From 8a0a54ab92c509c6b480059a5f2730869c99d454 Mon Sep 17 00:00:00 2001
From: GitLab Bot <gitlab-bot@gitlab.com>
Date: Mon, 4 Oct 2021 18:12:46 +0000
Subject: [PATCH] Add latest changes from gitlab-org/gitlab@master

---
 .gitlab/ci/frontend.gitlab-ci.yml             |  28 +--
 .gitlab/ci/rules.gitlab-ci.yml                |  76 ++++++-
 .gitlab/ci/test-metadata.gitlab-ci.yml        |   3 +-
 .../components/environment_delete.vue         |  28 +--
 .../components/environment_external_url.vue   |  15 +-
 .../components/environment_item.vue           |  98 +++++----
 .../components/environment_monitoring.vue     |  26 +--
 .../components/environment_pin.vue            |  16 +-
 .../components/environment_rollback.vue       |  18 +-
 .../components/environment_stop.vue           |  19 +-
 .../environment_terminal_button.vue           |  26 +--
 .../package_registry/components/list/app.vue  |  87 +++++---
 .../components/list/package_search.vue        |  81 +++++--
 .../package_registry/constants.js             |   4 +
 .../fragments/package_data.fragment.graphql   |   4 +
 .../queries/get_packages.query.graphql        |  27 +++
 .../package_registry/pages/list.js            |   5 +
 .../shared/constants.js                       |   1 +
 .../concerns/issue_resolver_arguments.rb      |   4 +
 app/helpers/packages_helper.rb                |   1 +
 app/models/concerns/enums/ci/commit_status.rb |   1 +
 app/models/concerns/routable.rb               |   3 +-
 app/models/namespace.rb                       |   2 +-
 app/models/project.rb                         |  12 +-
 app/models/upload.rb                          |  10 +
 app/presenters/commit_status_presenter.rb     |  21 +-
 app/services/groups/transfer_service.rb       |   4 +
 .../surface_environment_creation_failure.yml  |   8 +
 ..._environment_creation_failure_override.yml |   8 +
 ..._templates_implicit_jobs_build_monthly.yml |  25 +++
 ...es_implicit_jobs_deploy_latest_monthly.yml |  25 +++
 ...templates_implicit_jobs_deploy_monthly.yml |  25 +++
 ...i_templates_implicit_jobs_build_weekly.yml |  25 +++
 ...tes_implicit_jobs_deploy_latest_weekly.yml |  25 +++
 ..._templates_implicit_jobs_deploy_weekly.yml |  25 +++
 doc/api/graphql/reference/index.md            |   4 +
 .../img/environments_available_14_3.png       | Bin 0 -> 13666 bytes
 doc/ci/environments/img/environments_list.png | Bin 17379 -> 0 bytes
 .../img/environments_list_v14_3.png           | Bin 0 -> 14885 bytes
 ...nments_terminal_button_on_index_v13_10.png | Bin 12536 -> 0 bytes
 ...onments_terminal_button_on_index_v14_3.png | Bin 0 -> 14134 bytes
 doc/ci/environments/index.md                  |  44 +++-
 doc/development/pipelines.md                  |   8 +-
 .../metrics/dashboards/panel_types.md         |   2 -
 .../metrics/dashboards/variables.md           |   6 +-
 doc/operations/metrics/dashboards/yaml.md     |  14 +-
 lib/gitlab/ci/pipeline/seed/build.rb          |  11 +-
 lib/gitlab/ci/status/build/failed.rb          |   3 +-
 .../database/load_balancing/load_balancer.rb  |  20 ++
 .../ci_template_unique_counter.rb             |  28 +--
 .../known_events/ci_templates.yml             |  50 +----
 lib/tasks/gitlab/usage_data.rake              |  26 ++-
 locale/gitlab.pot                             |   6 +
 scripts/rspec_helpers.sh                      |  12 +-
 .../namespaces/project_namespaces.rb          |   3 +-
 .../environments/environments_spec.rb         |   5 +-
 .../environments/environment_delete_spec.js   |  13 +-
 .../environment_monitoring_spec.js            |  22 +-
 .../environments/environment_pin_spec.js      |  10 +-
 .../environments/environment_rollback_spec.js |  14 +-
 .../environment_terminal_button_spec.js       |  19 +-
 .../list/__snapshots__/app_spec.js.snap       |   6 +-
 .../components/list/app_spec.js               | 125 +++++++++--
 .../components/list/packages_search_spec.js   | 197 +++++++++++-------
 .../package_registry/mock_data.js             |  24 +++
 .../graphql/resolvers/issues_resolver_spec.rb |  97 ++++++++-
 spec/helpers/packages_helper_spec.rb          |  30 +++
 .../lib/gitlab/ci/pipeline/seed/build_spec.rb |  31 ++-
 .../load_balancing/load_balancer_spec.rb      |  14 ++
 .../ci_template_unique_counter_spec.rb        | 123 ++++-------
 spec/models/upload_spec.rb                    |  24 +++
 .../commit_status_presenter_spec.rb           |  19 ++
 .../requests/api/graphql/group/issues_spec.rb | 123 +++++++++++
 .../api/graphql/project/issues_spec.rb        |  57 ++++-
 spec/services/groups/transfer_service_spec.rb |  65 +++++-
 .../projects/transfer_service_spec.rb         |  58 ++++++
 spec/spec_helper.rb                           |   4 +
 spec/tooling/quality/test_level_spec.rb       |  18 +-
 tooling/quality/test_level.rb                 |  24 ++-
 79 files changed, 1584 insertions(+), 561 deletions(-)
 create mode 100644 app/assets/javascripts/packages_and_registries/package_registry/graphql/fragments/package_data.fragment.graphql
 create mode 100644 app/assets/javascripts/packages_and_registries/package_registry/graphql/queries/get_packages.query.graphql
 create mode 100644 config/feature_flags/development/surface_environment_creation_failure.yml
 create mode 100644 config/feature_flags/development/surface_environment_creation_failure_override.yml
 create mode 100644 config/metrics/counts_28d/20210929102434_p_ci_templates_implicit_jobs_build_monthly.yml
 create mode 100644 config/metrics/counts_28d/20210929102736_p_ci_templates_implicit_jobs_deploy_latest_monthly.yml
 create mode 100644 config/metrics/counts_28d/20210929103010_p_ci_templates_implicit_jobs_deploy_monthly.yml
 create mode 100644 config/metrics/counts_7d/20210929102429_p_ci_templates_implicit_jobs_build_weekly.yml
 create mode 100644 config/metrics/counts_7d/20210929102731_p_ci_templates_implicit_jobs_deploy_latest_weekly.yml
 create mode 100644 config/metrics/counts_7d/20210929103006_p_ci_templates_implicit_jobs_deploy_weekly.yml
 create mode 100644 doc/ci/environments/img/environments_available_14_3.png
 delete mode 100644 doc/ci/environments/img/environments_list.png
 create mode 100644 doc/ci/environments/img/environments_list_v14_3.png
 delete mode 100644 doc/ci/environments/img/environments_terminal_button_on_index_v13_10.png
 create mode 100644 doc/ci/environments/img/environments_terminal_button_on_index_v14_3.png
 create mode 100644 spec/requests/api/graphql/group/issues_spec.rb

diff --git a/.gitlab/ci/frontend.gitlab-ci.yml b/.gitlab/ci/frontend.gitlab-ci.yml
index 790ee3fe5a0..eba4bf077ba 100644
--- a/.gitlab/ci/frontend.gitlab-ci.yml
+++ b/.gitlab/ci/frontend.gitlab-ci.yml
@@ -130,11 +130,13 @@ update-storybook-yarn-cache:
       - tmp/tests/frontend/
       - knapsack/
 
-rspec frontend_fixture:
+# In gitlab-foss, generates FOSS fixtures. In gitlab, generates FOSS & EE fixtures.
+# That way, we don't need to have two separate jobs.
+rspec-all frontend_fixture:
   extends:
     - .frontend-fixtures-base
     - .frontend:rules:default-frontend-jobs
-  parallel: 2
+  parallel: 5
 
 rspec frontend_fixture as-if-foss:
   extends:
@@ -142,12 +144,6 @@ rspec frontend_fixture as-if-foss:
     - .frontend:rules:default-frontend-jobs-as-if-foss
     - .as-if-foss
 
-rspec-ee frontend_fixture:
-  extends:
-    - .frontend-fixtures-base
-    - .frontend:rules:default-frontend-jobs-ee
-  parallel: 3
-
 graphql-schema-dump:
   variables:
     SETUP_DB: "false"
@@ -198,9 +194,7 @@ jest:
     - .frontend:rules:jest
   needs:
     - job: "detect-tests"
-    - job: "rspec frontend_fixture"
-    - job: "rspec-ee frontend_fixture"
-      optional: true
+    - job: "rspec-all frontend_fixture"
   artifacts:
     name: coverage-frontend
     expire_in: 31d
@@ -227,9 +221,7 @@ jest-integration:
   script:
     - run_timed_command "yarn jest:integration --ci"
   needs:
-    - job: "rspec frontend_fixture"
-    - job: "rspec-ee frontend_fixture"
-      optional: true
+    - job: "rspec-all frontend_fixture"
     - job: "graphql-schema-dump"
 
 jest-as-if-foss:
@@ -343,9 +335,7 @@ startup-css-check:
     - .frontend:rules:default-frontend-jobs
   needs:
     - job: "compile-test-assets"
-    - job: "rspec frontend_fixture"
-    - job: "rspec-ee frontend_fixture"
-      optional: true
+    - job: "rspec-all frontend_fixture"
 
 startup-css-check as-if-foss:
   extends:
@@ -369,9 +359,7 @@ compile-storybook:
     - .compile-storybook-base
     - .frontend:rules:default-frontend-jobs
   needs:
-    - job: "rspec frontend_fixture"
-    - job: "rspec-ee frontend_fixture"
-      optional: true
+    - job: "rspec-all frontend_fixture"
     - job: "graphql-schema-dump"
   artifacts:
     name: storybook
diff --git a/.gitlab/ci/rules.gitlab-ci.yml b/.gitlab/ci/rules.gitlab-ci.yml
index 25e685e15a1..9d017ad0bd0 100644
--- a/.gitlab/ci/rules.gitlab-ci.yml
+++ b/.gitlab/ci/rules.gitlab-ci.yml
@@ -354,6 +354,10 @@
   - "danger/**/*"
   - "tooling/danger/**/*"
 
+.core-backend-patterns: &core-backend-patterns
+  - "{,jh/}Gemfile{,.lock}"
+  - "{,ee/,jh/}config/**/*.rb"
+
 .core-frontend-patterns: &core-frontend-patterns
   - "{package.json,yarn.lock}"
   - "babel.config.js"
@@ -495,13 +499,6 @@
     - <<: *if-default-refs
       changes: *code-backstage-patterns
 
-.frontend:rules:default-frontend-jobs-ee:
-  rules:
-    - <<: *if-not-ee
-      when: never
-    - <<: *if-default-refs
-      changes: *code-backstage-patterns
-
 .frontend:rules:default-frontend-jobs-as-if-foss:
   rules:
     - <<: *if-not-ee
@@ -657,6 +654,8 @@
 .rails:rules:ee-and-foss-migration:
   rules:
     - <<: *if-merge-request-labels-run-all-rspec
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
     - <<: *if-merge-request
       changes: *ci-patterns
     - <<: *if-merge-request
@@ -675,6 +674,9 @@
       when: never
     - <<: *if-merge-request-labels-run-all-rspec
       when: never
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
+      when: never
     - <<: *if-merge-request
       changes: *ci-patterns
       when: never
@@ -699,6 +701,8 @@
 .rails:rules:ee-and-foss-unit:
   rules:
     - <<: *if-merge-request-labels-run-all-rspec
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
     - <<: *if-merge-request
       changes: *ci-patterns
     - <<: *if-automated-merge-request
@@ -715,6 +719,9 @@
       when: never
     - <<: *if-merge-request-labels-run-all-rspec
       when: never
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
+      when: never
     - <<: *if-merge-request
       changes: *ci-patterns
       when: never
@@ -724,6 +731,8 @@
 .rails:rules:ee-and-foss-integration:
   rules:
     - <<: *if-merge-request-labels-run-all-rspec
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
     - <<: *if-merge-request
       changes: *ci-patterns
     - <<: *if-automated-merge-request
@@ -740,6 +749,9 @@
       when: never
     - <<: *if-merge-request-labels-run-all-rspec
       when: never
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
+      when: never
     - <<: *if-merge-request
       changes: *ci-patterns
       when: never
@@ -749,6 +761,8 @@
 .rails:rules:ee-and-foss-system:
   rules:
     - <<: *if-merge-request-labels-run-all-rspec
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
     - <<: *if-merge-request
       changes: *ci-patterns
     - <<: *if-automated-merge-request
@@ -765,6 +779,9 @@
       when: never
     - <<: *if-merge-request-labels-run-all-rspec
       when: never
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
+      when: never
     - <<: *if-merge-request
       changes: *ci-patterns
       when: never
@@ -774,6 +791,8 @@
 .rails:rules:ee-and-foss-fast_spec_helper:
   rules:
     - <<: *if-merge-request-labels-run-all-rspec
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
     - <<: *if-merge-request
       changes: *ci-patterns
     - <<: *if-automated-merge-request
@@ -790,6 +809,9 @@
       when: never
     - <<: *if-merge-request-labels-run-all-rspec
       when: never
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
+      when: never
     - <<: *if-merge-request
       changes: *ci-patterns
       when: never
@@ -806,6 +828,8 @@
     - <<: *if-not-ee
       when: never
     - <<: *if-merge-request-labels-run-all-rspec
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
     - <<: *if-merge-request
       changes: *ci-patterns
     - <<: *if-merge-request
@@ -826,6 +850,9 @@
       when: never
     - <<: *if-merge-request-labels-run-all-rspec
       when: never
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
+      when: never
     - <<: *if-merge-request
       changes: *ci-patterns
       when: never
@@ -838,6 +865,8 @@
     - <<: *if-not-ee
       when: never
     - <<: *if-merge-request-labels-run-all-rspec
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
     - <<: *if-merge-request
       changes: *ci-patterns
     - <<: *if-automated-merge-request
@@ -856,6 +885,9 @@
       when: never
     - <<: *if-merge-request-labels-run-all-rspec
       when: never
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
+      when: never
     - <<: *if-merge-request
       changes: *ci-patterns
       when: never
@@ -867,6 +899,8 @@
     - <<: *if-not-ee
       when: never
     - <<: *if-merge-request-labels-run-all-rspec
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
     - <<: *if-merge-request
       changes: *ci-patterns
     - <<: *if-automated-merge-request
@@ -885,6 +919,9 @@
       when: never
     - <<: *if-merge-request-labels-run-all-rspec
       when: never
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
+      when: never
     - <<: *if-merge-request
       changes: *ci-patterns
       when: never
@@ -896,6 +933,8 @@
     - <<: *if-not-ee
       when: never
     - <<: *if-merge-request-labels-run-all-rspec
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
     - <<: *if-merge-request
       changes: *ci-patterns
     - <<: *if-automated-merge-request
@@ -914,6 +953,9 @@
       when: never
     - <<: *if-merge-request-labels-run-all-rspec
       when: never
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
+      when: never
     - <<: *if-merge-request
       changes: *ci-patterns
       when: never
@@ -925,6 +967,8 @@
     - <<: *if-not-ee
       when: never
     - <<: *if-merge-request-labels-run-all-rspec
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
     - <<: *if-merge-request
       changes: *ci-patterns
     - <<: *if-security-merge-request
@@ -944,6 +988,9 @@
       when: never
     - <<: *if-automated-merge-request
       when: never
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
+      when: never
     - <<: *if-merge-request
       changes: *ci-patterns
       when: never
@@ -959,6 +1006,8 @@
     - <<: *if-not-ee
       when: never
     - <<: *if-merge-request-labels-run-all-rspec
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
     - <<: *if-merge-request
       changes: *ci-patterns
     - <<: *if-automated-merge-request
@@ -978,6 +1027,9 @@
       when: never
     - <<: *if-automated-merge-request
       when: never
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
+      when: never
     - <<: *if-merge-request
       changes: *ci-patterns
       when: never
@@ -991,6 +1043,8 @@
     - <<: *if-not-ee
       when: never
     - <<: *if-merge-request-labels-run-all-rspec
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
     - <<: *if-merge-request
       changes: *ci-patterns
     - <<: *if-automated-merge-request
@@ -1010,6 +1064,9 @@
       when: never
     - <<: *if-automated-merge-request
       when: never
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
+      when: never
     - <<: *if-merge-request
       changes: *ci-patterns
       when: never
@@ -1023,6 +1080,8 @@
     - <<: *if-not-ee
       when: never
     - <<: *if-merge-request-labels-run-all-rspec
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
     - <<: *if-merge-request
       changes: *ci-patterns
     - <<: *if-automated-merge-request
@@ -1042,6 +1101,9 @@
       when: never
     - <<: *if-automated-merge-request
       when: never
+    - <<: *if-merge-request
+      changes: *core-backend-patterns
+      when: never
     - <<: *if-merge-request
       changes: *ci-patterns
       when: never
diff --git a/.gitlab/ci/test-metadata.gitlab-ci.yml b/.gitlab/ci/test-metadata.gitlab-ci.yml
index ac719977975..2d96fb6d4b0 100644
--- a/.gitlab/ci/test-metadata.gitlab-ci.yml
+++ b/.gitlab/ci/test-metadata.gitlab-ci.yml
@@ -29,8 +29,7 @@ update-tests-metadata:
     - retrieve-tests-metadata
     - setup-test-env
     - rspec migration pg12
-    - rspec frontend_fixture
-    - rspec-ee frontend_fixture
+    - rspec-all frontend_fixture
     - rspec unit pg12
     - rspec integration pg12
     - rspec system pg12
diff --git a/app/assets/javascripts/environments/components/environment_delete.vue b/app/assets/javascripts/environments/components/environment_delete.vue
index 4b7917b4572..8609503e486 100644
--- a/app/assets/javascripts/environments/components/environment_delete.vue
+++ b/app/assets/javascripts/environments/components/environment_delete.vue
@@ -4,17 +4,15 @@
  * Used in the environments table.
  */
 
