=hkt;9uSn
zds{gFA>oIW#Iei&@Gw~UK>Z)LgwJjcasPO(A77yW|8dTf9WL;X|5@j1?Dc<e+x;iT
zas`-Yi@8as3$aa(Y=o(M@A{93=8a4Qy;~8p--xu9B=?0Qse-5psuT&;BX-@d)+O<6
zL=m`^mS6-{3VUsXLJJ*!#CySJDtek4?3**h7g}s9rLvcoTpY#<5hG~otflmK`z4xS
z))5)Z@F|LpdMHQ7PE|`aCF0BZ_;ca{@h5WXVPSzgJKqR#;r7K)FfBLO8MbKqhGuSS
z&mXo%+UO1(e0rW~HZ}|f4%jvtbqLzOqNU=0eb;k^WQ?oZMIuv&cxdn?>hh$t`%mGu
z=_w*8QeZ{9!0jhy&~E6YtJ-(9qpzJf*c>@I|7b?|kvh><mDHod;3G#rl4~MBG=)Z!
z_UG)ytG&^AuDYc2h}hVB;F1q>oee5dd4}G<6pEvWo*{5d%1hZv?}aE&cB$Jou0M|v
ze&m-n-|((Fww)-&RlAo|wlLo2$oyE#jlRa`I#XJvN3Cso@2dUB4omvD2yA{rySZbL
zoZy_LOVZhTDIhmm_*D2U<hy_*vID#YQhMU~QPKz!U>-u<Nh4Rgzu)r0mfpV`#aIdk
zVlmpkKUCl2&5_?7dHWsSFkHgo@4ni(>!L%E$$8f>lI9um_4!`=k|L?dSZpgeQ^W|P
ztC1-ULLRU3HCRGI^LTv0-y3>D2jpyJVB*Z*dkRDMzlE%B5KaMG8Yc7_u=jpl3j4t0
zJKY!?R^Y~88ufdTZxf4)MTs*<y0egf@RS;ImApd?MXo4l^fPv74&VQ>w{o}`WADkP
zbnmtsqI4dw%X`@4*%12E7fYfL$x?L){P1W)V36CdoR1nqik{3`fEDHJ@Z1Ha+2S&`
zq1CH(qAqa%sNdvqq0R+C8R<v6jw|`OqEtc%9`S2)`LF{N<36(J=RQ_A&~SURI^%np
zQjCK^1^g|@%rt*Dg#{P8mk9~FXuNB*DSe6a8uwq(Iyr6(eiUQD7gldhobSEx4%vus
z4VjsgSNioma>LQdDa3Vq=|vCBO>p$$w>NdCT-c&ihm2oYZ!^=wwmaD`!>n(<#3pnt
zq2}5SwY@z_stf|jy;s)9*{5mqAzX1ZOr3Q|^^7k=CErs8-;HSvEm#nzaoO(CfS1P|
zE_9=)(uDf7Kz6uQHW~yv&?|&;qcq}>lMs{(<3snwFrn|3LQr=I4SH8Wn8NI&uI+6?
z1~uB3Yh?|6r;daE#v9KV26^n5mhU&%@vzGQ!aCd>imju91GW#AT82C&KV~fro_01-
zFv^ByAm1d^?(4%sAwL^gl^T}45eiXw^#!#avVNHPDb-h7pOC<KM2hEwU2=uKMO<<s
zw?ba?W6+(Rj{ct`CXBbO1P7&Z6eHif`5w-Gty#0fZ8hEEMuV?ItFlUyNd}E5y3*+5
z#oJ|@c|sPAvN~ckyb0Zg*!v={9k%BnKZi|-gW^-VLU8JV;7GY*M*UFdRsVSOs=aAf
zkk2g{in_iy8h#K?ngM*GRS?HK;KG({8?UFssR^3zA1o5kJc5t3)q_jQ?jF~O4eG4;
zUSC@(gDrUn<lZC4Y5DjtF;2eXeHi+Hwzy`>)bV^@`1;4;7Jg7@aU&&XZ?Z~)>v|F_
z5)@@MW>a5&vYb5J)v6iewoPF-XJgS-Rj!$%B7T##(9MGd)9ZDOw^vK8!m$488b}I@
zA4!C}OA^a9BWxI&f1>njSAj$j^3pX2RP@lpXBJ;PEHWb0NCv)=rl2L>ce33S8sdtC
zA4dn;x(&#%IETmm&IOt9nDu}n+xW)aiR_gdcfe<k+__U&_oGi86|^`lxW=c+&hL@i
zTA>Kf8i+ynHqHlWXk+@;E+x@mj0=-1mlzzKSmP-e*B|-H!zbivZ&u^;Any#NaQAa8
zdiK$FZ_*;S-Z&f)*P3nj;1F@YP@kRY(8oteFEU16nT@c2jFGDg>usL%0TwYz>~dBj
zb9C4pTj|7bO$jK)HP5H;`CG!Sc4|h!^zcQ&-WR26L7=GdDHQF|Dt6;xxiXp;|3%32
zVZ~BZ?%~RW>mKVz#SF0(mCU!@vc~=`WoV-P8}xzKuL*lwFwbMbP4#O*oau`^EoJ2X
z@4#%|qu!>zUG1=Yeq*njZyh3TLy*I2!3F!hE6uC^2^Zk+Pg-E=Wf!p}aHV=pdzE9$
zaGwKs@9;^uK7?pj79nqg_poh0l{Y;#=RT%A+Pal-xNLJAw!8J^>j%CkLovDP!0gqT
z3;1KJUG{b6sNen>>|a+)6@|J}Q5{ItGehfpn=w+Q;yZk^EZhpU8rVl7wsbaJp>tub
z8;f%oTX%#bRy$Mh+O&YS%C$|E%$s$B@$-l-GzT90DQE}&)-|2bR>V>pP*mNB+Um)Q
zR1Da2pd}u9QVTC@<TdLw;UA%fk7XKBD~SU}Jsk*l>xkN$6SQoyFt99iBU>((+*Qm0
zHfh!v8Wbv;Z|k4yl(*<w-N%Ig6yn~=i15o*v~RwShFGl$o$d=+z36sw`-Ju+mEHKT
z$7L~XFPpY#MAmjlmL2rI7$1lHW;dENL8pMjN8}d?jzH$0elt-=&1}`vC@S|?I_)3O
zN#8w=E(w5XUY5*{JHGx)1B|OP$UiRl^lt`$$N&G-!M~Fl(SH;PfbjG`kVOBjjzX9T
z!@)dkv1Xsad}%Y$;?)Xv8adWWzua=2Lx>lJ{L{?d6*sx?DA!$sdIdB4)CY@<g4R8C
zRJTzzb%XNR;Iy!nD#s@PKm{U;J06Oc;mA-x6H6;pUGKjmO#7F=1i<IJeU!mc=edu7
zO?KdhQBHi5&I<YkJHxu^WyVQPSN$)6TVSKKDY^9LlMi@#$*QL10&gRk7yv$Rlth7L
zCddnnRp@D5CPT&9g-o5`f!Q^EF6EoT+WS|T#A7VKg!G;11A$8NPD8i*;dCX=FWGyB
zupDE%*kHJ@d9m3C_-Ib0M)#4$R_}eO@}h!UpD}|2c4@r&Q`a6|mDtTsm@cBAOJUNm
zWJq-OtYLpw&#s$npzdq+mj^1>2jlcg4289?G`00R=AaIf(2nCMssUY?YK%S6`KbMw
zx){jI1Pzho)~D);WcKs*cPUv*G$@c7dpea#S-A!kXYPNXJm2bXflG2t!n<l~<M6fN
z<=4wG{4QBj!^uI<bw}4j%Wc>CxH#+Pgdhz+$0C1HT)rgp@qSszpdWp3fCeX_t+;-_
z$poFXCgPZ-u-WdM%faw45PHevD7_G-Z_;F>5cd5BP(+5EvvX2ehO7PIm1>?|2uN2I
zIedmwDDu;XvCK+Q(c^=+@1E)w;5KCIda-nwzV<BeQoQIl*Lp9WFWPAa0hV8T^8yrJ
z5BzlJl+j0bvAw&P+<c9b5TUfK;CdEniWD}+FLFwXH1f;{nEo_O>X1IrE_He(-TkW@
zBw50Izw2z=6#(EtDP7@u)oyMgc|B81w(v&2^R5Qv$jz&POxYh|->28<7ZKmrMeHpE