-import { GlTooltipDirective, GlButton, GlModalDirective } from '@gitlab/ui';
-import { BV_HIDE_TOOLTIP } from '~/lib/utils/constants';
+import { GlDropdownItem, GlModalDirective } from '@gitlab/ui';
 import { s__ } from '~/locale';
 import eventHub from '../event_hub';
 
 export default {
   components: {
-    GlButton,
+    GlDropdownItem,
   },
   directives: {
-    GlTooltip: GlTooltipDirective,
     GlModalDirective,
   },
   props: {
@@ -28,10 +26,8 @@ export default {
       isLoading: false,
     };
   },
-  computed: {
-    title() {
-      return s__('Environments|Delete environment');
-    },
+  i18n: {
+    title: s__('Environments|Delete environment'),
   },
   mounted() {
     eventHub.$on('deleteEnvironment', this.onDeleteEnvironment);
@@ -41,7 +37,6 @@ export default {
   },
   methods: {
     onClick() {
-      this.$root.$emit(BV_HIDE_TOOLTIP, this.$options.deleteEnvironmentTooltipId);
       eventHub.$emit('requestDeleteEnvironment', this.environment);
     },
     onDeleteEnvironment(environment) {
@@ -50,20 +45,15 @@ export default {
       }
     },
   },
-  deleteEnvironmentTooltipId: 'delete-environment-button-tooltip',
 };
 </script>
 <template>
-  <gl-button
-    v-gl-tooltip="{ id: $options.deleteEnvironmentTooltipId }"
-    v-gl-modal-directive="'delete-environment-modal'"
+  <gl-dropdown-item
+    v-gl-modal-directive.delete-environment-modal
     :loading="isLoading"
-    :title="title"
-    :aria-label="title"
-    class="gl-display-none gl-md-display-block"
     variant="danger"
-    category="primary"
-    icon="remove"
     @click="onClick"
-  />
+  >
+    {{ $options.i18n.title }}
+  </gl-dropdown-item>
 </template>
diff --git a/app/assets/javascripts/environments/components/environment_external_url.vue b/app/assets/javascripts/environments/components/environment_external_url.vue
index 793f7bf0681..b8def676e7d 100644
--- a/app/assets/javascripts/environments/components/environment_external_url.vue
+++ b/app/assets/javascripts/environments/components/environment_external_url.vue
@@ -18,22 +18,23 @@ export default {
       required: true,
     },
   },
-  computed: {
-    title() {
-      return s__('Environments|Open live environment');
-    },
+  i18n: {
+    title: s__('Environments|Open live environment'),
+    open: s__('Environments|Open'),
   },
 };
 </script>
 <template>
   <gl-button
     v-gl-tooltip
-    :title="title"
-    :aria-label="title"
+    :title="$options.i18n.title"
+    :aria-label="$options.i18n.title"
     :href="externalUrl"
     class="external-url"
     target="_blank"
     icon="external-link"
     rel="noopener noreferrer nofollow"
-  />
+  >
+    {{ $options.i18n.open }}
+  </gl-button>
 </template>
diff --git a/app/assets/javascripts/environments/components/environment_item.vue b/app/assets/javascripts/environments/components/environment_item.vue
index d12863ee742..db01d455b2b 100644
--- a/app/assets/javascripts/environments/components/environment_item.vue
+++ b/app/assets/javascripts/environments/components/environment_item.vue
@@ -1,5 +1,5 @@
 <script>
-import { GlTooltipDirective, GlIcon, GlLink, GlSprintf } from '@gitlab/ui';
+import { GlDropdown, GlTooltipDirective, GlIcon, GlLink, GlSprintf } from '@gitlab/ui';
 import { isEmpty } from 'lodash';
 import { convertObjectPropsToCamelCase } from '~/lib/utils/common_utils';
 import { __, s__, sprintf } from '~/locale';
@@ -29,6 +29,7 @@ export default {
     ActionsComponent,
     CommitComponent,
     ExternalUrlComponent,
+    GlDropdown,
     GlIcon,
     GlLink,
     GlSprintf,
@@ -521,6 +522,10 @@ export default {
       return this.model.metrics_path || '';
     },
 
+    terminalPath() {
+      return this.model?.terminal_path ?? '';
+    },
+
     autoStopUrl() {
       return this.model.cancel_auto_stop_path || '';
     },
@@ -549,6 +554,15 @@ export default {
     tableNameSpacingClass() {
       return this.isFolder ? 'section-100' : this.tableData.name.spacing;
     },
+    hasExtraActions() {
+      return Boolean(
+        this.canRetry ||
+          this.canShowAutoStopDate ||
+          this.monitoringUrl ||
+          this.terminalPath ||
+          this.canDeleteEnvironment,
+      );
+    },
   },
 
   methods: {
@@ -776,13 +790,6 @@ export default {
       role="gridcell"
     >
       <div class="btn-group table-action-buttons" role="group">
-        <pin-component
-          v-if="canShowAutoStopDate"
-          :auto-stop-url="autoStopUrl"
-          data-track-action="click_button"
-          data-track-label="environment_pin"
-        />
-
         <external-url-component
           v-if="externalURL"
           :external-url="externalURL"
@@ -790,13 +797,6 @@ export default {
           data-track-label="environment_url"
         />
 
-        <monitoring-button-component
-          v-if="monitoringUrl"
-          :monitoring-url="monitoringUrl"
-          data-track-action="click_button"
-          data-track-label="environment_monitoring"
-        />
-
         <actions-component
           v-if="actions.length > 0"
           :actions="actions"
@@ -804,35 +804,59 @@ export default {
           data-track-label="environment_actions"
         />
 
-        <terminal-button-component
-          v-if="model && model.terminal_path"
-          :terminal-path="model.terminal_path"
-          data-track-action="click_button"
-          data-track-label="environment_terminal"
-        />
-
-        <rollback-component
-          v-if="canRetry"
-          :environment="model"
-          :is-last-deployment="isLastDeployment"
-          :retry-url="retryUrl"
-          data-track-action="click_button"
-          data-track-label="environment_rollback"
-        />
-
         <stop-component
           v-if="canStopEnvironment"
           :environment="model"
+          class="gl-z-index-2"
           data-track-action="click_button"
           data-track-label="environment_stop"
         />
 
-        <delete-component
-          v-if="canDeleteEnvironment"
-          :environment="model"
-          data-track-action="click_button"
-          data-track-label="environment_delete"
-        />
+        <gl-dropdown
+          v-if="hasExtraActions"
+          icon="ellipsis_v"
+          text-sr-only
+          :text="__('More actions')"
+          category="secondary"
+          no-caret
+        >
+          <rollback-component
+            v-if="canRetry"
+            :environment="model"
+            :is-last-deployment="isLastDeployment"
+            :retry-url="retryUrl"
+            data-track-action="click_button"
+            data-track-label="environment_rollback"
+          />
+
+          <pin-component
+            v-if="canShowAutoStopDate"
+            :auto-stop-url="autoStopUrl"
+            data-track-action="click_button"
+            data-track-label="environment_pin"
+          />
+
+          <monitoring-button-component
+            v-if="monitoringUrl"
+            :monitoring-url="monitoringUrl"
+            data-track-action="click_button"
+            data-track-label="environment_monitoring"
+          />
+
+          <terminal-button-component
+            v-if="terminalPath"
+            :terminal-path="terminalPath"
+            data-track-action="click_button"
+            data-track-label="environment_terminal"
+          />
+
+          <delete-component
+            v-if="canDeleteEnvironment"
+            :environment="model"
+            data-track-action="click_button"
+            data-track-label="environment_delete"
+          />
+        </gl-dropdown>
       </div>
     </div>
   </div>
diff --git a/app/assets/javascripts/environments/components/environment_monitoring.vue b/app/assets/javascripts/environments/components/environment_monitoring.vue
index 7f70433776d..06c7f10223a 100644
--- a/app/assets/javascripts/environments/components/environment_monitoring.vue
+++ b/app/assets/javascripts/environments/components/environment_monitoring.vue
@@ -1,15 +1,12 @@
 <script>
-import { GlButton, GlTooltipDirective } from '@gitlab/ui';
+import { GlDropdownItem } from '@gitlab/ui';
 import { __ } from '~/locale';
 /**
  * Renders the Monitoring (Metrics) link in environments table.
  */
 export default {
   components: {
-    GlButton,
-  },
-  directives: {
-    GlTooltip: GlTooltipDirective,
+    GlDropdownItem,
   },
   props: {
     monitoringUrl: {
@@ -17,22 +14,11 @@ export default {
       required: true,
     },
   },
-  computed: {
-    title() {
-      return __('Monitoring');
-    },
-  },
+  title: __('Monitoring'),
 };
 </script>
 <template>
-  <gl-button
-    v-gl-tooltip
-    :href="monitoringUrl"
-    :title="title"
-    :aria-label="title"
-    class="monitoring-url gl-display-none gl-sm-display-none gl-md-display-block"
-    icon="chart"
-    rel="noopener noreferrer nofollow"
-    variant="default"
-  />
+  <gl-dropdown-item :href="monitoringUrl" rel="noopener noreferrer nofollow" target="_blank">
+    {{ $options.title }}
+  </gl-dropdown-item>
 </template>
diff --git a/app/assets/javascripts/environments/components/environment_pin.vue b/app/assets/javascripts/environments/components/environment_pin.vue
index 52ac7725bde..0b753d53ee3 100644
--- a/app/assets/javascripts/environments/components/environment_pin.vue
+++ b/app/assets/javascripts/environments/components/environment_pin.vue
@@ -3,17 +3,13 @@
  * Renders a prevent auto-stop button.
  * Used in environments table.
  */
-import { GlButton, GlTooltipDirective, GlIcon } from '@gitlab/ui';
+import { GlDropdownItem } from '@gitlab/ui';
 import { __ } from '~/locale';
 import eventHub from '../event_hub';
 
 export default {
   components: {
-    GlIcon,
-    GlButton,
-  },
-  directives: {
-    GlTooltip: GlTooltipDirective,
+    GlDropdownItem,
   },
   props: {
     autoStopUrl: {
@@ -26,11 +22,11 @@ export default {
       eventHub.$emit('cancelAutoStop', this.autoStopUrl);
     },
   },
-  title: __('Prevent environment from auto-stopping'),
+  title: __('Prevent auto-stopping'),
 };
 </script>
 <template>
-  <gl-button v-gl-tooltip :title="$options.title" :aria-label="$options.title" @click="onPinClick">
-    <gl-icon name="thumbtack" />
-  </gl-button>
+  <gl-dropdown-item @click="onPinClick">
+    {{ $options.title }}
+  </gl-dropdown-item>
 </template>
diff --git a/app/assets/javascripts/environments/components/environment_rollback.vue b/app/assets/javascripts/environments/components/environment_rollback.vue
index c0b4e96cea2..00497b3c683 100644
--- a/app/assets/javascripts/environments/components/environment_rollback.vue
+++ b/app/assets/javascripts/environments/components/environment_rollback.vue
@@ -5,16 +5,15 @@
  *
  * Makes a post request when the button is clicked.
  */
-import { GlTooltipDirective, GlModalDirective, GlButton } from '@gitlab/ui';
+import { GlModalDirective, GlDropdownItem } from '@gitlab/ui';
 import { s__ } from '~/locale';
 import eventHub from '../event_hub';
 
 export default {
   components: {
-    GlButton,
+    GlDropdownItem,
   },
   directives: {
-    GlTooltip: GlTooltipDirective,
     GlModal: GlModalDirective,
   },
   props: {
@@ -65,14 +64,7 @@ export default {
 };
 </script>
 <template>
-  <gl-button
-    v-gl-tooltip
-    v-gl-modal.confirm-rollback-modal
-    class="gl-display-none gl-md-display-block text-secondary"
-    :loading="isLoading"
-    :title="title"
-    :aria-label="title"
-    :icon="isLastDeployment ? 'repeat' : 'redo'"
-    @click="onClick"
-  />
+  <gl-dropdown-item v-gl-modal.confirm-rollback-modal @click="onClick">
+    {{ title }}
+  </gl-dropdown-item>
 </template>
diff --git a/app/assets/javascripts/environments/components/environment_stop.vue b/app/assets/javascripts/environments/components/environment_stop.vue
index dceaf3cacf1..0d4a1e76eb8 100644
--- a/app/assets/javascripts/environments/components/environment_stop.vue
+++ b/app/assets/javascripts/environments/components/environment_stop.vue
@@ -23,16 +23,15 @@ export default {
       required: true,
     },
   },
+  i18n: {
+    title: s__('Environments|Stop environment'),
+    stop: s__('Environments|Stop'),
+  },
   data() {
     return {
       isLoading: false,
     };
   },
-  computed: {
-    title() {
-      return s__('Environments|Stop environment');
-    },
-  },
   mounted() {
     eventHub.$on('stopEnvironment', this.onStopEnvironment);
   },
@@ -58,11 +57,13 @@ export default {
     v-gl-tooltip="{ id: $options.stopEnvironmentTooltipId }"
     v-gl-modal-directive="'stop-environment-modal'"
     :loading="isLoading"
-    :title="title"
-    :aria-label="title"
+    :title="$options.i18n.title"
+    :aria-label="$options.i18n.title"
     icon="stop"
-    category="primary"
+    category="secondary"
     variant="danger"
     @click="onClick"
-  />
+  >
+    {{ $options.i18n.stop }}
+  </gl-button>
 </template>
diff --git a/app/assets/javascripts/environments/components/environment_terminal_button.vue b/app/assets/javascripts/environments/components/environment_terminal_button.vue
index 4750b8ef01b..0df07f0457f 100644
--- a/app/assets/javascripts/environments/components/environment_terminal_button.vue
+++ b/app/assets/javascripts/environments/components/environment_terminal_button.vue
@@ -3,15 +3,12 @@
  * Renders a terminal button to open a web terminal.
  * Used in environments table.
  */
-import { GlTooltipDirective, GlIcon } from '@gitlab/ui';
+import { GlDropdownItem } from '@gitlab/ui';
 import { __ } from '~/locale';
 
 export default {
   components: {
-    GlIcon,
-  },
-  directives: {
-    GlTooltip: GlTooltipDirective,
+    GlDropdownItem,
   },
   props: {
     terminalPath: {
@@ -25,22 +22,11 @@ export default {
       default: false,
     },
   },
-  computed: {
-    title() {
-      return __('Terminal');
-    },
-  },
+  title: __('Terminal'),
 };
 </script>
 <template>
-  <a
-    v-gl-tooltip
-    :title="title"
-    :aria-label="title"
-    :href="terminalPath"
-    :class="{ disabled: disabled }"
-    class="btn terminal-button d-none d-md-block text-secondary"
-  >
-    <gl-icon name="terminal" />
-  </a>
+  <gl-dropdown-item :href="terminalPath" :disabled="disabled">
+    {{ $options.title }}
+  </gl-dropdown-item>
 </template>
diff --git a/app/assets/javascripts/packages_and_registries/package_registry/components/list/app.vue b/app/assets/javascripts/packages_and_registries/package_registry/components/list/app.vue
index 1d0d92d89d5..08481ac5655 100644
--- a/app/assets/javascripts/packages_and_registries/package_registry/components/list/app.vue
+++ b/app/assets/javascripts/packages_and_registries/package_registry/components/list/app.vue
@@ -10,10 +10,14 @@ import { historyReplaceState } from '~/lib/utils/common_utils';
 import { s__ } from '~/locale';
 import { DELETE_PACKAGE_SUCCESS_MESSAGE } from '~/packages/list/constants';
 import { SHOW_DELETE_SUCCESS_ALERT } from '~/packages/shared/constants';
-import { FILTERED_SEARCH_TERM } from '~/packages_and_registries/shared/constants';
-import { getQueryParams, extractFilterAndSorting } from '~/packages_and_registries/shared/utils';
+import getPackagesQuery from '~/packages_and_registries/package_registry/graphql/queries/get_packages.query.graphql';
+import {
+  PROJECT_RESOURCE_TYPE,
+  GROUP_RESOURCE_TYPE,
+  LIST_QUERY_DEBOUNCE_TIME,
+} from '~/packages_and_registries/package_registry/constants';
 import PackageTitle from './package_title.vue';
-// import PackageSearch from './package_search.vue';
+import PackageSearch from './package_search.vue';
 // import PackageList from './packages_list.vue';
 
 export default {
@@ -23,28 +27,53 @@ export default {
     // GlSprintf,
     // PackageList,
     PackageTitle,
-    // PackageSearch,
+    PackageSearch,
   },
-  inject: ['packageHelpUrl', 'emptyListIllustration', 'emptyListHelpUrl'],
+  inject: [
+    'packageHelpUrl',
+    'emptyListIllustration',
+    'emptyListHelpUrl',
+    'isGroupPage',
+    'fullPath',
+  ],
   data() {
     return {
-      filter: [],
-      sorting: {
-        sort: 'desc',
-        orderBy: 'created_at',
-      },
-      selectedType: '',
-      pagination: {},
+      packages: {},
+      sort: '',
+      filters: {},
     };
   },
-  computed: {
-    packagesCount() {
-      return 0;
+  apollo: {
+    packages: {
+      query: getPackagesQuery,
+      variables() {
+        return this.queryVariables;
+      },
+      update(data) {
+        return data[this.graphqlResource].packages;
+      },
+      debounce: LIST_QUERY_DEBOUNCE_TIME,
     },
-    emptySearch() {
-      return (
-        this.filter.filter((f) => f.type !== FILTERED_SEARCH_TERM || f.value?.data).length === 0
-      );
+  },
+  computed: {
+    queryVariables() {
+      return {
+        isGroupPage: this.isGroupPage,
+        fullPath: this.fullPath,
+        sort: this.isGroupPage ? undefined : this.sort,
+        groupSort: this.isGroupPage ? this.sort : undefined,
+        packageName: this.filters?.packageName,
+        packageType: this.filters?.packageType,
+      };
+    },
+    graphqlResource() {
+      return this.isGroupPage ? GROUP_RESOURCE_TYPE : PROJECT_RESOURCE_TYPE;
+    },
+    packagesCount() {
+      return this.packages?.count;
+    },
+    hasFilters() {
+      return this.filters.packageName && this.filters.packageType;
     },
     emptyStateTitle() {
       return this.emptySearch
@@ -53,19 +82,9 @@ export default {
     },
   },
   mounted() {
-    const queryParams = getQueryParams(window.document.location.search);
-    const { sorting, filters } = extractFilterAndSorting(queryParams);
-    this.sorting = { ...sorting };
-    this.filter = [...filters];
     this.checkDeleteAlert();
   },
   methods: {
-    onPageChanged(page) {
-      return this.requestPackagesList({ page });
-    },
-    onPackageDeleteRequest(item) {
-      return this.requestDeletePackage(item);
-    },
     checkDeleteAlert() {
       const urlParams = new URLSearchParams(window.location.search);
       const showAlert = urlParams.get(SHOW_DELETE_SUCCESS_ALERT);
@@ -76,6 +95,10 @@ export default {
         historyReplaceState(cleanUrl);
       }
     },
+    handleSearchUpdate({ sort, filters }) {
+      this.sort = sort;
+      this.filters = { ...filters };
+    },
   },
   i18n: {
     widenFilters: s__('PackageRegistry|To widen your search, change or remove the filters above.'),
@@ -91,13 +114,13 @@ export default {
 <template>
   <div>
     <package-title :help-url="packageHelpUrl" :count="packagesCount" />
-    <!-- <package-search @update="requestPackagesList" />
+    <package-search @update="handleSearchUpdate" />
 
-    <package-list @page:changed="onPageChanged" @package:delete="onPackageDeleteRequest">
+    <!-- <package-list @page:changed="onPageChanged" @package:delete="onPackageDeleteRequest">
       <template #empty-state>
         <gl-empty-state :title="emptyStateTitle" :svg-path="emptyListIllustration">
           <template #description>
-            <gl-sprintf v-if="!emptySearch" :message="$options.i18n.widenFilters" />
+            <gl-sprintf v-if="hasFilters" :message="$options.i18n.widenFilters" />
             <gl-sprintf v-else :message="$options.i18n.noResultsText">
               <template #noPackagesLink="{ content }">
                 <gl-link :href="emptyListHelpUrl" target="_blank">{{ content }}</gl-link>
diff --git a/app/assets/javascripts/packages_and_registries/package_registry/components/list/package_search.vue b/app/assets/javascripts/packages_and_registries/package_registry/components/list/package_search.vue
index 280d292ce0b..836df59ca58 100644
--- a/app/assets/javascripts/packages_and_registries/package_registry/components/list/package_search.vue
+++ b/app/assets/javascripts/packages_and_registries/package_registry/components/list/package_search.vue
@@ -1,10 +1,14 @@
 <script>
-import { mapState, mapActions } from 'vuex';
 import { s__ } from '~/locale';
 import { sortableFields } from '~/packages/list/utils';
 import { OPERATOR_IS_ONLY } from '~/vue_shared/components/filtered_search_bar/constants';
 import RegistrySearch from '~/vue_shared/components/registry/registry_search.vue';
 import UrlSync from '~/vue_shared/components/url_sync.vue';
+import { getQueryParams, extractFilterAndSorting } from '~/packages_and_registries/shared/utils';
+import {
+  FILTERED_SEARCH_TERM,
+  FILTERED_SEARCH_TYPE,
+} from '~/packages_and_registries/shared/constants';
 import PackageTypeToken from './tokens/package_type_token.vue';
 
 export default {
@@ -19,21 +23,71 @@ export default {
     },
   ],
   components: { RegistrySearch, UrlSync },
+  inject: ['isGroupPage'],
+  data() {
+    return {
+      filters: [],
+      sorting: {
+        orderBy: 'name',
+        sort: 'desc',
+      },
+      mountRegistrySearch: false,
+    };
+  },
   computed: {
-    ...mapState({
-      isGroupPage: (state) => state.config.isGroupPage,
-      sorting: (state) => state.sorting,
-      filter: (state) => state.filter,
-    }),
     sortableFields() {
       return sortableFields(this.isGroupPage);
     },
+    parsedSorting() {
+      const cleanOrderBy = this.sorting?.orderBy.replace('_at', '');
+      return `${cleanOrderBy}_${this.sorting?.sort}`.toUpperCase();
+    },
+    parsedFilters() {
+      const parsed = {
+        packageName: '',
+        packageType: undefined,
+      };
+
+      return this.filters.reduce((acc, filter) => {
+        if (filter.type === FILTERED_SEARCH_TYPE && filter.value?.data) {
+          return {
+            ...acc,
+            packageType: filter.value.data.toUpperCase(),
+          };
+        }
+
+        if (filter.type === FILTERED_SEARCH_TERM) {
+          return {
+            ...acc,
+            packageName: `${acc.packageName} ${filter.value.data}`.trim(),
+          };
+        }
+
+        return acc;
+      }, parsed);
+    },
+  },
+  mounted() {
+    const queryParams = getQueryParams(window.document.location.search);
+    const { sorting, filters } = extractFilterAndSorting(queryParams);
+    this.updateSorting(sorting);
+    this.updateFilters(filters);
+    this.mountRegistrySearch = true;
+    this.emitUpdate();
   },
   methods: {
-    ...mapActions(['setSorting', 'setFilter']),
+    updateFilters(newValue) {
+      this.filters = newValue;
+    },
     updateSorting(newValue) {
-      this.setSorting(newValue);
-      this.$emit('update');
+      this.sorting = { ...this.sorting, ...newValue };
+    },
+    updateSortingAndEmitUpdate(newValue) {
+      this.updateSorting(newValue);
+      this.emitUpdate();
+    },
+    emitUpdate() {
+      this.$emit('update', { sort: this.parsedSorting, filters: this.parsedFilters });
     },
   },
 };
@@ -43,13 +97,14 @@ export default {
   <url-sync>
     <template #default="{ updateQuery }">
       <registry-search
-        :filter="filter"
+        v-if="mountRegistrySearch"
+        :filter="filters"
         :sorting="sorting"
         :tokens="$options.tokens"
         :sortable-fields="sortableFields"
-        @sorting:changed="updateSorting"
-        @filter:changed="setFilter"
-        @filter:submit="$emit('update')"
+        @sorting:changed="updateSortingAndEmitUpdate"
+        @filter:changed="updateFilters"
+        @filter:submit="emitUpdate"
         @query:changed="updateQuery"
       />
     </template>
diff --git a/app/assets/javascripts/packages_and_registries/package_registry/constants.js b/app/assets/javascripts/packages_and_registries/package_registry/constants.js
index 38f335d16e2..6a88880fa90 100644
--- a/app/assets/javascripts/packages_and_registries/package_registry/constants.js
+++ b/app/assets/javascripts/packages_and_registries/package_registry/constants.js
@@ -89,3 +89,7 @@ export const YARN_PACKAGE_MANAGER = 'yarn';
 
 export const PROJECT_PACKAGE_ENDPOINT_TYPE = 'project';
 export const INSTANCE_PACKAGE_ENDPOINT_TYPE = 'instance';
+
+export const PROJECT_RESOURCE_TYPE = 'project';
+export const GROUP_RESOURCE_TYPE = 'group';
+export const LIST_QUERY_DEBOUNCE_TIME = 50;
diff --git a/app/assets/javascripts/packages_and_registries/package_registry/graphql/fragments/package_data.fragment.graphql b/app/assets/javascripts/packages_and_registries/package_registry/graphql/fragments/package_data.fragment.graphql
new file mode 100644
index 00000000000..101115c96ff
--- /dev/null
+++ b/app/assets/javascripts/packages_and_registries/package_registry/graphql/fragments/package_data.fragment.graphql
@@ -0,0 +1,4 @@
+fragment PackageData on Package {
+  id
+  name
+}
diff --git a/app/assets/javascripts/packages_and_registries/package_registry/graphql/queries/get_packages.query.graphql b/app/assets/javascripts/packages_and_registries/package_registry/graphql/queries/get_packages.query.graphql
new file mode 100644
index 00000000000..74e6de87866
--- /dev/null
+++ b/app/assets/javascripts/packages_and_registries/package_registry/graphql/queries/get_packages.query.graphql
@@ -0,0 +1,27 @@
+#import "~/packages_and_registries/package_registry/graphql/fragments/package_data.fragment.graphql"
+
+query getPackages(
+  $fullPath: ID!
+  $isGroupPage: Boolean!
+  $sort: PackageSort
+  $groupSort: PackageGroupSort
+  $packageName: String
+  $packageType: PackageTypeEnum
+) {
+  project(fullPath: $fullPath) @skip(if: $isGroupPage) {
+    packages(sort: $sort, packageName: $packageName, packageType: $packageType) {
+      count
+      nodes {
+        ...PackageData
+      }
+    }
+  }
+  group(fullPath: $fullPath) @include(if: $isGroupPage) {
+    packages(sort: $groupSort, packageName: $packageName, packageType: $packageType) {
+      count
+      nodes {
+        ...PackageData
+      }
+    }
+  }
+}
diff --git a/app/assets/javascripts/packages_and_registries/package_registry/pages/list.js b/app/assets/javascripts/packages_and_registries/package_registry/pages/list.js
index ba15c12d82a..d797a0a5327 100644
--- a/app/assets/javascripts/packages_and_registries/package_registry/pages/list.js
+++ b/app/assets/javascripts/packages_and_registries/package_registry/pages/list.js
@@ -1,5 +1,6 @@
 import Vue from 'vue';
 import Translate from '~/vue_shared/translate';
+import { apolloProvider } from '~/packages_and_registries/package_registry/graphql/index';
 import PackagesListApp from '../components/list/app.vue';
 
 Vue.use(Translate);
@@ -7,10 +8,14 @@ Vue.use(Translate);
 export default () => {
   const el = document.getElementById('js-vue-packages-list');
 
+  const isGroupPage = el.dataset.pageType === 'groups';
+
   return new Vue({
     el,
+    apolloProvider,
     provide: {
       ...el.dataset,
+      isGroupPage,
     },
     render(createElement) {
       return createElement(PackagesListApp);
diff --git a/app/assets/javascripts/packages_and_registries/shared/constants.js b/app/assets/javascripts/packages_and_registries/shared/constants.js
index 55b5816cc5a..d38a849ade9 100644
--- a/app/assets/javascripts/packages_and_registries/shared/constants.js
+++ b/app/assets/javascripts/packages_and_registries/shared/constants.js
@@ -1 +1,2 @@
 export const FILTERED_SEARCH_TERM = 'filtered-search-term';
+export const FILTERED_SEARCH_TYPE = 'type';
diff --git a/app/graphql/resolvers/concerns/issue_resolver_arguments.rb b/app/graphql/resolvers/concerns/issue_resolver_arguments.rb
index 138dc1d172d..855877110e5 100644
--- a/app/graphql/resolvers/concerns/issue_resolver_arguments.rb
+++ b/app/graphql/resolvers/concerns/issue_resolver_arguments.rb
@@ -60,6 +60,10 @@ module IssueResolverArguments
     argument :my_reaction_emoji, GraphQL::Types::String,
              required: false,
              description: 'Filter by reaction emoji applied by the current user. Wildcard values "NONE" and "ANY" are supported.'
+    argument :confidential,
+             GraphQL::Types::Boolean,
+             required: false,
+             description: 'Filter for confidential issues. If "false", excludes confidential issues. If "true", returns only confidential issues.'
     argument :not, Types::Issues::NegatedIssueFilterInputType,
              description: 'Negated arguments.',
              prepare: ->(negated_args, ctx) { negated_args.to_h },
diff --git a/app/helpers/packages_helper.rb b/app/helpers/packages_helper.rb
index 70d9927cf7f..c69d9eb1326 100644
--- a/app/helpers/packages_helper.rb
+++ b/app/helpers/packages_helper.rb
@@ -41,6 +41,7 @@ module PackagesHelper
   def packages_list_data(type, resource)
     {
       resource_id: resource.id,
+      full_path: resource.full_path,
       page_type: type,
       empty_list_help_url: help_page_path('user/packages/package_registry/index'),
       empty_list_illustration: image_path('illustrations/no-packages.svg'),
diff --git a/app/models/concerns/enums/ci/commit_status.rb b/app/models/concerns/enums/ci/commit_status.rb
index 7f46e44697e..1b4cc14f4a2 100644
--- a/app/models/concerns/enums/ci/commit_status.rb
+++ b/app/models/concerns/enums/ci/commit_status.rb
@@ -27,6 +27,7 @@ module Enums
           no_matching_runner: 18, # not used anymore, but cannot be deleted because of old data
           trace_size_exceeded: 19,
           builds_disabled: 20,
+          environment_creation_failure: 21,
           insufficient_bridge_permissions: 1_001,
           downstream_bridge_project_not_found: 1_002,
           invalid_bridge_trigger: 1_003,
diff --git a/app/models/concerns/routable.rb b/app/models/concerns/routable.rb
index 847abdc1b6d..f382b3624ed 100644
--- a/app/models/concerns/routable.rb
+++ b/app/models/concerns/routable.rb
@@ -41,7 +41,7 @@ module Routable
     has_one :route, as: :source, autosave: true, dependent: :destroy, inverse_of: :source # rubocop:disable Cop/ActiveRecordDependent
     has_many :redirect_routes, as: :source, autosave: true, dependent: :destroy # rubocop:disable Cop/ActiveRecordDependent
 