z#gh=wA(YH(V&Ve&h2az|k!e;W&q=rs#AW^BOLAe>nOj<PbNRWaon?>JJ@&Wmqg`U>
zHsRs*agiE*2Sg<g@!#3i^fuf?T_U4)MGvTP2sp<)>wjNDg|t@ie5|FEBn<4S{p?)e
zA~al6<t{?B=(`;C`_8L61wJ{2;jOS04v0e)eDii5R6_iIQl!EuKt);LU-5pB;`svm
zPF?Hl?i&mVjI0p;1AiaGCrfSmcVl=<FD5HF3DYDpQeGD3njDz(gS{i-#&<50LWI2y
z6>T$rP%asAwH+!jKU{oJv0CL*VDr@BPSPp9tK=U>Ety$sx6gGj0v?lUe#(vrfSo>&
zSoLcNf6;TDjwGE!gJ{T0dR^-WPy~p|IARNqDHi>c$b7wV@lPu982G;x5C4NiN#+dU
zJKgZ(f<Ah9)A%=q$^XFi|Czb<R@;G%WQbz`&V*d%*>0aUSn2o%sm_8%T%e`*+?+Hj
zFZObi4nGqj12rI@CE9m;XHRmBIKCzVKhfCSf4E2{clAh18(m=QD6+b6v8QK${$enQ
zCNt9OAH97|a#~Cca~N0~6mcop4>b~w`4He_Z9|kbfgq!kk`KF$#2bkt0st0sZiaR3
z*jDOk=S-%UE@N+GUHbK35~BjKxye)DLsAz41}O&7mmSuD_P)wLc60ptx%e10^8h~;
z#!6YuFVtN0BQe7XdI|Me(D9c0y*IA&f-gt~9|LYLHYXLS9aZVhd#3~{2w4Me@J9uA
zNa%3BD@I1V?y9pmd);U7iOP%fbo$ITDtNDA?Jc_&0;1uKlJw}{qt<xqf+Bp0%oM@Q
zSH2^AYbhVv$T7&P0a>F^2Kj!SO~%URjoxUy7d1etZ9pG$D;x?N-j?v!sEWEcYHi$|
zVx0$mXQP&}|AiHbEqC!Pmz0Jc+W*EHWqd=>`78Wqukzkz8qfQ~gtE4rOv9R3GqpR8
zFH8H)G2`9=h%T{+`5J*%yP!`-zmctj&`zZ{wDw863|ZG=J8SlZN#Qkp$W-)Xf2~L{
z_#I^~P_|>$8-98yxWGL=rp1+$(42+|ODDb8oqvo`EIdHjzUol%ny>lv)(XXYl^S+1
znA;U18_kgtQ8Mv)Bb6Kr;eC8Pzu`NuG4U(Bj2w_=3^e<NaS0E|x(fpzypP4JcZrJM
z^$<8Pu+Ky?ue+T*8GE6rHgvC#|0<RngEF}Hc1;rS3CZgA!+)8r__i%(^BE^$&(BT0
z5zpG7J^E{J{2Qvu$?W!WV~tEe@|=totC(M-gO(qDCnk82+V0=6qn}3cj?pLgjkIiy
z8<}IOZ2CWA1VkTn5BE{vk|#0Jj^x)<P$yJ#gr^$%#<PDGM)Sj$^S_+D(HyvXr--YA
zT(b6(G}>SM{<wKf@?i1a7zX0;>2jq;lHsqr;1lNSJNsR^DxeY5WCZRw_T6&W-76pS
zu%5lj6wb?}*HY^$?3YY0*zGEW@$4-!0kV40-oA=PWV@_P+)7SnW_=TfRw?p)gA15L
z%xB0gkik$zf6;12>4MknYP&<)m@!fu`i^*``ISbIn-uPK$r4To`Bqt~$+KbOdy*5x
zRRPVulQM9@4WhB~+HD7+;&D$6ILbPy-={y$Vq!zXaVyUTW-UE0bx9v)TV-O1>qTl^
zmrl7EJW`S+p^?NimQ?!6>qoB=5%CRr7o!ioED~n45TM|#Y)uKw`nVx`aLZh$$Zn3x
z3CNPo@gDY1&28LR7@Sg5)JO{fg$@^a=ou90iV~ZU28Jn?gQt2ClB&-fdB~+X`(5i#
zy^L^{)Ui?1>~VMq^-1Rk%ekQM#S{7?Xrb%VchbKo%6MIjca^Vpz$Iv<H+4tly<E}i
z*iz<>AEB8QO(Dcro@-Fsl(W=OrJAc$dLXesOIU9IJFN*Cfoo#5k@b=QijS3^I9Dg$
z!@bU(7<6lH(XVR;O&%Z4w(cyZR@fnYi~)IF?L@K6(ZLW26u1|ysK}jR;|~grZm<wD
zgo%*u2Qt*WHr7|q3o$yK&D6MNxi`NMFyZ@@Y+7hHd<1jXiM&goP9Qop)Si(gv0<#O
z=$YEfn=UuSLM5H_gY&1z9qL{14Jnp(E)l3`U0B4yv3$`yTw_MxC;Y1rgd_Ac|E0!r
z@hLqL4Vs5+P<SJoQhkJlImX!Syvd@gMBSMCL=kNKm8WLY{ao4vgvnlJ$*gv=YsaiN
zP~vZuL*`SCyT7ZAI+iMtExoylg>sqSt_n6g3y=B*$|d3jiv)mh^R^tmm3G?;sby}7
zpYaVUmu<KIqS^#Vn-RS!xSzTFg-*Ntk+m6P+l%fVrB`LVmN+Y|zlGekSZuEQ=G~uH
z)w%k1)|;}q|3j#ysrDb_cgTs%0%wf#g8uq6(?2CU(lv5Lw5#w+#`_k%xmZ(ajzz=%
zs){yx0r4~RwdK0(aUO^RtQX!^oV*9~&hGoH5Fj=dLfXpsioJiDgW(f~wWy_ONnRsk
zKSXq9;hTT*wN{yXkc?90L86Jw+=}T3rI#vvbbndNsbT@txSM!3lsZRG08G&wdt3e0
z$F$fQkgi6R!2ooG!c4k5zWnS&ccGFce*{H~HI?#^`;Zec#f00G5?|JSe%LqMx;+@O
z8vOLGZOe5phvG{d75kfv{EiwNghtu=FLdP-ecYCE%zOIr^%%OWR<)QTi=){9SqXmz
z(knliW>Q!H73M6EKlMRCWBmV=^uEY6>rOZL$<)0X+ad5DS33V&SwCqijA7?lPL(Wr
zWOWqTQdly}jBw~OYv`oGrP4E~&$MuMVA>dlE-uzevwY*MHa;-TloO4GF{y{~5($by
zkV(qpZp!Bp(Z)Y=q5fa~aQ3VOr@1torHS?YJybcokj+&$%@!}8(E75ppz7h3>|#I0
zN(n<{#kL8G;d$IpddgaP%<oiiMtG*(TMvVQ#y5jUsReQ)TbHn#`khrQe>a7v4A3F$
zbRb!rt<!Eacc%))2Pg*&Se`v{@#<-gFYyYFQ+1t`kF9Od99@~<q5<z-3Ggl*t9{v5
zf<XliVBH)j_VsStXNPPhOgv$RBTbB3p;Z<o^=@?36>))Tz~Xa?uA>HeM%?a2r*WCq
z23Lw|n{SJ?>!EBRK$aORW%)+7-E4b98_X(Q5I4J}?Ppc}^_Gb~dnJa%LGV!6x%2Kk
zlj{Yb;zqOwosx&U`qLCxRjdD&`Q^DSuTrvLQyVw^3lJb?xqM9gvs2BL*r50!XlbnQ
zLv^R~q+AU`h>Y8LA2)dqwd!d@rOR;=#rXrLY<!Ks{t;gXPIc(ZmV5(u(QS$Zb!q%x
z<HF}?p~9mAA5n_j-i65;S6a(nFgz@rgN<T0IekhrR}6-W{z$aPM-`J%Rs$Y`ck<ua
zOM%>k1mzBOO6n^fP~N`)73HSV3_El_I!Fb!2J$>5nT87oLewuOTY^qIV<GTw<q#b#
z0YR_B1HwK?ME(BSGk2ff=NDj_Ef@ZC?fI?$m)`&ERsDZ|2Is=|Hcn1GJ-%BZ`%EL7
Qju)VR)A$BP&oTPH0D7xD6951J