-    validates :route, presence: true
+    validates :route, presence: true, unless: -> { is_a?(Namespaces::ProjectNamespace) }
 
     scope :with_route, -> { includes(:route) }
 
@@ -185,6 +185,7 @@ module Routable
 
   def prepare_route
     return unless full_path_changed? || full_name_changed?
+    return if is_a?(Namespaces::ProjectNamespace)
 
     route || build_route(source: self)
     route.path = build_full_path
diff --git a/app/models/namespace.rb b/app/models/namespace.rb
index da75aa7b046..32d02cd0712 100644
--- a/app/models/namespace.rb
+++ b/app/models/namespace.rb
@@ -105,7 +105,7 @@ class Namespace < ApplicationRecord
 
   # Legacy Storage specific hooks
 
-  after_update :move_dir, if: :saved_change_to_path_or_parent?
+  after_update :move_dir, if: :saved_change_to_path_or_parent?, unless: -> { is_a?(Namespaces::ProjectNamespace) }
   before_destroy(prepend: true) { prepare_for_destroy }
   after_destroy :rm_dir
   after_commit :expire_child_caches, on: :update, if: -> {
diff --git a/app/models/project.rb b/app/models/project.rb
index 126fcc8d7e6..39ddec223e7 100644
--- a/app/models/project.rb
+++ b/app/models/project.rb
@@ -98,6 +98,7 @@ class Project < ApplicationRecord
   before_validation :mark_remote_mirrors_for_removal, if: -> { RemoteMirror.table_exists? }
 
   before_save :ensure_runners_token
+  before_save :ensure_project_namespace_in_sync
 
   after_save :update_project_statistics, if: :saved_change_to_namespace_id?
 
@@ -146,7 +147,7 @@ class Project < ApplicationRecord
   belongs_to :namespace
   # Sync deletion via DB Trigger to ensure we do not have
   # a project without a project_namespace (or vice-versa)
-  belongs_to :project_namespace, class_name: 'Namespaces::ProjectNamespace', foreign_key: 'project_namespace_id', inverse_of: :project
+  belongs_to :project_namespace, autosave: true, class_name: 'Namespaces::ProjectNamespace', foreign_key: 'project_namespace_id', inverse_of: :project
   alias_method :parent, :namespace
   alias_attribute :parent_id, :namespace_id
 
@@ -2883,6 +2884,15 @@ class Project < ApplicationRecord
   def online_runners_with_tags
     @online_runners_with_tags ||= active_runners.with_tags.online
   end
+
+  def ensure_project_namespace_in_sync
+    if changes.keys & [:name, :path, :namespace_id, :visibility_level] && project_namespace.present?
+      project_namespace.name = name
+      project_namespace.path = path
+      project_namespace.parent = namespace
+      project_namespace.visibility_level = visibility_level
+    end
+  end
 end
 
 Project.prepend_mod_with('Project')
diff --git a/app/models/upload.rb b/app/models/upload.rb
index d16a2d1bd84..c1a3df82457 100644
--- a/app/models/upload.rb
+++ b/app/models/upload.rb
@@ -18,6 +18,8 @@ class Upload < ApplicationRecord
   before_save  :calculate_checksum!, if: :foreground_checksummable?
   after_commit :schedule_checksum,   if: :needs_checksum?
 
+  after_commit :update_project_statistics, on: [:create, :destroy], if: :project?
+
   # as the FileUploader is not mounted, the default CarrierWave ActiveRecord
   # hooks are not executed and the file will not be deleted
   after_destroy :delete_file!, if: -> { uploader_class <= FileUploader }
@@ -161,6 +163,14 @@ class Upload < ApplicationRecord
   def mount_point
     super&.to_sym
   end
+
+  def project?
+    model_type == "Project"
+  end
+
+  def update_project_statistics
+    ProjectCacheWorker.perform_async(model_id, [], [:uploads_size])
+  end
 end
 
 Upload.prepend_mod_with('Upload')
diff --git a/app/presenters/commit_status_presenter.rb b/app/presenters/commit_status_presenter.rb
index 2d524fd611e..7919e501bf0 100644
--- a/app/presenters/commit_status_presenter.rb
+++ b/app/presenters/commit_status_presenter.rb
@@ -28,7 +28,12 @@ class CommitStatusPresenter < Gitlab::View::Presenter::Delegated
     ci_quota_exceeded: 'No more CI minutes available',
     no_matching_runner: 'No matching runner available',
     trace_size_exceeded: 'The job log size limit was reached',
-    builds_disabled: 'The CI/CD is disabled for this project'
+    builds_disabled: 'The CI/CD is disabled for this project',
+    environment_creation_failure: 'This job could not be executed because it would create an environment with an invalid parameter.'
+  }.freeze
+
+  TROUBLESHOOTING_DOC = {
+    environment_creation_failure: { path: 'ci/environments/index', anchor: 'a-deployment-job-failed-with-this-job-could-not-be-executed-because-it-would-create-an-environment-with-an-invalid-parameter-error' }
   }.freeze
 
   private_constant :CALLOUT_FAILURE_MESSAGES
@@ -40,7 +45,19 @@ class CommitStatusPresenter < Gitlab::View::Presenter::Delegated
   end
 
   def callout_failure_message
-    self.class.callout_failure_messages.fetch(failure_reason.to_sym)
+    message = self.class.callout_failure_messages.fetch(failure_reason.to_sym)
+
+    if doc = TROUBLESHOOTING_DOC[failure_reason.to_sym]
+      message += " #{help_page_link(doc[:path], doc[:anchor])}"
+    end
+
+    message
+  end
+
+  private
+
+  def help_page_link(path, anchor)
+    ActionController::Base.helpers.link_to('How do I fix it?', help_page_path(path, anchor: anchor))
   end
 end
 
diff --git a/app/services/groups/transfer_service.rb b/app/services/groups/transfer_service.rb
index 6c223cc11b8..774f81b0a5e 100644
--- a/app/services/groups/transfer_service.rb
+++ b/app/services/groups/transfer_service.rb
@@ -140,6 +140,10 @@ module Groups
       # these records again.
       @updated_project_ids = projects_to_update.pluck(:id)
 