literal 0
HcmV?d00001

diff --git a/doc/user/crm/index.md b/doc/user/crm/index.md
new file mode 100644
index 00000000000..b5907af3006
--- /dev/null
+++ b/doc/user/crm/index.md
@@ -0,0 +1,77 @@
+---
+stage: Plan
+group: Product Planning
+info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#assignments
+---
+
+# Customer relations management (CRM) **(FREE)**
+
+> [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/2256) in GitLab 14.6 [with a flag](../../administration/feature_flags.md) named `customer_relations`. Disabled by default.
+
+FLAG:
+On self-managed GitLab, by default this feature is not available. To make it available,
+ask an administrator to [enable the feature flag](../../administration/feature_flags.md) named `customer_relations`.
+On GitLab.com, this feature is not available.
+You should not use this feature for production environments.
+
+With customer relations management (CRM) you can create a record of contacts
+(individuals) and organizations (companies) and relate them to issues.
+
+You can use contacts and organizations to tie work to customers for billing and reporting purposes.
+To read more about what is planned for the future, see [issue 2256](https://gitlab.com/gitlab-org/gitlab/-/issues/2256).
+
+## Contacts
+
+To view a group's contacts:
+
+1. On the top bar, select **Menu > Groups** and find your group.
+1. On the left sidebar, select **Customer relations > Contacts**.
+
+![Contacts list](crm_contacts_v14_6.png)
+
+You can only [create](../../api/graphql/reference/index.md#mutationcustomerrelationscontactcreate)
+or [update](../../api/graphql/reference/index.md#mutationcustomerrelationscontactupdate)
+contacts using the GraphQL API.
+
+## Organizations
+
+To view a group's organizations:
+
+1. On the top bar, select **Menu > Groups** and find your group.
+1. On the left sidebar, select **Customer relations > Organizations**.
+
+![Organizations list](crm_organizations_v14_6.png)
+
+You can only [create](../../api/graphql/reference/index.md#mutationcustomerrelationsorganizationcreate)
+or [update](../../api/graphql/reference/index.md#mutationcustomerrelationsorganizationupdate)
+organizations using the GraphQL API.
+
+## Issues
+
+### View issue contacts
+
+You can view contacts associated with an issue in the right sidebar.
+
+To view a contact's details, hover over the contact's name.
+
+![Issue contacts](issue_crm_contacts_v14_6.png)
+
+You can also view issue contacts using the
+[GraphQL](../../api/graphql/reference/index.md#mutationcustomerrelationsorganizationcreate)
+API.
+
+### Add or remove issue contacts
+
+Prerequisites:
+
+- You must have at least the [Developer role](../permissions.md#project-members-permissions) for a group.
+
+To add contacts to an issue use the `/add_contacts`
+[quick action](../project/quick_actions.md).
+
+To remove contacts from an issue use the `/remove_contacts`
+[quick action](../project/quick_actions.md).
+
+You can also add, remove, or replace issue contacts using the
+[GraphQL](../../api/graphql/reference/index.md#mutationissuesetcrmcontacts)
+API.
diff --git a/doc/user/crm/issue_crm_contacts_v14_6.png b/doc/user/crm/issue_crm_contacts_v14_6.png
new file mode 100644
index 0000000000000000000000000000000000000000..9c18b1a8cdba0215a34c45724c796535dabe94ad
GIT binary patch
literal 6703
zcmb`MRa9KfmVg@?8f`pS;}RgaHBKP7gaE;UH!f);XmAgN1_Ff81Z#r31Of@co#0OY
zBm{Q|?lAq&totzQ&Yk-(^Kee>TIZDPy>?Z7dsm#UjvAPdo)7>4fHl;W^#K4Z0*qXT
zkBxc%@~9NX6j)yRYEJ-FBMe)Z3XY@VQ$+xvHi_s4hKs2ac&NYd0su(5{(i9f+)L~L
z0J?4sWkmyj%f0MHR|d5&eFuw_CSP*b6<LIEo~&}k6Y-{)q=!WVKhm<D!PGsL?T1&N
zfTCl6BRv`FwM3vC>@vHw5!k9&{Q9~gBcxIT!yHDciJcs_&tCG_{xBwOJvZ|yD=%*@
zH)9_rEq5GwgQ~2mDyx$BY4y=*;6Di66(Y8cZ0Hd3HGvS@zWJX8wg$Z%-w7{qpK)9l
zFK5TPxgI>BV9i4P*GB_f_q!<rc3-}HnUYH<mB09XI%}ndm5>{9<$P0cB{!Y|l`c$m
z+ex6q`MsH%ntB>wVe!`(TFALDpTIRzgBDK>(y&~xk|N;NAIK|ZnCI#{DD{5B?$(=b
zmd*avKxORP-;%W5KT2OdOHTXx0Krh=2>QrPbAK}VjORzddWPfCrK~e>c#PKK#DeTY
zLRw27m=%%b5&DSt{sR-AA#3S_;<Uxg4NNCxmV`>@r@dSqC60N5xzA_;Y7(OmeDad0
z9VH45S{Jf0(6k@atvjvodcs#=CC0~Uk-G?d|HY}xi6zeiM$OUTFcfCv<H;Sa{A4q$
zEFFz%S$N~U_zv2ARvkATL!&_DCOQMMW!+siGc(K32IVPPJZ6K()@@WXg}{;fts6~w
z%pGWJJ`)RBG6|1M{CZa4lR33uG?^pu`3(!{S}hu7Lgo3(8ZLxYAwU9?{dgR6qJ{dt
zcmrCy@?$CPEM$|*J`O@N^db0L4W1H(HFTJ;%o=lfUK+k#U_3(6uNoh;Ub~q<0BKGN
zjlP`v5Mt5aHBj1K64yxB?mr7BdC<G`EwVvWq~^U-<cH(%AJ9qAU@R%qJHxa%JcRr>
zs1!Rs;QsD5@O=N4b>8L-_XVj#l&}U@Bu`Sv7>EE!6!)Md@Z2qbyvb+BsKxR=VV*{a
zkr-dJ6Dh<)EQ35!{|;5Bom+)UNVqSyCghd`UHn<P7ls3Xod|S+&;ekOeI7kV4%~TD
zSvCK%tifIyN1L##^E;4Mj;*2g)!D`2O7;5?qx6)t#t88wTD}JqHr>H5-Tn3#^mYck
zsc5O!qmyASGcf?P|Js^yVy<{-(pI~3WCUnp*|ajI&Q!Z7zr99C5TTu?lo0}mo$hVZ
zbZ2~gH{)2gj&hEqc!U$2MeqLW`+y@t01Gp$kcc)ol2m6icD8podo)UVVQy(QrfF?C
znr43e^91j9%)aZF14O$zB=%H2wtTwGRHKNf{qI)8Xfkeif5gsJ3^Xd=m8R`QzzgvY
z@I>a&uN;EPE!(ax#P-uD{u*`fxsur(S65dTx(orpac6&|@9LZdB!)v4PV2{+(+s)7
za%*Xm6SJ+K7c5AqtgKuNx!&tdfc)ckA#qnF>wx3o&=xie^XnFT{9Y+L#|=jgJu2!7
z^gFEXr0VNdYxoKAOia?4PLdYGF#9s7zSeBP$%+_D8-8=KlJs9a)j?(XehGdFoIO}N
z$pNWLP0dw-=YL72`(e+hj#|Sn@LeKB%EK0$Y5Cdf^S(7VrR}w&H|Z)8qB{O>#ds@p
zf8p!#&GBevXxr`a=wsu1QmI5y5s@SHyKNb!kHZd!F56dtcC<PzV-iGER8+9_;*+l?
zw_{KcgG=6zoDQ@kOAVB23{W55x%MNSTr81EF5vFwH6m${>7Ex{kpS$pb_VW|({bBJ
z(EdJY>V7uW#klm|l(opfds6{?s={fZkHwgr31gUepwP~$k~iGP9E#8~uwigPeHKsY
zh$f=3;~G~mPJ!wwH4cTT;yjGBr2XLH#1J4O%P5Xis5Hv=BPDI%#aN=26yEOKzd}$6
z4hulUnB=ukTSj9`i4i&}$iH#m;MgX~&DUC(K*jH?NV6^$YTgt$Bh$E3+jUvs$j=YD
z1{`n(uc#GhaHMaP>Db3u32|jVe$102py;w0Ibo~p!WiIs43wpG&Bn6P`wYO`>0}Bq
zr7&PgPsyx{SRi_=2gNHO!|LZbOf_AmmLsyC8nckqdV{Z!;KLbHn1{cO?ZJyuJ(=(V
za07QJ!*ld^YM>Oo^7V@C?!R6BknYLR;xR>HyX7&Zm#8J2J+aVLYC@^TgMXeH3+~0E
z$xlBIH9Ij>gXyKhq^QCz9kjNcg4xENyD-kEcFr|I0he#L<j}b_hh0C%!`Q-n+3WEP
z9+otZlma+anhGH+TnX0l@i~du-!{$F{nWzi6}?abQLUVB&L7$)MxIF*+raC)+Os9>
z0zQol7M)vjzkm9MNCE79ZWVg_ApISsn=_ZHpGz1vI68MVcKvgGac86+fw3x$G^uVO
z$wS&)5YA?ydq(QG7fOrlSQ%A3C0zj~<-6&?gPaMr-PE<V-rb%r9{AJ}Oa|gl(sbO#
zz!{%|@aX2SRAWkE9!Lv*g*H@{e0SKoLDbhwd5V-z;6w;PJ|n!HC%J1=Y+VoIWc|e6
z3)ZGl4aq_#5V^>IQ+&%ykomIc_$}!2D4smDS|&*Aev9?iv!Qir_z$IhSpgJ=-8DiR
zx}YPDWSz#j(<f->x6r6o;vdEWrY=0dm~=A++V89le;0_01K50~UPm#xfgOr0dGkb0
zicLD?cvylPMH2(w6q4n8Sku&`?sv*U8@><9QMYx0o7~@U$PQS*;2elVSKu8^akyy4
z9pSTY9!pQ=y6`72#~4F2bm%~~F>(~*Sa33<To962mnKC)3*n1dHge#F9?qX^%UpE0
zuI#Y-eDH;C`vBl|*;e)H>$w86anRr<(WufY!F^ny31~CAHQXUeszSq`>^cAH`QzJ@
z)Uyz=52dLGf+D@zB7}b{QUTQk7Aq=V=bl-Ny@mFZmkNe--s_Sw7b0@Ep9*0G*wF4!
zo+7zdxGoznsl~ip?G)rVO}V4EG~hPY7!_`vfh0H^WAD6>ttAb4M3t^e&8BmT!t^K+
z^lvwXtcOcnAAdd-!k44Mr5`H;i?xT*LPJvYFs`kNw*p$waqd~$Yg|+v%oE_a3UjrQ
zu6;q$oL!{|eD&O?OH~1aWGWRSPB>djx6=2Xz&YZ))%9Ba!;$~@z$7kR9J{eak8y?E
zm$=Lmu53IIz(%DrK}Z0d!BD>VdJQ+;$Ye>epamd*DQ|tDf~h()yq%*|Q5Lfij3+{E
z{$3QaDQE7J<j(BH^!4Ft`e4|pj+cqHs(9L%<fcmcl9Pjr(&Ha5sgWFpy??K6iwO{A
z%ztw%_OECYE33y|>qE7+eeaYK5eSsW(W-_)*<ZCaP~=aI5-5uBHJT7R`S%AGs;31|
z41bBItgIRttc6E3jEkm}fZsj<gxkD+O(%{|!|l|8!fHUUX=13#yH>R)jbTc!=v6T}
zVb-tfIY>`^>UCDbI4?zUf>ydf$2B=~{Ua6vgKe#=uJVh`aZMe=5vi@^m~WeW6$#4k
z_~7lQ_SPQi1hEkAR9b+5UYwZ$o!1%W-16M#4Khg1$rl2$I(yfbKHy45ZkcI1uQ~gG
zx#98ZtIB>ocC`<ek;|iBM{BI_k4NMBm;$x=*(Y&R3c-UP)qzwB+`$pV+~XqRl$6q+
z8kVkFc1~E8fsD@vRmQdb+uQ^h7_0c=C%&c`L~$4dEBITo(QKCY@r@2>in=W{Ngfur
zSuHh<KgIO+Dxd`0{zfbk=p5;$w;3ztQ%^1Nas%AtuM3?Uw<u2Ev_mX|3?GdaVcnvI
z#^4dQnh|KE<Ta0LemsX3<h^`!D(71+Q{wjldBPSk&THRcsfz7CIa$?a;ifY&$%4r&
zd&|NN;m5ra_cwwgrQbA|ogyPNSTxloyrxuQgI)8}ny@r>Io*&y&5|HN)Cckd6EUw#
z#!w<G#L{oaYP&U~pwPEcd*?QSjlso7(+45H<_sYnbuKHA$ydKF&O`5SAGzi?V`j4c
zLKc)VCO@)#l}S-U5J`5V+f?Q5eR6iK4&OXGs+yIM%O+|hZ(1hD3%JtZ9D#%`9~fAy
zVGw~}0>sD>MkkHJId)RS^CXl1;AA>jO7hTzBl|h*a7skPg5?Do@Lo`n*pvyMUAlOp
z6GdvI$6*Nxy*X5Cv9vNX3%vM~hXI=Z0w&_;Tq=+-l10D^N*)|mY}~;nh2IzC59iVT
ze|}?8@6J@3O}m`l-Cny0XCz|(gPbr;6n?O14+$%!`oqOChgI`EkJpDyD~qU8x44D)
zhKSg^rUoWJ3KgiAgaHa~qp=Ohy?TW-YM_7*gw5!m&3?5Z{c#vu_%-BczX{WTnILKY
zbI-QF!eW_6w==1#CH~dueviS2G);S3+m&A}fk9_Zl(b|RB!%f?VDRY-ET0{t6O}Xu
zIFre2AJh&6U+*<y4wh3It02!kbi<LNjgQZRjJP9t0s*~JH)djMF(e5niVmiYq>71t
z&Er%9O~DxeW-`o>{srOela#5dtb{ptB;my|hg>NB0OFdLLGXZewAy&U338H$(J<IA
zMM@Bca>EjtVz1TXm%Qe-w@<I!@hGHcv8fEEv4BO9Si(xQln)u(V--&#p@0D(fiN{i
zCW8^xOGbklW}uJfAC{dCgwR86X=EoL_!Btnls%fv#K2*Zn_bfoV84u&A6lQ6w`PY{
zqx06?Qi2O<t6{<e1mg^-Yc6gg<|2XUhv32<aK%rSxck7t;PDWmMYrT-c?{NSwS>z3
zwmMe{|9bJ=k-z2;*XhOQ=(iP!th6BVgGOCxoyI=*@NJdDgYx2=wkW<(L)CkM;k#1)
z5r-TIW3RP;H>EA5JD>Pec5v;Bk;f9r*9Dcr%Ui9`?X<!k&Ku(Z_>gDsD`Vx?&b1SB
z&L0*Td=iJ=XO_Xj<ec+su?0upd#|WU-FKR-cQtKE$PX4|P0cM564}TX&JR_X-)+7)
zZG%3FF3u`#(~(k|=Uh3J$pf4C5YL3%C|CI#N_X{`uX~sBAE3Dl-{^16ak{1MyLQ=E
zds;u+i%jULrZx@f`>D)#`TUVlz4D^#O8E_pOSG-_oln*-SB@ll76ez?`dao)2S0F1
z70z=XK^*@^wfNTypS{_NA^W~u1-FPH4jJad^U$u=ebFml_}1>!ChL@Bms<1>`n}Ax
zEj>qWi-Ke&uXig=)*}-G=4{gq0sA#8i1iPVit|~9$IUipCH_-?#&>V7a}M+~qYnt_
z4rjVniZ{yLNQ}%zo-rm{Bx(<bM9+(-TRxRyzcg&@*q-lNFMMMKX;_;d`Yf^t2?)CJ
zuC3#7)i^##rzz??L`+dSU*Zoq6#56;9J0C`j1=qTaGFVV<yQ-IZ!p`~WL);@*vhZ;
zM|3u7!|+N*9b>Yl%Bh^kB-X4igWQez8GN$ZKCtEdst9_|9uHf0o-N(X>q*i{0GG<?
zaI{bDj`=Ui+@Bc>j<#|vW*e0iwuQIK1djJQNcnYZWOG-ziIo|D&ewT#ob122Z7#ir
zaHuwdK+2;jc{XC<OTso;P!~>b2KwBub*4W{__Fvv={FW1dht#;%}Bk38ZBmeWW{x!
zs^*U`%)3FWXu3}W%M$|foih>EUOs11u$`riSA{#jI$wYOWEkq}kf&c>MWw??UL;W;
z9#qlvO^-jf>x4l>#f$R|PvN3j<#ahw^^?(z%PSo(;mlVg8*LPfeqVlkWp%vy1jiGv
zS6o4~y)d;XH>?^#*wS;^f!G+?e4K0?YE8@E*C8qFVy^aF^i1TNYi3G<4b@4d@;7w(
zTY@-b+Gd<8_=mq!XLgCD*C~xmJvgMETW54EGbo0{D6%o2&RF?`5^sqo<@t!@KeCZM
z{m%SA%%yNkmT!S2UW%uyb7b>GUr8W0C<?0H>OWka;QF~(;6u63>3;U0-x&%#G%A!)
z-)vHIH1y8vqQZow!>4;~inxf0O$YKR-D|t78CTQb+8)_X)JN`x5B~K;hjY%YeaxBe
zuy^#*mycEFu;Q@uV?_@|Xapy;VM)g}P(!jovhB%IFNnvHi(+|i`X<)(Q=0jphYWKL
zbX8J~2%Sl9T;yRuDbKa2W!8Kp?+dt`nRSr8)Kh2p$P<Wu=T6<Ard|+c0i4nD&-s$G
z$U?pHgP>SHBV$2tqJVi`*Hx*CYRL-}Uh8s{C+$xFlok}cxM8=6lPh+~lyg#&pC+a6
z=K-<c5t8MDolj7OcGu&zZ3S8PS<~VD@^Ak9=68vlbE~)m4wG(F$MedSA7zdqVD`3F
z=YnB3j=E7$L?~%b^g2uHeZOp(Z1&qBf$od?%Gf>C`}jxLw@&wgTa8c#9rofkRGU%i
zL&|49!*?ceCyRh8Nx4X6S}TuW>OlDs9xZBI%~APE+2*g7zK@4WPRsbIUkN@%$Q8=N
z=+GYg=DaVACdE{28%}h5w@Yh<YlrC=|FW(2WPfhz&Z4Jx&l;XgBo$D#YdEv#tc`%K
zen}q`xH`j~X7U8Cv{g`GV4=PkTw_TkQ**PK=eV{vNb&V`pR3aTxnLUELd({;OkDPb
zM+oj~tv}-8Y3EVR{lRne606#5^{imYk5<AtW)eC2>0hhvcT!2|xO*3o#e#1y-0u=R
zACw}}6GU3GJRY4+@D!k&&Gzd9NIE?~+r;Haac0f)rqM4r3<oxcMK9U%_!M{^YO{`t
zre2EZ_o;df%+~VTG#naKt<t-0HOJhzfF$^1HKxkfzM3n(e07x1l}KpZvormO=(GDs
zdEqf-G1!h#J)89DDtrT+5yXD_KG$&13uRCF(9%L6)h}*mvT)E?YwhD46>xD^C4Mp^
z<16l^Z()YxlC<*`&hD^FB>+z&yI;_-EUo9Jl)e9Yxq-C^i@9*2vDQeS)yU(oSSbd1
zk&ks*oj;-_w1~W<JWD)M@vmy~Cw6*dEnob6JE8hnHZnC#mR@|jzu(bOUNzHnYnPAC
z<xZ@QFAtpTcG)P)(y(ElgnfzX5>Y&|gmzvWDR39%ty9VqPI~s!<sb##3a%Ry7F&C4
zKOs67CMi!#k#sj{P~4`^k#v=F?-!Dh;?+^)?KE=e^NpR3i8Bv8{23#kBiWTNxJunW
zp72b&l&e>i=JcGG*%J*&c%>NZ(%!G~Qr;oZIoM~rW>k^6LbPCLeOrcd`AXLzgwat^
zkjBsX{piz#aX(Tioh=!0S1%(>_9=llUQosOXZORVS2@r>=I5!|Hz}ems1{wfcfB1$
z`B^kYsY$3LJ&KjjLz`3ch4eg+G$G5Kw-Fqz)DDERhtdg!68#0s*D$^Bs2fV+*T13f
zuB*t4I3}<Rm}1GNewZTK1hB6!0!6yVm?U0IS?$Swab1g_CxHLis1Z)<(Sj`*%%t;}
zXHUD+jDe1R9rX~?`CjxJkc&XI^=`Rkbf8(5+%4+|b09tRCcDR2V~FS;zvN(ilGOUI
zg+S$#w-*%cQM3TK?5mHlr^}QzIvGf1OyWjbL=L}5d#K}I<aGa+bnn0U)K`^YMdx6x
ztHT_zf`Jj(Kd9vYN0=O~sIJbH@>-v(wM|?>{P%dM6}K#mqf>#SsgPc!3vGQx`Om>m
zXBGG|l!lqbxCoPiKIr%aO(z*H%j!ZHPvMF>nSb*p5Qx7(8DeRm^sSbu>ATgEE}Has
zb$n;LUb?k7N{ir6O0=J@x$VEBAd}F2C=4+FMA29xvc8MS-d_E4@N!lJ?jlOAFNo*u
z5sUH5Ix$a}ppENqHTULhID|R49r3&xlA2eNRgwMK!!TKr%V(o&YjpIXM9iTzMd>LW
z9RImWlZq~o+Qdphhtv>-$aU~wfsgSMG71+b`qt-}dpSl@J=y2|)+9m(U)Y~GkSN(*
zT0B}qUcJgkK3_rFeq75w$|?nW{@8OHGAC5<Nq#QAZ80#;>n{qUATE5iWEZy_M-42r
zbka_Tq2nQgv%z=U4atx%Wof715*`+S<3kjtkT^e2L%IIAc5OyDh=DCwZZK^Th7c-k
zY&~po1&gT7SZGx4mczFMZXA56+(q_Cv{0&myY>!CdvS(E1NpIwcAYTk19}5cl%g8B
z^aqozPtd66`|I$KB;v%cu6%5pRb(lC<(zP&r;_&~{EIf5(CD)8yQpuz)Jd~3PAfZ1
z4^1KK`6}}a&#&w6zq8(&4Okn)`z?chZK`duU=597aU#`-q+=uh)GALJ!Z&TDml`C<
zT1o8u7LlFB54IM(6`lyxP56H@NT#*(gX_NNSS-CF8cb&a@smc8XFqp_jp3DZFE<D)
zAV0#c0MbD~yQc+YQTSBcE7;*HYP2&k%H7<qCbkra4~j^nZHz-$!_wNzu;}qz79(9~
pw7BX&;+3VQe|bk@>$q``Rn4P7Ag6No_jM3JLq$iq>WOv4e*jmFrD*^F