+      Namespaces::ProjectNamespace
+        .where(id: projects_to_update.select(:project_namespace_id))
+        .update_all(visibility_level: @new_parent_group.visibility_level)
+
       projects_to_update
         .update_all(visibility_level: @new_parent_group.visibility_level)
     end
diff --git a/config/feature_flags/development/surface_environment_creation_failure.yml b/config/feature_flags/development/surface_environment_creation_failure.yml
new file mode 100644
index 00000000000..2c312d432ef
--- /dev/null
+++ b/config/feature_flags/development/surface_environment_creation_failure.yml
@@ -0,0 +1,8 @@
+---
+name: surface_environment_creation_failure
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/69537
+rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/340169
+milestone: '14.4'
+type: development
+group: group::release
+default_enabled: false
diff --git a/config/feature_flags/development/surface_environment_creation_failure_override.yml b/config/feature_flags/development/surface_environment_creation_failure_override.yml
new file mode 100644
index 00000000000..566281bcb89
--- /dev/null
+++ b/config/feature_flags/development/surface_environment_creation_failure_override.yml
@@ -0,0 +1,8 @@
+---
+name: surface_environment_creation_failure_override
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/69537
+rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/340169
+milestone: '14.4'
+type: development
+group: group::release
+default_enabled: false
diff --git a/config/metrics/counts_28d/20210929102434_p_ci_templates_implicit_jobs_build_monthly.yml b/config/metrics/counts_28d/20210929102434_p_ci_templates_implicit_jobs_build_monthly.yml
new file mode 100644
index 00000000000..4fa6d3d8843
--- /dev/null
+++ b/config/metrics/counts_28d/20210929102434_p_ci_templates_implicit_jobs_build_monthly.yml
@@ -0,0 +1,25 @@
+---
+key_path: redis_hll_counters.ci_templates.p_ci_templates_implicit_jobs_build_monthly
+description: ''
+product_section: ''
+product_stage: ''
+product_group: ''
+product_category: ''
+value_type: number
+status: active
+milestone: "14.4"
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/71157
+time_frame: 7d
+data_source: redis_hll
+data_category: optional
+instrumentation_class: RedisHLLMetric
+distribution:
+- ce
+- ee
+tier:
+- free
+- premium
+- ultimate
+options:
+  events:
+    - p_ci_templates_implicit_jobs_build
diff --git a/config/metrics/counts_28d/20210929102736_p_ci_templates_implicit_jobs_deploy_latest_monthly.yml b/config/metrics/counts_28d/20210929102736_p_ci_templates_implicit_jobs_deploy_latest_monthly.yml
new file mode 100644
index 00000000000..9d19a6ffa72
--- /dev/null
+++ b/config/metrics/counts_28d/20210929102736_p_ci_templates_implicit_jobs_deploy_latest_monthly.yml
@@ -0,0 +1,25 @@
+---
+key_path: redis_hll_counters.ci_templates.p_ci_templates_implicit_jobs_deploy_latest_monthly
+description: ''
+product_section: ''
+product_stage: ''
+product_group: ''
+product_category: ''
+value_type: number
+status: active
+milestone: "14.4"
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/71157
+time_frame: 7d
+data_source: redis_hll
+data_category: optional
+instrumentation_class: RedisHLLMetric
+distribution:
+- ce
+- ee
+tier:
+- free
+- premium
+- ultimate
+options:
+  events:
+    - p_ci_templates_implicit_jobs_deploy_latest
diff --git a/config/metrics/counts_28d/20210929103010_p_ci_templates_implicit_jobs_deploy_monthly.yml b/config/metrics/counts_28d/20210929103010_p_ci_templates_implicit_jobs_deploy_monthly.yml
new file mode 100644
index 00000000000..5b7b7924c4a
--- /dev/null
+++ b/config/metrics/counts_28d/20210929103010_p_ci_templates_implicit_jobs_deploy_monthly.yml
@@ -0,0 +1,25 @@
+---
+key_path: redis_hll_counters.ci_templates.p_ci_templates_implicit_jobs_deploy_monthly
+description: ''
+product_section: ''
+product_stage: ''
+product_group: ''
+product_category: ''
+value_type: number
+status: active
+milestone: "14.4"
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/71157
+time_frame: 7d
+data_source: redis_hll
+data_category: optional
+instrumentation_class: RedisHLLMetric
+distribution:
+- ce
+- ee
+tier:
+- free
+- premium
+- ultimate
+options:
+  events:
+    - p_ci_templates_implicit_jobs_deploy
diff --git a/config/metrics/counts_7d/20210929102429_p_ci_templates_implicit_jobs_build_weekly.yml b/config/metrics/counts_7d/20210929102429_p_ci_templates_implicit_jobs_build_weekly.yml
new file mode 100644
index 00000000000..f13174a4af6
--- /dev/null
+++ b/config/metrics/counts_7d/20210929102429_p_ci_templates_implicit_jobs_build_weekly.yml
@@ -0,0 +1,25 @@
+---
+key_path: redis_hll_counters.ci_templates.p_ci_templates_implicit_jobs_build_weekly
+description: ''
+product_section: ''
+product_stage: ''
+product_group: ''
+product_category: ''
+value_type: number
+status: active
+milestone: "14.4"
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/71157
+time_frame: 7d
+data_source: redis_hll
+data_category: optional
+instrumentation_class: RedisHLLMetric
+distribution:
+- ce
+- ee
+tier:
+- free
+- premium
+- ultimate
+options:
+  events:
+    - p_ci_templates_implicit_jobs_build
diff --git a/config/metrics/counts_7d/20210929102731_p_ci_templates_implicit_jobs_deploy_latest_weekly.yml b/config/metrics/counts_7d/20210929102731_p_ci_templates_implicit_jobs_deploy_latest_weekly.yml
new file mode 100644
index 00000000000..f4d0ac7ff98
--- /dev/null
+++ b/config/metrics/counts_7d/20210929102731_p_ci_templates_implicit_jobs_deploy_latest_weekly.yml
@@ -0,0 +1,25 @@
+---
+key_path: redis_hll_counters.ci_templates.p_ci_templates_implicit_jobs_deploy_latest_weekly
+description: ''
+product_section: ''
+product_stage: ''
+product_group: ''
+product_category: ''
+value_type: number
+status: active
+milestone: "14.4"
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/71157
+time_frame: 7d
+data_source: redis_hll
+data_category: optional
+instrumentation_class: RedisHLLMetric
+distribution:
+- ce
+- ee
+tier:
+- free
+- premium
+- ultimate
+options:
+  events:
+    - p_ci_templates_implicit_jobs_deploy_latest
diff --git a/config/metrics/counts_7d/20210929103006_p_ci_templates_implicit_jobs_deploy_weekly.yml b/config/metrics/counts_7d/20210929103006_p_ci_templates_implicit_jobs_deploy_weekly.yml
new file mode 100644
index 00000000000..964b57c65be
--- /dev/null
+++ b/config/metrics/counts_7d/20210929103006_p_ci_templates_implicit_jobs_deploy_weekly.yml
@@ -0,0 +1,25 @@
+---
+key_path: redis_hll_counters.ci_templates.p_ci_templates_implicit_jobs_deploy_weekly
+description: ''
+product_section: ''
+product_stage: ''
+product_group: ''
+product_category: ''
+value_type: number
+status: active
+milestone: "14.4"
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/71157
+time_frame: 7d
+data_source: redis_hll
+data_category: optional
+instrumentation_class: RedisHLLMetric
+distribution:
+- ce
+- ee
+tier:
+- free
+- premium
+- ultimate
+options:
+  events:
+    - p_ci_templates_implicit_jobs_deploy
diff --git a/doc/api/graphql/reference/index.md b/doc/api/graphql/reference/index.md
index b9e40acf14d..7be0a27350b 100644
--- a/doc/api/graphql/reference/index.md
+++ b/doc/api/graphql/reference/index.md
@@ -10303,6 +10303,7 @@ four standard [pagination arguments](#connection-pagination-arguments):
 | <a id="groupissuesauthorusername"></a>`authorUsername` | [`String`](#string) | Username of the author of the issue. |
 | <a id="groupissuesclosedafter"></a>`closedAfter` | [`Time`](#time) | Issues closed after this date. |
 | <a id="groupissuesclosedbefore"></a>`closedBefore` | [`Time`](#time) | Issues closed before this date. |
+| <a id="groupissuesconfidential"></a>`confidential` | [`Boolean`](#boolean) | Filter for confidential issues. If "false", excludes confidential issues. If "true", returns only confidential issues. |
 | <a id="groupissuescreatedafter"></a>`createdAfter` | [`Time`](#time) | Issues created after this date. |
 | <a id="groupissuescreatedbefore"></a>`createdBefore` | [`Time`](#time) | Issues created before this date. |
 | <a id="groupissuesepicid"></a>`epicId` | [`String`](#string) | ID of an epic associated with the issues, "none" and "any" values are supported. |
@@ -12738,6 +12739,7 @@ Returns [`Issue`](#issue).
 | <a id="projectissueauthorusername"></a>`authorUsername` | [`String`](#string) | Username of the author of the issue. |
 | <a id="projectissueclosedafter"></a>`closedAfter` | [`Time`](#time) | Issues closed after this date. |
 | <a id="projectissueclosedbefore"></a>`closedBefore` | [`Time`](#time) | Issues closed before this date. |
+| <a id="projectissueconfidential"></a>`confidential` | [`Boolean`](#boolean) | Filter for confidential issues. If "false", excludes confidential issues. If "true", returns only confidential issues. |
 | <a id="projectissuecreatedafter"></a>`createdAfter` | [`Time`](#time) | Issues created after this date. |
 | <a id="projectissuecreatedbefore"></a>`createdBefore` | [`Time`](#time) | Issues created before this date. |
 | <a id="projectissueepicid"></a>`epicId` | [`String`](#string) | ID of an epic associated with the issues, "none" and "any" values are supported. |
@@ -12774,6 +12776,7 @@ Returns [`IssueStatusCountsType`](#issuestatuscountstype).
 | <a id="projectissuestatuscountsauthorusername"></a>`authorUsername` | [`String`](#string) | Username of the author of the issue. |
 | <a id="projectissuestatuscountsclosedafter"></a>`closedAfter` | [`Time`](#time) | Issues closed after this date. |
 | <a id="projectissuestatuscountsclosedbefore"></a>`closedBefore` | [`Time`](#time) | Issues closed before this date. |
+| <a id="projectissuestatuscountsconfidential"></a>`confidential` | [`Boolean`](#boolean) | Filter for confidential issues. If "false", excludes confidential issues. If "true", returns only confidential issues. |
 | <a id="projectissuestatuscountscreatedafter"></a>`createdAfter` | [`Time`](#time) | Issues created after this date. |
 | <a id="projectissuestatuscountscreatedbefore"></a>`createdBefore` | [`Time`](#time) | Issues created before this date. |
 | <a id="projectissuestatuscountsiid"></a>`iid` | [`String`](#string) | IID of the issue. For example, "1". |
@@ -12808,6 +12811,7 @@ four standard [pagination arguments](#connection-pagination-arguments):
 | <a id="projectissuesauthorusername"></a>`authorUsername` | [`String`](#string) | Username of the author of the issue. |
 | <a id="projectissuesclosedafter"></a>`closedAfter` | [`Time`](#time) | Issues closed after this date. |
 | <a id="projectissuesclosedbefore"></a>`closedBefore` | [`Time`](#time) | Issues closed before this date. |
+| <a id="projectissuesconfidential"></a>`confidential` | [`Boolean`](#boolean) | Filter for confidential issues. If "false", excludes confidential issues. If "true", returns only confidential issues. |
 | <a id="projectissuescreatedafter"></a>`createdAfter` | [`Time`](#time) | Issues created after this date. |
 | <a id="projectissuescreatedbefore"></a>`createdBefore` | [`Time`](#time) | Issues created before this date. |
 | <a id="projectissuesepicid"></a>`epicId` | [`String`](#string) | ID of an epic associated with the issues, "none" and "any" values are supported. |
diff --git a/doc/ci/environments/img/environments_available_14_3.png b/doc/ci/environments/img/environments_available_14_3.png
new file mode 100644
index 0000000000000000000000000000000000000000..af9749dc8f0122e189ea3ec694d4eb5d8dbe5b6f
GIT binary patch
literal 13666
zcmbVz1yr2DvL*>30fHpB6WrYg3+@sK3<S5qeXyW`;O_434q>nW!JWZff(-5!V3yo_
z_r3exzCCBp_L<XvcU65=e^uAt-P7|=sH(CIIw}z=0s;cMoUEi80>UfUbGsH9@wqNK
zA{>0ayfPP45__gazkM)5dhWk)R+AA&s2U@AmV7B<`B@9BrKAWjvA1P4GPO50V|BN6
zc$Pvy5ON1RH*L+pMjza5ZS0%@?!uJ+kN`Zl|B~4#Km0=kY%NTwrKI{n!rsa30}m@V
zD?6nK>W2>>gq%!405wVJf5D%7!ju+ZumgaN&CSh?)s2hQ-pQPeLqI@)jh&N?lau9H
zg2max4s7JkV&_ctPbL3bkEEHiiIb%R*wWta!(Y8d#`Z2?VM@xshW?}c^FGboE&tP!
zo%6rkdUlZQFNckTm7VQ>f`KhT{}<R_&Oc%Q@av!Eg#Ic6XgHfWN!Z)kn%RLx)J>es
z%<P;k?7>3+u=HP;|9PMP1gcuPo7redT0SG4pM4VH;N;=^7wo^Y{zs_xzd`x_3-aGM
z|AzeQ13<;e^7%%M{svKmLx}DFp#4i;i0yBL|1IMG9L|4GpT|=KRfz3Bazh05{q}u6
z0s<m}s^VuUI2;}n6tu#G0e^xoEiHjSp!XJ?r>CdS>GZ*6n4O&+1p0LYhu`1d!{N72
z4-fO#@CW$Q;o)It=g;fqYB>A~em@U?ScN~r)YaA5+3a0Fpo;mcKkLm`mscQ=3mpEi
zySrQC0b0F-`+`6>H#ckb-#{S04=!Ux3paLlcJRlGGdMgVBD{X}8e|^hRyMy{=Xkd|
z8)so&wR{J^+_^Zv*xcHXbQxJ}9Nc|`zj^ZpeznkO!4CRbH&f~cva9^Q^ayE%c-OCf
zvFNm^Sb1;N%Wlx%?%^@KeKma!uc|0Z7(BE#GXs{c*9H$>-aH&UJv)7N4Zmw2SX_IA
zll#y42Lv=GIkT<gK&K|ldY79*%t7V_VI8}7_wbm?kzc)i@WTQ4^|d=YTWRyO7py0H
z@?!J^KJWu-!_K~VcbwF^=(yKm2D08cJ?l-dA`RWj8`v{&9fqII9Nb^+j+R=cjTC+D
zTI|Z-?TEDUim}X}TfTzN&(E`eZGu2|I|_rpgFrh=Bb)c<wvpw-Gruu0F+aFK{qp-l
zox2y-cDrxk3kO#Zzc(5h>cs0$t877W2?>Ucdr{G&l@oj2u*bB_Om=pyqhD!FZtOQ(
z{o)bOtP`ktSj%El%<#~Nl}~>2?}x#LxU1>H@$qp{QPIQ2wb`DTGuUkB<>q|8*-p<W
z?BX%q!|d0}am&(WVoohPdro0~;peT|l?jLz2m9~ko7kh#ASU*l2FR~aw(*TM(ZY?c
z?0$}~!xab9=jUteY(W(TqmC(%BWUf!>gnMal$4Y-IneH%=fq@B)5%hsZ%VCaz%V^M
z{m#KnWqMR02$W*Pt`|Mx0&;<t^cJ|VpYQII=54P_lBck<mnHO`*60ouMF%=tytAG7
z)mj|+oQN^~_TzVjF|Hz(omx?iwuLKX?yGEC`H~x@U0ZW2Do*T%0V^iC>|Y#Ln8Ml3
z6B0KchEud$b=b6A6W8J^!mWch!jq%Tv{rnYLF}$tTF)9a;6WIvCZCO-QyoE0QtY$)
z;$eoZ;%6XHf3|5`oHHlkYXd_(FT&(zYZ9q9{gj_#X)2K@+Q6V$9GV8IPiVCmCJl_p
zR@5aw<2WJnSgrmjDgKK*jgy)oi_-)yd6S=Im6Y_-Ldc2g?QWLrt_5z)3~@;GT9bZ^
zpCIn8dX8l{oAenxjSJ%=Ap3v#pFf-Mta!|M{*A7|jn=Zm^xJeOP;L#w-(9K1ww#%O
z+)Yh&L9?7ZS<&mDneRjgTVd~y*t_aCn0+b^9G^udF#oI);WN}ncaXn2`=UCb$)05=
zEt<kFvJVTrM4||pL*!+(4^otQ_bN5&ztz?L1HYu+i{a5ocjOgHYlkYz6j6o1--o_e
ziMbt0lBb5o!jL!3<}cY-!83$HjVe`|UwX1`Y;qCJ_ZCxm6hza`B0SKeI@^HeUa^84
zHVl!ddR9{vn9>H81+a=NIsdF;W1~B<tDI79;gO+F$xBndX3&=1n+=tg%KctujkVRa
zzXp?y0J}#jdJP%d_4#}i$c&aRvMU>k3Tt;hnat8P^G6F4ip+R3QZNV@wxm9`@uk%E
z5!6j53CS^%xfI4IHfy>3ir3`X&Yt@{I<ld8oH*K92TRK}SpF>WY4NSL)c_COQQ!<O
zcn>Qz>I3+x%VP!#jGhx4SxC#Fjk^_}!6xtT3#O(P2C+Q4X}>YZHLtAAn$hOl^@bwO
zohM02^|N@b66@A1^E;Jpq5PqB85tq7EmVch_|{l_l6)a#2EiKzJGuNwtYo_waYTcP
zwXm;*hbcU<QLe<)W<1B6h{K#bvn9puOQ678kxYT{I;QHYqc48sQ4k!co}eRW>q?wk
z@2qT%X0EI#{X#<jVDc~~!{xz8L-JQ<c;tro3XUA|armanW<eywnZr>QcRe#|lkbI;
zKe(O9SS_=>;J5MgWD~#Tn=1B3Diy|+!ZcO_m>LlkYXK;-Nv#C7Jk+n)u1#Re$WdhM
zEGT0NQBbV<th9T|l~lOj_Q#db`r8;nJf?Va>$^WtC)Q@dMv9_UEI-z^<=?}fII98L
z@h8@z*28^L@(_QnK#oj?oHRQGDM6-D9j&Nhg3H&!B0M24BwwY>X#mk<&EzqMFK-tG
z7uF+eER0!ThQbrUbhjt-Cq36Vvs)~@Den#Q*y^HS-lNj&DFfhFxgtn{eF~hn+_w?Q
ze%pVvF8UuPamRLZCr7%$T8qcGfpa-9emMT_+d!Bi{|=eG9-D}W@f^?Q?IMvdl!eH;
zWz=I(`F%Y}Yr#SM+hPSlS~#_tSR8fc5)BI%t6WT!vIvDzz|qtd`3X&Wt;q?wTCK@%
zHNs)X#2FnK9T*C9fs%@9(q`o7vfkB(DMO@r5}e!;{>ThW8LKm3?fCVj!5CP@KT{Bq
zX={G*b5X}$LVI7L!<jf-#56cZ$2GL3SP5iq(*dR1UH{#~B@6}6V&zM4WHwLSA5mBk
zIq`5*PvXQ73k_kny}muiF|0<XELy1erf7|z0F?2Tz#e{OonKF=*m#huo-s|T_C=i~
z$mT&2`^&VtPGsz-gNw0%r!SnOVkKTPX<V6b^rHMR$v=Tm<hP&mQJ}V2%g7woK!W(&
z9`S*7o|APK607e$4@zgS_j#=j;pAvp5iQHSa&fLWGGdC|;_SBaVzxH&Q7YmsT}GDr
z;Ft2FagdQX2(F==xTfO%dy>?$H05l733?i<$$<q^<atKbLV|%kVt94$;sUaRHgEd*
z3NQVTjKbi|3Yts1RunLpyxStk#PQ?g(}f{QLx@%hX6-O2I66_w^G!mXX8Ooj9YWgF
z7sWe*ca`l<UhYt&*SQMPQ1os+MeEt0CXUG45`oE5a0GDZI`FtrAVD+3BtH$K-U5+U
zyoD4!gzgGGt3mNVZzm8%ab(``ymYRigMwJ2`c-bNX-{vTFtPEdRI{<(+gm`2^VJTy
zFCj1KJaDYNKM>~BJC9oiyIr!+-e{Ika@)YD4nejD^kfM0Z57<TBjrOcdeWbF8d7wg
zBC5bM!77rX`^`AM%}RZkBIs82xsh7=Fu<!xXc|nBdQ4ape-I;W_9kzy2QLMxvERu8
zOh2#n=LXLe=fm*oD}8)FuDHJIWkt2l_9X{3_Fe_La+B*rgZaJQ9vwS@4XZd?cvA_!
zXNzZI(5pO+Y$)wk+t=JrDx|7TK-CSe_;hYWkL~wJ5Nf?Y@JSe}s9=IUY%PSU-{bBY
zrqX5`11j95$`vV<3FOrp^o_WMENWKwT8z}ILq*txi>Z(^k8~;U51;|$24L-u-Dr_7
zf;NyIt#<t`wB+wtI2+15E91p*uY0hz>{VD^Imy}6Dc6u0qLyZHL3vSnb^2IQDhBWy
zHTTMDqHHC>tC(7$g0JY_$~P7JxN~9L^n&kh5v|AX%#y#uUgMxczQcZVirv@1mN(l7
zc<Wu6fw)jh35TH7oze3-MTW(z!9!*lt`!e=r)U#qXl|;|*&fwFv%lZm4mc6>tE&0F
za~s>)=Ac@ynz&IwkzaXyq#Z<Y6f8XoCgU*D%U*q61&}lI3fm4>+yvPh+oL;L(baDa
zBDD(li#*L4ve74rzr)zqY=Px-43uNquDoI6bQs~RuG_Hjo?}^Rn(+DfSS+^9#pxN!
zVKeIV_ySiy6Rfmj<Q#aC-aHG={2F#Wak*BwW;-p$N&DFTe99w<AeMZ7`q)N~*F1~j
zZts3Quu@+NIo%miIt3%yY1yyzPUD;I_7?|PK9jfM*Uc@7b12U~R!C+TUVX`Cy}T1j
zjpC@#lv;t|SI-%(Sk~Ns>Udm?LRysbQEyDR-Qe*l#mR@jzP}@nHUc;vdEpZC>ft{x
zKRBzqm}i|;+dc<hp=x8hU2$BM+3<oRp<fl196o*U7N>wX*zGuw-+->l<XG^&xKa0x
zxTy;$IvZw6kWRY8f}O%z$iKE16D6sw7ClQCE$8XxDytDgO(R&{XEd?Ia<tSUKNN^o
zdKsx_C1}*xM3u{iOF?#p^mg04&5ROXFmvq7D0mdZVCfqxtzv%}hOV)8j*y3Q_A;!z
z8CHZSc<sV*Ic7$CPN@GD!_v6!Z3mQ>^m6bpLPPnqUcz{3>!Sd%-!5n7GV3)-MA0S|
zahUZxA#Vv*)eHQjrZHx&W%M+R{;yO1MH1Lw89@@*#LvcR=&ecl{hx(Yke&mO5YbyN
zS&x$5V+`%8iM;59(_ibe_4O}TbFjAb-n9tw^c_8rkR|%V%IDqZz5Fj`QC<9teejt_
z(tC6^C)7Qmy-dG|M{8JA;;NQDSjq%b7n(|dyIVfXF-H35>2-rj);0LuXX+;Sf@L0}
zByahGS57Qam4)_`hrh!Zueo^FLW;tJl@(>}wj19|G_z-l7346ct1fsPrHTBi^F=^2
zR@W3uA7RDM*TC3(&`2hD`xqHktJMG0v%1hL8EfX)7Pood_z1gvQy}(^h)6oP???>$
z2!YA54gjX~k)%YAl%TCcu_TzCLE`>KTSxIL)y1_xw2PbZ@DPg%fN2_!63Q_-NWjfy
z?HZq%d^Y&&#{0~1yj^2P2}(J!@{#AsR}N~nk~dcAJodO2UDiFW9QXAxaHIk5VtqHR
z7DZ6RFh1%n{Zi*r(CkR*;g+k^P8Zhn6jZJCB=QM1?E(oj+lJ@Me}o}u)%el+;0@M6
za1DU!Z?|usuBYb31mgmaZS4c(XrH+49~Apyew~PEjmp5%MU{1lu&zh;<wkOEtB<vY
zrk2(`dD7#X!xkk_<`_~Hwvpz@L?zRJ_S-m}tfJbV%ami4a-|sS2Ry5{xB2WsPLTd2
zwxh_<ib%BGO8na9BU`s+N6-vLYuoUZ@m?DyFOf}Hpi!*+L;SQzY*r-tl<_%;@8QL~
zY5^RWUKEsQ|3{RSWi5g1$x8jI=KKaD?CD830Ry2%C@k!EgOBfMqH<F5CqjBsgb(rS
zCr~jMg5T70g`f&}CVjkF_iYNAdU1+zS|%gv0`n-e6~2|l6u+57{QU-jIN%$xFo1A|
z^r(d+$F|vSDqz~yO3DYJM(oFpRk^aei~Z{9aaWPct{7$=q93}1ESm`=ro+mG`}^|W
zbC!QEAD|Cbk>C1XJex&87!VRbcvkYQ`|n}S|8LnthmLsuLXp^9?QrP-LNK05wbT<-
z@OW+bxTyQEjB5)eEFCGTQF=TGun$fKSVZvbRc*TVZgbsWU3c{UNkvn<@{GK^m|u=9
z#MDDyOWg@lf0{W?dVE)Y$yuH9J}d55dvtqJVpb6)(w0v$`)aILlf<y7+)?i|+tZ!4
zEp%gOJg-EF^SUscWrj2(d^y?1<+a|-GI`0nC>69tp%b<W2U<if!lqwkHE3&QX(}mh
zS-JvGCfYs{an|{-Q3?vdKqgK{B6a!VjV|6ybDp3A2ViC7RIl}sgE#%)0#<`=_6-)g
zS2EXWQ{!HFApi26+>0cdVnO&Qt}?wmu}-d;uwWx+A7io_KpnJ5rPWZ2zno@RG5STi
z%;cns@id9wz?Y<iOUSzmHNEtc_pZrm4|w9k#WJyZMLeM0@~JS1-#fxXK}`*?@HKNY
zTX0~$UfR;jR6HY*@B1pk#cKT<%VC&cx=m`7t?@>+qF7RlC{w4qQSg`bW|3K6enEeb
zNn7Q;9O9U8Zpl$nUv|4`vvhjO?$ZN-fcMRx0l`X$8X&m{Y*kUXOsjbtsL+lRpte!`
zeuppw-%J;F*tL^WlS6<DbGwWC?e!?-$0LeS6T9+TkmaE8g7w;l{gFfC_#$>4X=rEe
zb7<ZDOUOitSS0x;Zl2NZY({hj&CJeE%3-BV%lJI>D42utEwygP%PkjlRzk@#bo0ST
zhiPEe7!`&M2T$dQs9Kpnv|5--j_JW(JemOd;?T5d!(5s<H|wTko)Vh=V6V*l*@T2B
z@slcc7thxqO8k<!twxJ=^xWviBWqN*gh@Z&x>MOYGk~k9L45J=i=w@~W9|gy#;uTv
zK*i#m*#og`-nUNo_vYp=m+fsOpf=RzkTLdg_3480{`Pvet5Wcniq^L(Ba&Jjk9U=m
zsUHJMP6_meKC~9$R{Brj*7KgLy+MyM-<_AjCL}s<<OVFSE}*FW)K97=DF8j@dj||+
zN8?J^9zcpE<?a{5TS47)Po=%l{MSN&#bHJd2>@BS@{d&Ci%nsd*E}1!+OP`f41qh=
zeDy53r~dd-tSW%$WV$IP1UyH=Rz$d2Q2d?z^GEXF@~J+I^rN%5Y4d8KJ`EpWz``QX
zf?>;O+q|;Qp#7(37h{}WsURbb4sXH?A+>K#+_?VsbfR+omII&cdCNyvMN%v41bwL{
zj<lcpH(Dj6vdiSW(Pml2Kg#C6RKzJKDu-T401*wkhLTMeG87hmG3g$x*pFPDRj7t(
ziox8cy*0XhC3?zo<+CoPPt^23hXy1pYZ8k=<muK*xlWnY6P2B&n(;(yDbGs6y?zp_
zwE>2jpA)J(paE1Z4hzGS^JeL<);#kKO<2Y*bXC)I%NVD%Bo__wB{}vY#zrkooQJ9c
zip%|_KR?XAV#pM0G-tEJb)!}6daJx@7|%@Xey~$60;_~ty2=vN?KVkf-xMr@?_S>p
z{_*$4GAW?XT%CpeB1IYE=9$Hqvz24+i@d1O3`I>2eFy9f<17b*rE|fbQPOt{C_BR_
zj@h3mDDdQqe_v-2O(IWSQ7I{^v>SdZF9JX4gp;%R9)fHNV)+WRT$asE=2RwUu*gh5
z!pcgZ`~-U;40<f%eS(AXyF<-^(Xw#@rqK*53kivK87tSVx7Fl@hsDPiQJh7s^wOSF
z1#bR3R)a}W!#jzJpJ1+;9SV;YfgqX7>?dYI=mLRT@*0rAi{lPd=nPYXeeW!tX|}5M
z8IVw+x_LR<)327-ZH&`6yblcL1nJ7vzjW0>o1@?7^-<rw_%u3^o>(=zM4viE4ppjC
z8DAzrbK}>Yvj}kyK_iWAxMh%OfF5T4!-cbhxr8yKLIscO#nkwCE~}Y7uo|C>AV*<+
zZ7gdok()*C)E!lFYmgUy1J<7z3m~I<Dz-qeftrjR+x3_TS`&8?if82zr}9OQm}}&8
zh^SJmjX)K6^+Y{2M_}a>r$*_5qhvRtx>z)gp#LnX-Krq>QEd!c6<Q0f0dpSsuso&%
zv|3Sb%_#dVvUgEXXxrp2yJl>3%S%xPx2d+N>O$x!AunP<MDvhvUI^#xcvrz;iDBPo