literal 0
HcmV?d00001

diff --git a/doc/user/group/index.md b/doc/user/group/index.md
index 37761d0914b..13c86c56af7 100644
--- a/doc/user/group/index.md
+++ b/doc/user/group/index.md
@@ -805,13 +805,5 @@ the following checks when creating or updating namespaces or groups:
 - Namespaces must not have parents.
 - Group parents must be groups and not namespaces.
 
-You can disable the validation if GitLab shows the following errors:
-
-- `A user namespace cannot have a parent`.
-- `A group cannot have a user namespace as its parent`.
-
-To disable the validation,
-[disable the `validate_namespace_parent_type` flag](../../administration/feature_flags.md).
-
-In the unlikely event that you had to disable this feature flag to prevent errors,
+In the unlikely event that you see these errors in your GitLab installation,
 [contact Support](https://about.gitlab.com/support/) so that we can improve this validation.
diff --git a/doc/user/group/iterations/index.md b/doc/user/group/iterations/index.md
index 7a1cbe86d58..a35c1cd8ab1 100644
--- a/doc/user/group/iterations/index.md
+++ b/doc/user/group/iterations/index.md
@@ -7,14 +7,10 @@ info: To determine the technical writer assigned to the Stage/Group associated w
 
 # Iterations **(PREMIUM)**
 
-> - [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/214713) in GitLab 13.1.
-> - Deployed behind a feature flag, disabled by default.
-> - [Enabled by default](https://gitlab.com/gitlab-org/gitlab/-/issues/221047) in GitLab 13.2.
-> - Enabled on GitLab.com.
-> - Can be enabled or disabled per-group.
-> - Recommended for production use.
-> - For GitLab self-managed instances, GitLab administrators can opt to [disable it](#enable-or-disable-iterations).
+> - [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/214713) in GitLab 13.1 [with a flag](../../../administration/feature_flags.md) named `group_iterations`. Disabled by default.
+> - [Enabled on self-managed](https://gitlab.com/gitlab-org/gitlab/-/issues/221047) in GitLab 13.2.
 > - Moved to GitLab Premium in 13.9.
+> - [Generally available](https://gitlab.com/gitlab-org/gitlab/-/issues/221047) in GitLab 14.6. [Feature flag `group_iterations`](https://gitlab.com/gitlab-org/gitlab/-/issues/221047) removed.
 
 Iterations are a way to track issues over a period of time. This allows teams
 to track velocity and volatility metrics. Iterations can be used with [milestones](../../project/milestones/index.md)
@@ -171,30 +167,6 @@ To group issues by label:
    You can also search for labels by typing in the search input.
 1. Select or tap outside of the label dropdown. The page is now grouped by the selected labels.
 
-## Enable or disable iterations **(PREMIUM SELF)**
-
-GitLab Iterations feature is deployed with a feature flag that is **enabled by default**.
-[GitLab administrators with access to the GitLab Rails console](../../../administration/feature_flags.md)
-can disable it for your instance. `:group_iterations` can be enabled or disabled per-group.
-
-To enable it:
-
-```ruby
-# Instance-wide
-Feature.enable(:group_iterations)
-# or by group
-Feature.enable(:group_iterations, Group.find(<group ID>))
-```
-
-To disable it:
-
-```ruby
-# Instance-wide
-Feature.disable(:group_iterations)
-# or by group
-Feature.disable(:group_iterations, Group.find(<group ID>))
-```
-
 ### Enable or disable iteration cadences **(PREMIUM SELF)**
 
 Iteration Cadences feature is under development and not ready for production use. It is
diff --git a/doc/user/project/quick_actions.md b/doc/user/project/quick_actions.md
index a4d7b94506b..75a5a2a6a4f 100644
--- a/doc/user/project/quick_actions.md
+++ b/doc/user/project/quick_actions.md
@@ -35,7 +35,7 @@ If you manually enter a parameter, it must be enclosed in double quotation marks
 
 - ASCII letters
 - Numbers (0-9)
-- Underscore (`_`), hyphen (`-`), question mark (`?`), dot (`.`), or ampersand (`&`)
+- Underscore (`_`), hyphen (`-`), question mark (`?`), dot (`.`), ampersand (`&`) or at (`@`)
 
 Parameters are case-sensitive. Autocomplete handles this, and the insertion
 of quotation marks, automatically.
@@ -45,14 +45,15 @@ of quotation marks, automatically.
 The following quick actions are applicable to descriptions, discussions, and
 threads. Some quick actions might not be available to all subscription tiers.
 