zjpcl;^GJ;I^Wh3P5F#NCOIRi|Nw()LY*#i%J<rYMQaf=F%{wUK2rNIU!V{gulYTl)
zVA5+~(#(|2y$zZ&v&$Sasr8VzXw@fWn-{_hPA_skzeDJxD#vk`zZF9w6X7aL=(Fhd
z@aWW}ysGO?EdQR;aLsqIdQG#{+%klkJ@Ib!XX4n?TlHh^nR6e$g}Pt%*cZMcF0~2L
z#?gb<AsY2t5niy(X4d+b0?na<$6?fw?ICx6lkr!(y0B8DJP_sP?Kq!P1CjNh=;-`h
zmAr`OQS>wu?y;HBk+D>2_m|O==^OG~#S^;zPn(f<-{Bczu|CU2W5__jRQ`~bU9_-~
zZ2)XczqjBUrZGC$@sW+8>y38i^TZkr^PpYsB37#a6u%tF7sCAbH$yAr)8is$r4%^%
zwPLnisZLs~Dt6|zM+@`V4y$UbqPF#xqQ~l~v}sK6kczx7^qq)o2_zPh)LTpTQEGX^
z1m){Io)Swe%|}kTqGr|JgI5!+@Nmj^dILnSN##DVr<J~@Nzylsy_kBq9ksTqQzLzf
zD2}D0op)H4`=Y^!Tr+dfYwE76QmY@IrL#BO?Z&-2Bmlfs;L{1#Hfdre4oFmgRG-R9
z2d*c%QO{Zr_yW&kjINgZ-^@|HRT4aVJujWfM2A^7!ueYNM83jB7kB`f#w*4AFWU{j
z$R1c5qRwUSx3=eV0fZ0v;>CQK*k9h1A|jZ^wXuAq#{BjI!88UD@)?4NjE3+bz-E%}
z`HCR_=I{Oq;dv+Z0wD+dx0QhLOd9|d{xMpLw#UvPUr4eoPP&s_{`1WAV@*6pJ6d=e
z-F$hevz3i8w8pGZeoX{CEm{56hM5CK@N4`8;X0pNI(JR+)%qN}%J-Dr?i_8q581k9
zYiYsMvoYw$=ot&MP7Xp1AXLR-3(ZNFi<Gl?ZCREu(M^&?S{>DojEThiJbEv!?bHM4
zY1lV^;_!<5buCKTFjLjk`3-5kwaBkbdxXj>rhV3c7CeqMX7a0$acQ%6R{KYfpFQfu
zc^*IB{%PGM5nQ8NBW?pMp7i&$e0AjL@-395j3u+a^25gOmeEF$vt)gr5yD922aF5L
zFrJ1{z}(ZvL(>yO??7+0Ze??@wJg50<L!G(ZO7rv28Bnc)r*asBjLUq#bPV^HcNFT
zpzLstCwp-fVfkA1t5)y#2ir>#Y0B99uK>Z~dmf!k(*V`fCV5nct`9(Jq@02L%J4W0
zU)|SoPD#UyjGl>`>QqibFV<;@fq4F$(Uc0KDceaV8IxNtsO;6fT<Lc+wePgt8zx9z
z$&3>SD4pHXd(y<pO2|MO0CLQ6)WK7%5b9D^x-|_NxfeQouo2xKdbLZ5HREVDUU{S(
z+r#Jb#_w`>hvop(93LoPS{cKktg-b=jUu5yfYye*#PH4@Ar(^Ho(O5EB$2TST~ckD
z_9N$S643ZNsSegDxuh7GVNT_Q{DXKIc2uSyz+lSkSfIv~Q3iIqVe4#H-l1*^ZiNQ;
zG7QCZ8yhA|J*65`C1Kgu&mNq`Of5%NC}ET2)#1t@4tcPf;#n$-h|@c}D~OWKAavXb
z|1@0jioHEDE=u4BMlUoN+-|HZ3BU^F<}Qejm|(v60=DNJvm0}gzd|MFEx4k|9B~9O
zpshxI=oeXI6&-%Jlc*Z;B@Q{4bxPm^4lB^hTXv3#wjd=GOpRqJD@!+H6iy(0%`Z^%
zoyLGj(`+#Cl5yyhTymnl`G7OgX>J4}y_$JXAj^I*K9|)(TikTT!27A%PiXiE=H}n9
z#s@1xVwCp@v1hL{ieyM7p7VtWR&ZVOwOpAwo)WsT_$Cu~u01QShi_fF<D2Vy@^}?%
z>Sym`Vp*GhQpg_Y%TcS<#aCr&-p0!o6wr}+C!vH&Qck^pju2LCl&lP8YzX+TuaX5+
zQ?arIl3^VSX_AyQog+P1V9-7RR%pV<L`)g=WCP{Dwz0wh&QCSY;8%a6!;JgbNBo8q
z<yod}ljJYyQtJocB`L!sr({@J@Y!*O9^l1Wg(%vpPez;frA(W+`{;3D{}5o@8lHA$
zQlr*V|1MtBgzEn%^SDX(#TANQV;38a+g#<Gwm>X^dQd|HM^P?C4V!lB=eZ_f$x__<
zuPu+&1&!t2ywob*(RP(7*oJ@2x=E)X+pOuRi~U;51*$`YL+^@<-gbl@y3dWmG>u$k
z!z(8Yx#SW9>l#u9WwzYo$>iR#CGBssV@`9CGAv^x5t4Y-e0JosR0ma=ZU>d3KPoxy
z0!tBE*Yulf-w7`l4jiC27QHVk4xiP2xfDY74qRQS)65wSp(QM2k!Pr*Ic#kR4gw>L
zG48j>7+iVz;da?6nD;*9mF}@M8s1NT+DVB<7wkCYPqHwC&OklW(wY%T9=q$e=YE*!
zIKybix4SJe@VzNcjyU}yyBjb3b*js4UW^!+=XbU?n7)c*2D+b&Tl4&QVa}*3tk*CG
zCN*Fy#i3<^J&0T>axyZ}&^YE0b51en@3)xB8X%5DmX5KO^>RW_42D#Pk=WC4Jue}a
zR_!!u$>xZPn%NQIEfTH62etjWdZBP^>SUd4z0+A7qt;F>pobjd0@B->qfuCQ^a3p-
zY;(V+wH}FmN$>UYt-v&w9KCXS9Hq$D0z@hoJ<b?b9H$(@@@T4+CiU|NU$gzW6I~O5
z5B5;SKHmv`e7qyUOo8FLcdN<fKaK8w=@KvvUpOm|8YfL`oSw2G;Ga11i`&r2@?VMQ
zxpry#zU5?T^^4?3X30S?Z)YVjZhrhcrETIeaJ@EW@_X1MDEe!VtV{tFO&pkBhTVsM
z^RNkXTOysS|L_lPy$u)7-qEoxNQl^l*BMR3hjvY_h2DHW7Mv|3;XgSt(>r7+1Oq4f
z3$nEuYP*WnRu&cQghB3bjC7NW56aRX?1V+e+beVRDW0E-Cv$By-eM@IX2JuXDzka6
zRx6?)ou9Y<Yns<?GaD7m5E>ohj@>GYKWf+i0S5X-3T&kl@ze+=CRzyj&W<a`JM-Hf
zwtD@NIQQdJJ1&r|^s|`xDDG;mzML9^BqVn$Lut7NtPd#0wfzMsx(`7L(9gn<+tp<z
z_ivX4kp8@#+uoh21%CfD$n8PsSM@puJl-F8MH1_$ncI~6a}<<1Qd6r<+tU3q{bE*f
zrSgtP2DPS2@cheeYhk^y3$?MMhovP&n%E6FdZmi$cuesh-`J{-5p{S;yz;|&25tLS
z4Zz3yAWTWX)qSQu)&-b+@QrAsX|>X~=-)^d-F8E%*NKPM%Xs}TY@(Fq0I;xmszZ^y
z*q-E6Ekl>hPED1Dp$fRU=0`(DVe?^!o?}InHY+wKcnFz!a86h{Ys?NrBvNp3+P*W1
zNj?QbgPn5dxKFRM2;*5U&P|UeFrO{AaS?qd@vr*YJLUWx;E;!TAgr@@xGM`8O*N4=
znYt(UNH6lIsfHUm2QBHxa2U-z`kPhTza;7)3^)X=aMG!<hE=`RN$4T^AvJGzMC7>s
zbw>N8^<Z9<2eVM-q}}x;#R^7#Em$c}HhE=!K1M{cVCm7dv;HI04WIhhyVakK`_YCl
z!V9T-X{LXsC}QSbBz@bf=JNLwJ~TC7rxpww^e~{M|F+F|Uq!m^Q|E-h*xBLe$B!|{
z#HmkSS-w=*#63MzzCL?YvLvvvk>O?L1-C}49QeR$o_p`vMLFC}pF|nRN*5k5V7k_Y
zp>XI@1-w|l@+9^cWxbhQzCu5>Z<I{lIE1;^%L67sCzLCb;fJ&XTuUd}V3Ot=X;aI&
z$oATJcdqiM3xbr6mh;nkVAFN&jYfiC`e-nDat)RHt%g!>{MY&6>cFdU9~GB(geupW
zWA^3xwN~&T1I^-M;E8CxFFe(`>D42g(DUBd<vjGM|DA%}*z_eikm5ke{47VPpBYN6
zhzB3a5_-YDPfPql>&aoPL&o{Z?R6{JlSA^S#aPibc`)Hv7Hb&at4v{O2=JD?iX-Fe
zy<jWZPv}ZWrE&ZF);zV&EJVUmxH4RG-~KoN><z9iIFNWz7#G>Y5DM^l{+_ohf$t%6
zw0d(oO-@X+vi}qMKpaSA(8v51L(zP7kTNe((E0dx8Sc#95pP?`WC#kUOa4NNX|-~u
zkaNyKOn7*BPwmwyiV_m<=Ye=`$nG_cv6EJKgCNI?)ir05Szq3GkO6q`^03PUg7~1<
z$09Al6N)k8a1DOn#xb#wS75!xCmklY`Hk=CJCGgg#0}{2bk169`&NJQjXAnF<QVA>
z$D4weRh5q1-6!QJepx5wul+_1nhT43xOTf_&Clmnv6ij779m$j>|<XGKK}TH75o;d
zyAdEJy4{N0+ULf@-qEQ3qiOj!{`axc);XBbgGa@9_uidPm-mBM^ja{6kHX%Pj{iP}
zd{$ajXa|h%@iGv2(I=As2I{*Y_$P%nUMOn3NjW{Du}Rjpx$$LT(<iYp3Hu1Qbp!;=
zvcK;FP{)a*d|=8e@e@$}D5<a8_!Fz7EhEf6otb#9!mVV0v0ovtJM8C+PmYm9u_0+8
z$NSQlK)d?1ieU)R4R7;J|BC&N#}`z3O16Hxsn9bI(2j?Ewnx_8$PHiTopAdonshRQ
zVI!GsRCIGee?Q;cP^^$Wnz-ANFKs`nAK2Lq%ZUb|@V26q4jzV}^u`o&#`LL}V!K+v
zP>yE)s~&Gkqb|}E8HOB9;?j?^-3d~sJ)$#KSDKvF22-*U@%8$RbE_Fdz}bm>2HX9f
z=juKz4_}x{k0QdpsxR_mry6*R*hcqlq+U*!)cXi<7=N~{kK=^Kk2@XQ%QSg*&Y|j!
zyiPsq^(ban-n~~=fY*StIMG@x>m5so<D@NaI)}(yAXELv9Uf`c>XEuSGSW-lf??cC
z*XMa#G+;e>oF>rUSLX!r4+P0y>U9^_U`Pc}^rMbVs6`XE!E|byW9;7WJXTXgnKKK5
zY9HEsYc%ySlccY^D6`jiXwCRkl6Y>y@bLN}n+aX8XVh)Wnnoa2T#6=E+TFKRTtus-
zvk07wZw)D8-4e3G?~`te8yi)&Sf+!N$lLGAXxPNDkYlPMGY%}hRq|+l@3=sSOhi_E
zYek~I%SRu^_^A!A(?!3`e`g@JRW>Hoq?SXGJDdKQZ1HmI+w1KGx@J}w>zj|Z=OgF7
z#~*p8SR7mveO8KsRx~{#)6r5Lv6i<PSy)k9USocw=vcUj{Pem&oqGLs;22Bg8*-D#
zY`^g<3x8_b_NA806w(&AFT$=-6xby&f<2o-8`Hd_xGK)!2!-BFRNb$Ly9h5FOL6UM
z=P={J$7VHaOB6El2pL!vS_N1_@owsc!1?hk(heDM+*t;(Nt#TKyXco6^SnQ5=$ns(
zozBQY{Nt4SW;=W-<;C~nYdntcmhU}S;kRsMHEb3>1;QSho*>ENDiT^5CiW9#hrnHO
z=|?lv6%NyDBjxwLWB5j;k)frHHc9zH3T^Nbdwt>$a*IXRrqqZlg@sQ83A3v5kS5yO
zRyMY3Rz&rN2~deVB0iN)VA5E3qcbvg*_dW7mE7loQ=>uz71<A`Q6*F{uy5+nD-{MJ
z<@R*$`h0uD0aWjob=d762arm=#Cp;%b5U1h9Dlr!|KNEp;W~BZjhxsrh<5v-fh#Nb
zQuwt>r+tjGvEe573dx&^P$vGkmOcOakx*^pGdb@lTzn7D&H(2MJJsGNVqRDb``6|d
zI3#%&;ALIC8!ovU=N~Ij8EHT+qYa@8w@_FvmxGT{eQwA&@;8eFuqs2X0A0b|rwA}J
z+bCQdH>oR|Cyv`&0L1XV!<VpWA!OvHY?>}td@E~7H`lj~22)ZGK%;jLk{7<)lf###
zO0$~I`ttH-izv0S&>|0F`{c<{p<JHCpq?y;*tt!)g^vI$XhLPt3w_&o8Nj>DPZI0N
zYeGuWwDoZ8S%9h$6aAp0maa+FG_plkTy&7E*delXyYQp8rSG6`W<f`+jr3F`2eYFf
z*mENiUNK>$xWr3LOk91g@^n?@_VH-6IKG8;6z%p+;YC1ZLHbV*K)-3BI0knnn^v{!
z6zRQS0hEe@)a7ve@x+-;W@>Ov7Lr>5>|>PNz%w(!%N7%Yy`##sL4cVG!7S#tWaWZ?
zE$CdJg=)WjU$-dsW|m3z1Is)e?I^`arTG~G1>LwpvrhE{Mt-wCVyc;(+#CU6i!WS_
z#ku&rKqrFVUTO(L{oti3DhkR%XF_aLwc#5k_0kyiraA(qDe6+|^Sp3ye%{GM$rR3g
zRZPpAL{(7)Hq57Z(vi_1f3(;hnGsp@F6rLihb`=T0%+=_aLG8375k4W!^-)J(@2q(
zM)TRX0ajvI(nSFmzZ~DUw5UQFg&(#p9dT8Kp2$gMgyT8Chb@a|%iTR^k!9yr6zGB=
zwgs)>s+ZnY?W=VHO!`U?vC{0KKYpC$@m)$hgbf+~ATke%4J4~}GRf}N%#Q#9qsJ#A
zu{G_!*r=VJJo?|?spv8{q12z76DQH3a}?E^vb%UodBr_GygQND$wC5gbLV8C#pWMp
zlnC2pHV1Bg7A7Zv8^(WBK&K2}s_z@i12oNFPqmb_rfHsu0ObKXfp`hT7W_dqskUo<
z1Zm2nl5DmGp6`0&kBvAFr%Q$V1Drddd;E!G7yyEC?p%67sBJ0bw^hqdogqE&&p-DG
z;`m>pqUCV<Ev@Sb(Q3e5Ry;$fFn$Y!1DCm35xOKUrHrEb6OHw}c^*A}`nR&?x@-Ao
z3vQ*WEVfF*KJ`V|7+=ito~PmrZsaE_AW9bLn{Jjxy?!CAc2dnQ=jzxPjCI<u`&;rn
zGsVi>);!fTG19#8D*bnX!%jwjI!e?jNAb568Q-(GbiUJvV96E_;8(8bQ!et$D-|#E
zsO08D27Xp(@zIj#VV868PTfe&u2Xja!)fAD+VV$}M$=hFWybwp2)-^?v>J$)!wg;I
z0;uW<!N?YnY4;ab+%W75F2Gf)K&3n_f<!$VH8Jz@2`m>!g?%%XDiU`k4PC;PO-G?`
zra8QEhuz*da@QraTeZB0H$<exvOhiNRNe}VuJ{_PCnZLi^V|;gBjv1)@Gtn%y^d@q
zz}-|W?Az_Zvr8?MtH1HW<Q+=rNR3?k6#a^%MHpk3pMskr4WrXq#o5Me2F$s?BT_rB
z+kkD74b8dO&!tNaTY}+a&HOmIO0%07GE%jR@p(~1`055IH7B;?Z1t1qmH(=`1@$Zw
zavci|<tKXcWJ)A-M@8e4!gqnify3{XruaB^dN3l2NTa0)eZM<(VkH5UKxuXnm0Wkz
z42P|_kOgVq=x}g5dx*eY)?!<J(x`_?jgyv^*g!bhgiev?_Y&ftv@2`!7|E2}zQM0>
z{p7wPEoy7YU;yIAG&k<Oc_@-$Z)0Ox_ib<kNefV|dhK4M^F-A|OHSEzdyi?+CC|z9
zdynQ(@-7oOG|v7u;t4Cu3hwVQ_RQ_6>WSSpXa`9(2>bmu1)BNsxF?nkZ~TO{&gb-D
zk}u@UIq`6FR{C9IvEiV5zp@w0ft7G|><5u;QL^s8!eBq<9*QYFC~sf7;<AweK)+i+
zES+s~dZ736kB{2yDFRxD-G3N`go1FXjKV7&BOuy897vn#18DZ+3)Ee@T^<qLR{L%M
z#I`9`qB>*nF;bg51zpQ>tp&J>Vq-S9@`?WESrgC8nGy2Mbe1+Y${h>m`@359d5d}{
zV2csyCLZFrQ-xW2Q-@h+hTzMqmBcP`2EBnmqg?d2clHB;5m7C$`}@5guu4UvIdrs3
zhmeN>(#>6GwU0GZU!ROgt2_-EJ&!J_$Ujn|3oZXBQ({rK`x?I!oP?vCIhaRcWKDj$
zho070S6yFwLe>(QJrww|1zQZe02ZX^5~^*FPetKncAIM=%j5RyLKZD$<9YdcATviB
zWZdw}g2SzKG)&VTA>TK{VU0Lo4<~8?Y*DiJPsi2BXxK#si+Ir58!g)Q(HrvdK0-=>
za;p4`-y-xA`PD!51gFP$kp*^~JCa3M{_p|^-el3MbIpGmQZgyN3#3&7ncypfpIFC#
zSwSeE$Ma_%$)TQij@;a^p!0Tl6`Mbm7*xjt?QC04SrFarBw?q)Uh+OO{h^azhD=<1
zb>j~4`l63ImT9?pTkcf|^PihdwgyzVPjeuN)al>AN1{-KXio7}Z^{iSiNjFoh=$u&
zC0@I=U-x~I@N6hWc@bb)zhdEyZqm878b&0dS9qx8Fk1)?wm-^j-M2+$Kpjrs`IIW>
zD18+M-oj7jRx4P*rIAF+1hPr@JC@rIw)c51A~PsW6>*1^IAS1j>Hv)Ig8*qGOb>#^
zVqy0V&*MR?$}<p1@8lYOmCJXtvzp~FB)aA{b|XsXRd+uIv}b|N*@rA!SD5drbBaU=
z5oC{mEDpF*m(0DRrnYJK0_4{Yi^lC@y{2amDsK<XeT5zKUga*0a;$9WG{UksG`Tu}
z(aaCzM@M_ykTsu^WsEVNS+?0)&n8)m-%*|=V6pJ?Z!TZO4)eo%%!d9@CcqgbY7tXY
zryP&aCbL<@ZxD+^)RkN^5nIH*wCZF08GX4z{<K;ZqKP8>=-_F*t%{k9LuBKFJ%=}r
zOYggs=kP&-jj50e!$-pUn~z<v&7{W{^asLg(IEX7t*k{oX+3b@K@9|=tWW%7%PNue
z1UuJ>vB5Fe`6S`QP>^ka)7ZRtkx(s>&9zDI?akQ{!1M8ej;uL6HSlvMfr5p`h$B|E
zCwnzz^MrjqWkYPkustg@`P^O7yqdyVztMyeZ}C<&WVezUg26$WfbpX!R<KGFw%Uw&
zNcasOzd(&t7L!C<Q@$XRVy2cq%Vlp;ey;fSE-N$o!`SM(4&EQ`5jV<ce>9ls@&yXb
z&%H1smrf>8OZ#CzXyjr3nr4PMk<ybcA+Q|q&-N)EhkgOBOc!~4bvjUK9k;Dzq54=1
zps-c98tgkUtCp4+mAp@+E5OYsEJVUzgb#7@*|pFQD`APa?>I_0-fVbqCeJ@;BZBtU
z*7LZ(T(CxT)2$hh8p*JE&Ei3=K5lsS+B}tkT&2^=b+CS9kuVP&H76KzrX|KeYA{E;
zhHPH#kvnXQCXpq;_-mukahB_DO3?-{It;D`p;TF0^}^QM)hG-vTAFIlQitR+fHR9N
z_o8%iW>nZJ6a-N5U}~PyWX!5f?LUe2#xoM|rA-N%?(<!P=pBDAgvo!+Oqe=zVQ>cJ
zoeye+Cq`)obIxSajr>CMlzUJcAMu~=*IxbDBn^|6l2j6&rYGeyvN$*D#W-E&Uzx_Y
zWigdWsIuO>Bzra*%IDOd+DuX`J;9h5S~pZzn<{rVk5;Ft99FB|u;-jX(L{Zg(7QZd
zZCV}l*kwG@@uW$~u)~};^~;B=YrN%i<+$KO+!h0j%j11{{jlqvmIkCC<oQn(UtP`C
zM50)3!fWMbXxE=T^+~tOofV$rd<h?eF(7B|Lg#{x`MJpWGE(*<>ea_wJEFKwrrU0}
zSA59A%b6H>t(wM4+iRC9+PTDi>p$9@=(5+?rX<4_iBI-cpq!hTB{(lx9k!#Ky^M}K
z>OD);APRhG_CwSw2QtAzk79ars}^l$Ti`SL=Pc`v6dZdvmd94fX!ZP^zZE?ZcTmW*
z7iBKK570sRj`2f*7NGlMD~;o)Xx#}yP@uW=L4;j?xs>Q_@rx?#dAju|L<B$5Ilzyt
p|MI)l|5GO|_xbgjEH$mIr<ac1gXdv;dDnk&a#G5YRpN&J{|mv1uG;_r