+<!-- Keep this table sorted alphabetically -->
+
 | Command                               | Issue                  | Merge request          | Epic                   | Action |
 |:--------------------------------------|:-----------------------|:-----------------------|:-----------------------|:-------|
+| `/add_contacts email1 email2`         | **{check-circle}** Yes | **{dotted-circle}** No | **{dotted-circle}** No | Add one or more [CRM contacts](../crm/index.md) ([introduced in GitLab 14.6](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/73413)). |
 | `/approve`                            | **{dotted-circle}** No | **{check-circle}** Yes | **{dotted-circle}** No | Approve the merge request. |
-| `/assign @user`                       | **{check-circle}** Yes | **{check-circle}** Yes | **{dotted-circle}** No | Assign one user. |
-| `/assign @user1 @user2`               | **{check-circle}** Yes | **{check-circle}** Yes | **{dotted-circle}** No | Assign multiple users. |
+| `/assign @user1 @user2`               | **{check-circle}** Yes | **{check-circle}** Yes | **{dotted-circle}** No | Assign one or more users. |
 | `/assign me`                          | **{check-circle}** Yes | **{check-circle}** Yes | **{dotted-circle}** No | Assign yourself. |
-| `/assign_reviewer @user` or `/reviewer @user` or `/request_review @user`            | **{dotted-circle}** No | **{check-circle}** Yes | **{dotted-circle}** No | Assign one user as a reviewer. |
-| `/assign_reviewer @user1 @user2` or `/reviewer @user1 @user2` or `/request_review @user1 @user2`      | **{dotted-circle}** No | **{check-circle}** Yes | **{dotted-circle}** No | Assign multiple users as reviewers. |
+| `/assign_reviewer @user1 @user2` or `/reviewer @user1 @user2` or `/request_review @user1 @user2`      | **{dotted-circle}** No | **{check-circle}** Yes | **{dotted-circle}** No | Assign one or more users as reviewers. |
 | `/assign_reviewer me` or `/reviewer me` or `/request_review me`                 | **{dotted-circle}** No | **{check-circle}** Yes | **{dotted-circle}** No | Assign yourself as a reviewer. |
 | `/award :emoji:`                      | **{check-circle}** Yes | **{check-circle}** Yes | **{check-circle}** Yes | Toggle emoji award. |
 | `/child_epic <epic>`                  | **{dotted-circle}** No | **{dotted-circle}** No | **{check-circle}** Yes | Add child epic to `<epic>`. The `<epic>` value should be in the format of `&epic`, `group&epic`, or a URL to an epic ([introduced in GitLab 12.0](https://gitlab.com/gitlab-org/gitlab/-/issues/7330)). |
@@ -81,11 +82,12 @@ threads. Some quick actions might not be available to all subscription tiers.
 | `/promote_to_incident`                | **{check-circle}** Yes | **{dotted-circle}** No | **{dotted-circle}** No | Promote issue to incident ([introduced in GitLab 14.5](https://gitlab.com/gitlab-org/gitlab/-/issues/296787)). |
 | `/publish`                            | **{check-circle}** Yes | **{dotted-circle}** No | **{dotted-circle}** No | Publish issue to an associated [Status Page](../../operations/incident_management/status_page.md) ([Introduced in GitLab 13.0](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/30906)) |
 | `/reassign @user1 @user2`             | **{check-circle}** Yes | **{check-circle}** Yes | **{dotted-circle}** No | Replace current assignees with those specified. |
-| `/rebase`                             | **{dotted-circle}** No | **{check-circle}** Yes | **{dotted-circle}** No | Rebase source branch. This schedules a background task that attempts to rebase the changes in the source branch on the latest commit of the target branch. If `/rebase` is used, `/merge` is ignored to avoid a race condition where the source branch is merged or deleted before it is rebased. If there are merge conflicts, GitLab displays a message that a rebase cannot be scheduled. Rebase failures are displayed with the merge request status. |
 | `/reassign_reviewer @user1 @user2`    | **{dotted-circle}** No | **{check-circle}** Yes | **{dotted-circle}** No | Replace current reviewers with those specified. |
+| `/rebase`                             | **{dotted-circle}** No | **{check-circle}** Yes | **{dotted-circle}** No | Rebase source branch. This schedules a background task that attempts to rebase the changes in the source branch on the latest commit of the target branch. If `/rebase` is used, `/merge` is ignored to avoid a race condition where the source branch is merged or deleted before it is rebased. If there are merge conflicts, GitLab displays a message that a rebase cannot be scheduled. Rebase failures are displayed with the merge request status. |
 | `/relabel ~label1 ~label2`            | **{check-circle}** Yes | **{check-circle}** Yes | **{check-circle}** Yes | Replace current labels with those specified. |
 | `/relate #issue1 #issue2`             | **{check-circle}** Yes | **{dotted-circle}** No | **{dotted-circle}** No | Mark issues as related. |
 | `/remove_child_epic <epic>`           | **{dotted-circle}** No | **{dotted-circle}** No | **{check-circle}** Yes | Remove child epic from `<epic>`. The `<epic>` value should be in the format of `&epic`, `group&epic`, or a URL to an epic ([introduced in GitLab 12.0](https://gitlab.com/gitlab-org/gitlab/-/issues/7330)). |
+| `/remove_contacts email1 email2`      | **{check-circle}** Yes | **{dotted-circle}** No | **{dotted-circle}** No | Remove one or more [CRM contacts](../crm/index.md) ([introduced in GitLab 14.6](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/73413)). |
 | `/remove_due_date`                    | **{check-circle}** Yes | **{dotted-circle}** No | **{dotted-circle}** No | Remove due date. |
 | `/remove_epic`                        | **{check-circle}** Yes | **{dotted-circle}** No | **{dotted-circle}** No | Remove from epic. |
 | `/remove_estimate`                    | **{check-circle}** Yes | **{check-circle}** Yes | **{dotted-circle}** No | Remove time estimate. |
diff --git a/lib/api/groups.rb b/lib/api/groups.rb
index 680e3a6e994..8bc19160540 100644
--- a/lib/api/groups.rb
+++ b/lib/api/groups.rb
@@ -109,7 +109,7 @@ module API
       end
 
       def present_groups_with_pagination_strategies(params, groups)
-        return present_groups(params, groups) if current_user.present? || Feature.disabled?(:keyset_pagination_for_groups_api)
+        return present_groups(params, groups) if current_user.present?
 
         options = {
           with: Entities::Group,
diff --git a/lib/gitlab/checks/branch_check.rb b/lib/gitlab/checks/branch_check.rb
index cfff6e919dc..237a6bbb0f2 100644
--- a/lib/gitlab/checks/branch_check.rb
+++ b/lib/gitlab/checks/branch_check.rb
@@ -40,6 +40,7 @@ module Gitlab
       private
 
       def prohibited_branch_checks
+        return if deletion?
         return unless Feature.enabled?(:prohibit_hexadecimal_branch_names, project, default_enabled: true)
 
         if branch_name =~ /\A\h{40}\z/
diff --git a/spec/bin/feature_flag_spec.rb b/spec/bin/feature_flag_spec.rb
index de0db8ba256..a85cafcb4a3 100644
--- a/spec/bin/feature_flag_spec.rb
+++ b/spec/bin/feature_flag_spec.rb
@@ -239,7 +239,7 @@ RSpec.describe 'bin/feature-flag' do
     end
 
     describe '.read_rollout_issue_url' do
-      let(:options) { OpenStruct.new(name: 'foo', type: :development) }
+      let(:options) { double('options', name: 'foo', type: :development) }
       let(:url) { 'https://issue' }
 
       it 'reads type from $stdin' do
@@ -265,7 +265,7 @@ RSpec.describe 'bin/feature-flag' do
     end
 
     describe '.read_ee_only' do
-      let(:options) { OpenStruct.new(name: 'foo', type: :development) }
+      let(:options) { double('options', name: 'foo', type: :development) }
 
       it { expect(described_class.read_ee_only(options)).to eq(false) }
     end
diff --git a/spec/factories/namespaces.rb b/spec/factories/namespaces.rb
index 957ec88420d..2b3dabc07d8 100644
--- a/spec/factories/namespaces.rb
+++ b/spec/factories/namespaces.rb
@@ -1,8 +1,12 @@
 # frozen_string_literal: true
 
 FactoryBot.define do
-  factory :namespace do
+  # This factory is called :namespace but actually maps (and always has) to User type
+  # See https://gitlab.com/gitlab-org/gitlab/-/merge_requests/74152#note_730034103 for context
+  factory :namespace, class: 'Namespaces::UserNamespace' do
     sequence(:name) { |n| "namespace#{n}" }
+    type { Namespaces::UserNamespace.sti_name }
+
     path { name.downcase.gsub(/\s/, '_') }
 
     owner { association(:user, strategy: :build, namespace: instance, username: path) }
diff --git a/spec/features/groups/navbar_spec.rb b/spec/features/groups/navbar_spec.rb
index 22409e9e7f6..da8032dc4dd 100644
--- a/spec/features/groups/navbar_spec.rb
+++ b/spec/features/groups/navbar_spec.rb
@@ -14,7 +14,6 @@ RSpec.describe 'Group navbar' do
   before do
     insert_package_nav(_('Kubernetes'))
 
-    stub_feature_flags(group_iterations: false)
     stub_feature_flags(customer_relations: false)
     stub_config(dependency_proxy: { enabled: false })
     stub_config(registry: { enabled: false })
diff --git a/spec/finders/ci/auth_job_finder_spec.rb b/spec/finders/ci/auth_job_finder_spec.rb
index 78827c9ddee..0a326699875 100644
--- a/spec/finders/ci/auth_job_finder_spec.rb
+++ b/spec/finders/ci/auth_job_finder_spec.rb
@@ -70,17 +70,6 @@ RSpec.describe Ci::AuthJobFinder do
         expect(subject.user).to be_from_ci_job_token
         expect(subject.user.ci_job_token_scope.source_project).to eq(job.project)
       end
-
-      context 'when feature flag ci_scoped_job_token is disabled' do
-        before do
-          stub_feature_flags(ci_scoped_job_token: false)
-        end
-
-        it 'does not set ci_job_token_scope on the job user' do
-          expect(subject).to eq(job)
-          expect(subject.user).not_to be_from_ci_job_token
-        end
-      end
     end
   end
 end
diff --git a/spec/frontend/repository/components/blob_button_group_spec.js b/spec/frontend/repository/components/blob_button_group_spec.js
index f2a3354f204..9f9d574a8ed 100644
--- a/spec/frontend/repository/components/blob_button_group_spec.js
+++ b/spec/frontend/repository/components/blob_button_group_spec.js
@@ -9,6 +9,7 @@ const DEFAULT_PROPS = {
   name: 'some name',
   path: 'some/path',
   canPushCode: true,
+  canPushToBranch: true,
   replacePath: 'some/replace/path',
   deletePath: 'some/delete/path',
   emptyRepo: false,
diff --git a/spec/frontend/repository/components/delete_blob_modal_spec.js b/spec/frontend/repository/components/delete_blob_modal_spec.js
index 2c62868f391..785783b2e75 100644
--- a/spec/frontend/repository/components/delete_blob_modal_spec.js
+++ b/spec/frontend/repository/components/delete_blob_modal_spec.js
@@ -13,6 +13,7 @@ const initialProps = {
   targetBranch: 'some-target-branch',
   originalBranch: 'main',
   canPushCode: true,
+  canPushToBranch: true,
   emptyRepo: false,
 };
 
@@ -103,22 +104,25 @@ describe('DeleteBlobModal', () => {
     );
 
     it.each`
-      input                     | value                          | emptyRepo | canPushCode | exist
-      ${'authenticity_token'}   | ${'mock-csrf-token'}           | ${false}  | ${true}     | ${true}
-      ${'authenticity_token'}   | ${'mock-csrf-token'}           | ${true}   | ${false}    | ${true}
-      ${'_method'}              | ${'delete'}                    | ${false}  | ${true}     | ${true}
-      ${'_method'}              | ${'delete'}                    | ${true}   | ${false}    | ${true}
-      ${'original_branch'}      | ${initialProps.originalBranch} | ${false}  | ${true}     | ${true}
-      ${'original_branch'}      | ${undefined}                   | ${true}   | ${true}     | ${false}
-      ${'create_merge_request'} | ${'1'}                         | ${false}  | ${false}    | ${true}
-      ${'create_merge_request'} | ${'1'}                         | ${false}  | ${true}     | ${true}
-      ${'create_merge_request'} | ${undefined}                   | ${true}   | ${false}    | ${false}
+      input                     | value                          | emptyRepo | canPushCode | canPushToBranch | exist
+      ${'authenticity_token'}   | ${'mock-csrf-token'}           | ${false}  | ${true}     | ${true}         | ${true}
+      ${'authenticity_token'}   | ${'mock-csrf-token'}           | ${true}   | ${false}    | ${true}         | ${true}
+      ${'_method'}              | ${'delete'}                    | ${false}  | ${true}     | ${true}         | ${true}
+      ${'_method'}              | ${'delete'}                    | ${true}   | ${false}    | ${true}         | ${true}
+      ${'original_branch'}      | ${initialProps.originalBranch} | ${false}  | ${true}     | ${true}         | ${true}
+      ${'original_branch'}      | ${undefined}                   | ${true}   | ${true}     | ${true}         | ${false}
+      ${'create_merge_request'} | ${'1'}                         | ${false}  | ${false}    | ${true}         | ${true}
+      ${'create_merge_request'} | ${'1'}                         | ${false}  | ${true}     | ${true}         | ${true}
+      ${'create_merge_request'} | ${'1'}                         | ${false}  | ${false}    | ${false}        | ${true}
+      ${'create_merge_request'} | ${'1'}                         | ${false}  | ${false}    | ${true}         | ${true}
+      ${'create_merge_request'} | ${undefined}                   | ${true}   | ${false}    | ${true}         | ${false}
     `(
       'passes $input as a hidden input with the correct value',
-      ({ input, value, emptyRepo, canPushCode, exist }) => {
+      ({ input, value, emptyRepo, canPushCode, canPushToBranch, exist }) => {
         createComponent({
           emptyRepo,
           canPushCode,
+          canPushToBranch,
         });
 
         const inputMethod = findForm().find(`input[name="${input}"]`);
diff --git a/spec/frontend/repository/mock_data.js b/spec/frontend/repository/mock_data.js
index adf5991ac3c..99018de6efd 100644
--- a/spec/frontend/repository/mock_data.js
+++ b/spec/frontend/repository/mock_data.js
@@ -11,6 +11,7 @@ export const simpleViewerMock = {
   forkAndEditPath: 'some_file.js/fork/edit',
   ideForkAndEditPath: 'some_file.js/fork/ide',
   canModifyBlob: true,
+  canCurrentUserPushToBranch: true,
   storedExternally: false,
   rawPath: 'some_file.js',
   replacePath: 'some_file.js/replace',
diff --git a/spec/graphql/mutations/merge_requests/create_spec.rb b/spec/graphql/mutations/merge_requests/create_spec.rb
index ba0ac3cbe66..83af1e3f1b3 100644
--- a/spec/graphql/mutations/merge_requests/create_spec.rb
+++ b/spec/graphql/mutations/merge_requests/create_spec.rb
@@ -7,9 +7,10 @@ RSpec.describe Mutations::MergeRequests::Create do
 
   let_it_be(:project) { create(:project, :public, :repository) }
   let_it_be(:user) { create(:user) }
-  let_it_be(:context) do
+
+  let(:context) do
     GraphQL::Query::Context.new(
-      query: OpenStruct.new(schema: nil),
+      query: double('query', schema: nil),
       values: { current_user: user },
       object: nil
     )
diff --git a/spec/graphql/types/range_input_type_spec.rb b/spec/graphql/types/range_input_type_spec.rb
index ca27527c2b5..fc9126247fa 100644
--- a/spec/graphql/types/range_input_type_spec.rb
+++ b/spec/graphql/types/range_input_type_spec.rb
@@ -24,7 +24,7 @@ RSpec.describe ::Types::RangeInputType do
 
   it 'follows expected subtyping relationships for instances' do
     context = GraphQL::Query::Context.new(
-      query: OpenStruct.new(schema: nil),
+      query: double('query', schema: nil),
       values: {},
       object: nil
     )
diff --git a/spec/graphql/types/repository/blob_type_spec.rb b/spec/graphql/types/repository/blob_type_spec.rb
index 7f37237f355..968cb026401 100644
--- a/spec/graphql/types/repository/blob_type_spec.rb
+++ b/spec/graphql/types/repository/blob_type_spec.rb
@@ -28,6 +28,7 @@ RSpec.describe Types::Repository::BlobType do
       :rich_viewer,
       :plain_data,
       :can_modify_blob,
+      :can_current_user_push_to_branch,
       :ide_edit_path,
       :external_storage_url,
       :fork_and_edit_path,
diff --git a/spec/lib/gitlab/checks/branch_check_spec.rb b/spec/lib/gitlab/checks/branch_check_spec.rb
index 3086cb1bd33..f503759f3f8 100644
--- a/spec/lib/gitlab/checks/branch_check_spec.rb
+++ b/spec/lib/gitlab/checks/branch_check_spec.rb
@@ -32,6 +32,15 @@ RSpec.describe Gitlab::Checks::BranchCheck do
         expect { subject.validate! }.not_to raise_error
       end
 
+      context "deleting a hexadecimal branch" do
+        let(:newrev) { "0000000000000000000000000000000000000000" }
+        let(:ref) { "refs/heads/267208abfe40e546f5e847444276f7d43a39503e" }
+
+        it "doesn't prohibit the deletion of a hexadecimal branch name" do
+          expect { subject.validate! }.not_to raise_error
+        end
+      end
+
       context "the feature flag is disabled" do
         it "doesn't prohibit a 40-character hexadecimal branch name" do
           stub_feature_flags(prohibit_hexadecimal_branch_names: false)
diff --git a/spec/lib/gitlab/graphql/pagination/keyset/connection_generic_keyset_spec.rb b/spec/lib/gitlab/graphql/pagination/keyset/connection_generic_keyset_spec.rb
index 0047d24a215..d9afac5f522 100644
--- a/spec/lib/gitlab/graphql/pagination/keyset/connection_generic_keyset_spec.rb
+++ b/spec/lib/gitlab/graphql/pagination/keyset/connection_generic_keyset_spec.rb
@@ -9,7 +9,7 @@ RSpec.describe Gitlab::Graphql::Pagination::Keyset::Connection do
   let(:arguments) { {} }
   let(:query_type) { GraphQL::ObjectType.new }
   let(:schema) { GraphQL::Schema.define(query: query_type, mutation: nil)}
-  let(:context) { GraphQL::Query::Context.new(query: OpenStruct.new(schema: schema), values: nil, object: nil) }
+  let(:context) { GraphQL::Query::Context.new(query: double('query', schema: schema), values: nil, object: nil) }
 
   let_it_be(:column_order_id) { Gitlab::Pagination::Keyset::ColumnOrderDefinition.new(attribute_name: 'id', order_expression: Project.arel_table[:id].asc) }
   let_it_be(:column_order_id_desc) { Gitlab::Pagination::Keyset::ColumnOrderDefinition.new(attribute_name: 'id', order_expression: Project.arel_table[:id].desc) }
diff --git a/spec/models/group_spec.rb b/spec/models/group_spec.rb
index 243465c4030..fed4ee3f3a4 100644
--- a/spec/models/group_spec.rb
+++ b/spec/models/group_spec.rb
@@ -94,34 +94,6 @@ RSpec.describe Group do
           expect(group).to be_valid
         end
       end
-
-      context 'when the feature flag `validate_namespace_parent_type` is disabled' do
-        before do
-          stub_feature_flags(validate_namespace_parent_type: false)
-        end
-
-        context 'when the group has no parent' do
-          it 'allows a group to have no parent associated with it' do
-            group = build(:group)
-
-            expect(group).to be_valid
-          end
-        end
-
-        context 'when the group has a parent' do
-          it 'allows a group to have a namespace as its parent' do
-            group = build(:group, parent: build(:namespace))
-
-            expect(group).to be_valid
-          end
-
-          it 'allows a group to have another group as its parent' do
-            group = build(:group, parent: build(:group))
-
-            expect(group).to be_valid
-          end
-        end
-      end
     end
 
     describe 'path validation' do
diff --git a/spec/models/namespace/traversal_hierarchy_spec.rb b/spec/models/namespace/traversal_hierarchy_spec.rb
index d7b0ee888c0..51932ab943c 100644
--- a/spec/models/namespace/traversal_hierarchy_spec.rb
+++ b/spec/models/namespace/traversal_hierarchy_spec.rb
@@ -21,7 +21,7 @@ RSpec.describe Namespace::TraversalHierarchy, type: :model do
     end
 
     context 'with group outside of hierarchy' do
-      let(:group) { create(:namespace) }
+      let(:group) { create(:group) }
 
       it { expect(hierarchy.root).not_to eq root }
     end
diff --git a/spec/models/namespace_spec.rb b/spec/models/namespace_spec.rb
index 5adbcd0fa52..0baf75f890f 100644
--- a/spec/models/namespace_spec.rb
+++ b/spec/models/namespace_spec.rb
@@ -107,34 +107,6 @@ RSpec.describe Namespace do
           end
         end
       end
-
-      context 'when the feature flag `validate_namespace_parent_type` is disabled' do
-        before do
-          stub_feature_flags(validate_namespace_parent_type: false)
-        end
-
-        context 'when the namespace has no parent' do
-          it 'allows a namespace to have no parent associated with it' do
-            namespace = build(:namespace)
-
-            expect(namespace).to be_valid
-          end
-        end
-
-        context 'when the namespace has a parent' do
-          it 'allows a namespace to have a group as its parent' do
-            namespace = build(:namespace, parent: build(:group))
-
-            expect(namespace).to be_valid
-          end
-
-          it 'allows a namespace to have another namespace as its parent' do
-            namespace = build(:namespace, parent: build(:namespace))
-
-            expect(namespace).to be_valid
-          end
-        end
-      end
     end
 
     describe '#nesting_level_allowed' do
diff --git a/spec/presenters/blob_presenter_spec.rb b/spec/presenters/blob_presenter_spec.rb
index 28e18708eab..cd38e74e0ea 100644
--- a/spec/presenters/blob_presenter_spec.rb
+++ b/spec/presenters/blob_presenter_spec.rb
@@ -31,6 +31,28 @@ RSpec.describe BlobPresenter do
     it { expect(presenter.replace_path).to eq("/#{project.full_path}/-/create/#{blob.commit_id}/#{blob.path}") }
   end
 
+  describe '#can_current_user_push_to_branch' do
+    let(:branch_exists) { true }
+
+    before do
+      allow(project.repository).to receive(:branch_exists?).with(blob.commit_id).and_return(branch_exists)
+    end
+
+    it { expect(presenter.can_current_user_push_to_branch?).to eq(true) }
+
+    context 'current_user is nil' do
+      let(:user) { nil }
+
+      it { expect(presenter.can_current_user_push_to_branch?).to eq(false) }
+    end
+
+    context 'branch does not exist' do
+      let(:branch_exists) { false }
+
+      it { expect(presenter.can_current_user_push_to_branch?).to eq(false) }
+    end
+  end
+
   describe '#pipeline_editor_path' do
     context 'when blob is .gitlab-ci.yml' do
       before do
diff --git a/spec/requests/api/groups_spec.rb b/spec/requests/api/groups_spec.rb
index 75f5a974d22..a2d67c52fa8 100644
--- a/spec/requests/api/groups_spec.rb
+++ b/spec/requests/api/groups_spec.rb
@@ -174,18 +174,6 @@ RSpec.describe API::Groups do
                 'Remaining records can be retrieved using keyset pagination.'
               )
             end
-
-            context 'when the feature flag `keyset_pagination_for_groups_api` is disabled' do
-              before do
-                stub_feature_flags(keyset_pagination_for_groups_api: false)
-              end
-
-              it 'returns successful response' do
-                get api('/groups'), params: { page: 3000, per_page: 25 }
-
-                expect(response).to have_gitlab_http_status(:ok)
-              end
-            end
           end
 
           context 'on making requests below the allowed offset pagination threshold' do
@@ -247,24 +235,6 @@ RSpec.describe API::Groups do
               expect(records.size).to eq(1)
               expect(records.first['id']).to eq(group_2.id)
             end
-
-            context 'when the feature flag `keyset_pagination_for_groups_api` is disabled' do
-              before do
-                stub_feature_flags(keyset_pagination_for_groups_api: false)
-              end
-
-              it 'ignores the keyset pagination params and performs offset pagination' do
-                get api('/groups'), params: { pagination: 'keyset', per_page: 1 }
-
-                expect(response).to have_gitlab_http_status(:ok)
-                records = json_response
-                expect(records.size).to eq(1)
-                expect(records.first['id']).to eq(group_1.id)
-
-                params_for_next_page = params_for_next_page(response)
-                expect(params_for_next_page).not_to include('cursor')
-              end
-            end
           end
 
           context 'on making requests with unsupported ordering structure' do
diff --git a/spec/support/shared_contexts/navbar_structure_context.rb b/spec/support/shared_contexts/navbar_structure_context.rb
index 33d31f4c711..e3877222a72 100644
--- a/spec/support/shared_contexts/navbar_structure_context.rb
+++ b/spec/support/shared_contexts/navbar_structure_context.rb
@@ -190,7 +190,8 @@ RSpec.shared_context 'group navbar structure' do
     [
       _('List'),
       _('Board'),
-      _('Milestones')
+      _('Milestones'),
+      (_('Iterations') if Gitlab.ee?)
     ]
   end
 
diff --git a/spec/support/shared_examples/requests/api/pypi_packages_shared_examples.rb b/spec/support/shared_examples/requests/api/pypi_packages_shared_examples.rb
index 06c51add438..aff086d1ba3 100644
--- a/spec/support/shared_examples/requests/api/pypi_packages_shared_examples.rb
+++ b/spec/support/shared_examples/requests/api/pypi_packages_shared_examples.rb
@@ -346,7 +346,8 @@ RSpec.shared_examples 'a pypi user namespace endpoint' do
   end
 
   with_them do
-    let_it_be_with_reload(:group) { create(:namespace) }
+    # only groups are supported, so this "group" is actually the wrong namespace type
+    let_it_be_with_reload(:group) { create(:user_namespace) }
     let(:headers) { user_role == :anonymous ? {} : basic_auth_header(user.username, personal_access_token.token) }
 
     before do