literal 0
HcmV?d00001

diff --git a/doc/ci/environments/img/environments_list.png b/doc/ci/environments/img/environments_list.png
deleted file mode 100644
index 6ddfd858ab6f4bbfe9ea500d6307a3e866d63808..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 17379
zcmbTd1yo#5vo8uEAwUQOcXxse?(Q(?V1eKkJU9dm?k<B%U|`VT!QCymySuy0<Ntl<
zopauM_ulpH?OCgL@2>h)bye-%vsZO@n2M6jM-)O7I5@bEa<Y<YaBy!Suk9Nogx7iz
z-WTwCd21o2C<X^t8S~-E=-ul*ypx)YI9&NC@je{f8(~XzZD(yoAis&dEsK$<y|EdK
zyY2T^E;u+rcmCI=t(mhCxx1~6ofE&i5aqu(_+Q)qbhA>D|BJ=hT8L6xQH5N>-qDPl
zi-nT~Kq-tuPEIc9Xll-{CMo?N@Yg#b%5Toj-}zZt-Q3(*+&Eb59W7Yd`1tr(0qm^o
z?98tm%uXJ5&PMLcc1~3P7V>|~ku-BMakTvIY-w*t{*PQEV|y28Axg@B6#ZxU_c+bm
zE&ofCozs7q^=csNKNMCr769x22<B{Q{y%~JL-{xCUv~Xlo!~#h_%)o&93|{+ZO!bQ
zg+V5cW@dIy-|U?Q|E1~wLHw_A{u`)b>27ADEou3Rbb7T(n2n7O@E@@MH|c)}{qkQ>
zc24g9j{I+w|Azd>27YBn%h!P#{o_PoHbK_^Pv3v=3$p&>;s56Ge~0s5y|3{UMiFHF
z&u2pzC94&~0S*oUP6eng1%tub+S-I%h8SI?78e)I&CLM-0Bex!+1c4L<42xvZ3Dz`
z=H}fn*gfnSb_au9UtiB%!(N_NV6dBtrMsKu-`6nMZ#Oe@3qL0S;N|J@<$2HC%;j#i
z9sqD!srK7_f~{0J?(Xic-opI-{Y&SrEzK=YV6Ye1`SZi<=H}-86HLTo>d)HU-O5az
z3*h+Z=;dMG*W7&J5#~}n=VER?eG7ZKn!SPDKAw)4|EPo(7jaqF7XNIwDO(vhf^8jb
z*#H2~*V|DM5j9oS7nfHSvEACN07nNqbGN~^-KYD##g+ZlfdqR)InKS~{e{{2zhfiT
zklB>J!~2~+4I##CC*2x9)2Z1>r{62txw)&)u%6y-TYW{y{EePv+fVndcykL6Tix5+
zhd@hnGux7@Y3R@23jkJ|=&pTBuQ-dJzn*WeT|7J|vwa>P9-4zJAz29kR&CyI-KB|r
z1B0!piGi*f0^<JD06?sTnuvK+W&Xha)5TfvpS7Ol^V$Bog#4lQ=1R4eiNY9%l=3MV
z4l2Xy-T96Asj?oA#L^fOg`L*u^0w)*sWrdX$oM#n=h*|aixNF7&A-LZ6}!g**kt48
zrfTA}inqshZfc8?0IYu1mVl?TwZ5X5te@r@mhH*O2@q@Z<?ce^gxtB4`@d=0yZwoW
z!+F;m*=IeOwMianO$)odBRP{70PR4V%ppFPx|-?3lbeV3g!aKs8*T=YzQ4mU4%&)R
zTnE=@eg<-TCpSOyI(<_93OaUjgnk3qhNo%)ngRi#2`MeZi&8NI=TlP)%_B+n07zfw
z-ehfa*XWn5iI`tiO|fQ|vo$lTM>WMGZY$^JX3;`{e-a$KJMUqI9_@Y|hqev7`-_83
zZ7mP`&21S!6|>iJOaE|$Yx^h58|N%0RQFU4Zu5N`NC@xmj(UAmGmrA)dKz+D8;oVN
zwfSQr4FFCGW!20+GPxzH`>rM{wUN^_?|rS=w7-K5B4r@})}I?UkW*O4P<Td*mj){U
zlTKa)4vrj7PEt(Wec>qG6R565+UM&z%*O#kr9zKm-vdUlbLi%vbpmB(X;eDU)*k%w
zOA<bP{lctPUt**e$t2GJALYl&ucz)hSzKb;L8vqN5gMq05mAA}lCM+uhHxP?5OeYq
z+45?Go4LC>zu}Vew^5!rr&GS&EKe>DvbNP#Avh%D|5@=!XY>qpD=Kun%hhRwJYOAH
zVPvCGP*mh#59l7^pjUCn{NbBsKi2J0uCOmeRzgPh2>5Z)yrX*Y<ExC`iYUXDddi&_
z60*n7ew_-B#M*8bPQ`VSG+JRYaq$&D2752up9~Zf6h9gMx%|7P_z8tZL)Z3^<?Asa
z?_q*=G}P39>&uQQ=WTpN7~hh-tgPYSBHOm_u}Z0t40OSTv|+A+sPtw?1%2-fF6Pb+
zcZDT=s`{=h4Bx3FMISQ*Gi?KmqOaduKqOGey~I)rSy4wXxmTa}d2VLoItzr^*bt-<
z8{2j6!#E%_Y`A9uN}HI;c9EWwNBq8VdT~0_M#;ix1rvkw@?&RUsfN0Do#!^oZ(%}F
zY)&%EjQ6LB=44o}N+!VJ^>S^sj*dqe5#2|`tT#1Z*&PHefLyMkWZXds1xiH3*@7tx
zPr<a&&<cX4v#u4AGXA!UdAr?wvl3Ha3wxSnM;GY<p_7R`pWS#r>|@%k<1~>o%QuM~
z<tfDhu;Z$gz4m@ISTd#_6Z66xXlVnzRAG&&mBkzI+WjK~6axtQ0xcV};X&c$7QdBk
zi%*bE1~L2QY^wK{bF}^1f~I=No|d0;n%w^=^iCB#-|m;IbgSP$07oeRvrayux)?SP
z-CXaf){kN17Y;nb*qYWlZ-yVmgrP9jf<N)AX%oH^v4nohi>}>&Z4CTso;i;q^{vpo
z7)%CjA?#!HN$CEJL7A9o3*dOCFlY-TC6@n6dhTlPuj2Gv=q5Oj0TvOsW#?wzeofGA
zV@0zSUg4{R?i1m<GjsWME<;R~R5D(>Xt4hcaXf@orXm@=c;;y+Q1XysUUNplk&4!z
zVK0$wI#hV<N>cS3zB=k&%%*H%2FiHj5}{hnm$S-Ji6BN!175+i1H-l!NsGM`WpT1Q
z$#HvF83}4kC39uKwxDa43jLk7M!j|EA%<)VR@amrZcAc8Ctr<%&o<LOz@*KHN&I@y
zhNBOgw(~LaS-#9HUX2d|v?wsyKRx<!u9@w1qaxQp1VY|iR=k#JJp4gUN<5IidrD|N
zahd*2wv;9uu`D_dnp5CBi~B<~gk<-25@Z;)&YUT*p?Ph|<{`h`7%Q**PxOp|_up*j
z0#pT`wkf@gE14O|4JaV}P(*PrK8S1lhj)S0d>qDh63>*51%82tI&An>?8Jh2(wJ(7
zRL}ux9IG&i<H+zh>So#i)BD{|YEuyr8%#2BP6cFrQ>AE<*nLwH0A>Vyrf%L@MBE-#
zZ?5d`>gYqxvQ^xE@hW@7eguN&*X!?ijb-QO;LnqC2)h&9x4=`R2!O<*TyzY47{RyT
zuO?r9fN$OX!R*B5avZS|hg%{Qt<~D^J?9y_)#>}x7drWW_mZGYSCzE}Tk}SP(|YO_
z97g4R8Ww>Xzo)i%c_4|KE3C{|wo~Quk#S;|Mu<^}+A_bQRNH2M(pZV*;HtjEaV}4$
ze47${XJtv+PG$;hNUn1PW_~x3XApi82TdrN$<{Jd_wJ}jaLDl_k|1a(l|N7pyrCYI
z>&8Yqf1_S$)B0V9`rbdLfNnEG)-oJMIUJgH^Ht(e>kPRZS1vyfsF9Gh$kwfnNyxOa
z+%>OpL;#wWnGUuK<JY{BQ(3k@RTq4-(i5SH#A-tdZNyLvm#(g?l;D_}Tj$wo%!xHA
z`Ba=qr)HrQViikf!XuMry<sVpZq%8}8dcdyW#d%3(=xKt!t`O|)Yjv9tPAX~n|>2$
zM4xB{s-6>$hAu}2jnjnIVjRgv2&mU>KHAO-Rdw~jW;%qh8S+0~NC7EUxX7~Dr76k{
zPvJAU-y&plF)1kU45vy2c-8VaHy;S2fa;~2UMI#}hA@T%=0<4ERk^-N(*SZj+CbUI
zJ@Ay8t-P^1TYM=6TUQW+C86uwC(C2BZ#1q1l3`&V-RDQo9wM*nu5=ozwkN*^My!8h
z@li;Z!!#h{9TYS{L7rep{}uRFD1JN6pp8Y!cVQrr8$eA>UVCS05`sZ@OEF|hsp0fM
z-t(~Q#;?3J%Kb~cH<6J->^O^;0jSY$X@|4$OCY;#-#W}B-9VQ;l7SfQ0WY0|(Wp4#
zc#;ZIbMy;cSi7as+;mTXg7s3drI7jtmz97t_b`Ob><*yXtKJiJj|pL7yVv>QbA1q0
z@3Mdp3LRC=RZeZ*NmRQR4HV9W>ZhaNvm{YT^ZJJa>g2%ed~7)S>grQEJjQ7V0^y8o
z1dtlo^nQxF^2e&8Fm;xLfw<LYBS#y0a-L_W&grLOBxKM_1Tj_zc3NQ!9}ty+fq^Cl
zC#aZqZX#~R$fb2cH@JmHf(1z7v|#xCEd<d4quK=<LfQzx8Dk~!LIkF+n79c)Uy(mb
zi+o_XBm;Ncyz3MRW^(~&2G-CJgC5=S6UE8QyG3PRdT!!ejy*nWmg28NddsYJjWHX7
zK13voukxpjjbH}1zWZ^e+a*DUX~~nR+i{=t6<52XD?2%wF*n9zl1_e495kgE)jK7H
z89}~ocR<Y}DmdP=`1j?G6=u`Ti5dv0ipfRUH1-RGO0D0C+_P3F)P8PGR$deBTyaM>
zHV4KFUg0!t{*nP+FaAV;U@4zEUs@%Su}TdHppiPFeH2vv0|){llo-E-6ldn1T7o-i
z9(04V;6WU7nnHf(?{E!yhd#+=M%q3_^RZob+FZ`sTpj{ZyyL6fk(Vnnyla9g)1MwN
zh%ggp9LI<-Q8_GcwmsRrB;K^>K)*;-uteu!^a9gb+(p<G6!wn;uB5*aeza_mvESpb
z6xw6TZL;sVRkSU_Cc+Ga{7G+A3m4u4e*lea$y-)zL1ahF#D`@Grs?tvp((S!GQblx
z3D=4Q)c&*SodpM2Q}Ig>&5bpo9wbUrl3AsyR&^Bbz(m}&yl>Nal~jh}VDaGg{c;&Y
z%ky_H;mRm3#L7=nWJNFP?-A?M<9E=okdfU=fau=JUD#yS1Z=@a)xxRx5dFl@>$8AK
zOAj;R6^o<Q)k?4F28lgL-2yXG1t0I3pI*-|4y$QCT=<!>IBls5wCh3}ahPg|iARbW
zVR8u4X#Qsk50L^2w+=8tO~?et&rm2|B4Vy`6Lyzs;5i^Nm^l*p^}}ObZ?6-Gtf;|5
zlkyh<NMP{&7nb2Sn(nwwmDza2qv-bY^!7*DRww>K4Gq>fZq_?aC--v(!PRqb)Hy`I
zTp=yiB*=!t${;GLw-=iXz44iU)Tu5QACfQ5w<-*mlAjSm=Q^u7EdI2Tjz~i{HEpyW
zL?2KyE)R*RF%Y}fUT0K~DpI^=Ks@@@i;d8HbsgEpw7JQ#((u^-ensc-B=d-M=<bO|
z3`#2O{b>7S6gdbZ^SpgrP*3iKe|p%2pIy#}RLaR><;|?rn3F6`;YYE4C1#e;Gl~@F
zFGtF?Y<gycu)3P%EV$+)H1#CM)s>b2l581JHsu`*kR(2|&ULEwkp0E`kQW(wY5r&h
z^Y<QYxZRNf*-ox3=sx@4E7H=fIGyl~d7m`w(w5bI>(TPpe>Sk6^!b}BlxVA5sR6Ie
zqqt3mvk@~}E^=+of^oEh==m}}r+<bZ+VXMbU9@on+b$VwuqPZ`W~+5kUlVwGCFJ$z
zY{-Lbo9Pa@r(*S7ZY-o?_EIb6SKOc0oC<!;21d9K5U7Un<5)#4!_TkcTH!#@ofyk~
z28?tzD+B*~nWF|AnR1%ijq{-vILN@EH>O9|r?;9a5#Dl;Y2Jmf$)EEboMwh1a{;p~
z2+of)i1XdQDmdB##3z2$d<Hn{E>?>^R*Uz){}2(eelZcA{%*PXar1td_VX4LW}7DF
z1*c7^{9H3m=+hWyJ2iZ$Xno36h5fJ0$$wPsA!}Nv1V4!3Vj*yAT~!2d?N+gA@c*6T
zf87=~T-mhNsC<5&#(7YYKCG&}?IzVx8ZZ6^+m-S0D%0BL86y?;y6H1~DS=<mw}HdP
z`L3#J2{Y|DRC4pGE#_n-<;hCECr&2IRA%wH*`5`^^#Hl>?p$zd=QhM-h4S)WQn&R8
z5b4<yRb}MiNS=AWEOK95ZrHmt3UTcmAI~MM<&EDZ<1@e9J@iX;b(`--t&ohlJES{A
z_eOYlV#y^1In?<6qer+cdLl8q=vp_eOnZx$#8xwnsgk3s3P-VclewYDuzy$<G%o8k
zK=<cErr4xw9cNOy^$KRxEbdB2UQ9)do(pdRe)A<qn-@hHOj+WF>p5y)r7pk7@>3zw
zDDLRt)E_Dfj(JWqWjs!kZ4E*kEkXg!os!Bgk5&VzISS#&Z(O!fm6R;D1Z!nSKe`jY
zvz7Y{?@;t(a-M>NunaF1v*VtQm&$)a{-#na6>o1PDe8qJFU<eYFT-}Q@Bs~i*LwAV
z0><PKn_i1m|0C|(AlDMEdNC%}%Y53zmR;@mbts*#8;*sHb-3X26GVA{M~G5iO$im#
z`*=b@J|T#ss;9c=-OJ(}aFzMunJHkzHM8HTZE%F`lVT=!*`Q5N+kIA%ZANyM2DGem
zkYhQN7i};B%W<sGzv0;+?Fnz3$3!wy%tB^XBP-4I3%z0zZFc^*JwyY1=+r!s6JNtf
zZ*17f>0%rMJDcLYP{=mK?5)csR}pTrvToPZt^eYt%9~6Up}$GLTJlNJPW4=C>!Ne@
zTLYPt>&`kjt`>*OYb`ISR|K!0|8{Iv&3+3Z-MsjgUdFZnuRydlD&)znd?6<AxQ4Ub
z)YbA3ufsc047%DB#i|v$%WAx<5uQ%4LQNk3n~iuM)uN84_)(};Zsf;6N0#ZLU&$P&
z2Fb~w9prL~{1~T$8wlFi=ZgNhsBWQ?lp0=wc?F>p)K!%}7$)xVpCL)N=+$uGJn|5f
zsV&bKU0e4UelG<>syz#P>P8w_`mK_-F%u?SzJA9ytH3s^@dG5X2gQ(Z1>}x?RW)Jx
z)!)t8L$x3xlUWXT?eKQmEZ}y8*uj&sc7qaxe#OW$a#a*Ggr?vsYkPBP%EM^IdKqQi
z1d&Rn_c=%>{dE_iKeiceBVZbNm|)OC(l7dId7?J;#yAN5EY--@gMG9^lZujgSdUk*
zdlwSj8(=K$nbefLsxIv^NKkB(_joL`oQj$L7_m{&!rRWC4rN}Ccz!0f86DSYJyGs8
zm=Lm{++i;p1on)F^1{YF=7SeC^>Z*E%PNYdM^1g&1Pj)2*~~AHxSVX~0y%L`;=P$R
z3I|D?=Ic0Zh$e%X2rXCYZ0B|X;Xp-D2Ev<G2MjTp7(Pe;*`1vfCGJL7^EZ0ZVv{Hn
zQyTng!V6#2$_f~~XKVW7otTyDON8>@8q>@N$VNC&DOw(jBI<0A_bE*5$9`3bbxO@8
zlcqDxmtwqshanArVr0wIo!$+vN?4BC&vgb?RU2M#<5rZ?VNYLAG;!+l;81nIVa%S9
zo}LW1)G%lCq16=jaJuNf(Y;SrNOiz|X9~J}FhEsyF>S)<@Cekgww14m)b%ikAxkk>
zDmw3{@T8R)=di;rdz#Q@(KU6fUA+~sC86SRH!FQx!&&gI5#!xZS(1fG>sY^=<jl&}
zq#JY72#42${W0!jy^TN(KF>s=PrDeKHAuQ5Gq>%MPfi(hA=z$`+sxVH`v;h{RuAOo
z;QQ4-kBwe*Ol>=6Bb_cjFh3Qj9TRpbxl0+6X{o_D=tkuFUFS8|Wf{b3Gd9Gn{ev4P
z$~n28$V1UtGF{P3KtchOl*(xqG@tlf#|ZJA6%<UjihGSm$Zq$0tm@6YlFZ)3&5Qgz
zywtOwf%)1U0@(8vBf=F{)zD%P4qwM-6LSl@v~cOhZpJ&u$;4+G#mq&3j9!6Ubf-~F
ztF?}4m}5oDvnp>dPO>RFC39~aB-w?<%JcilQjPErhn{(gnGcbi(~_CjR8vg$CR>G2
ziMSc~)&-HG6y9aqF@<nB5U8*mbt2H%hE@!8-J;IWdra7Zq1^M)fSD{6RIrpPa{EBM
z{maT%d18~EYRp+Vf4tKgGzf4(n?j#xk%-Iv$;P##15gZG8hvzib39)3l)VPpljbhO
zA7Bp%w|1RhhSRkpk57~GnQs4TeR&WYJH4jFnu%4OnA*w8=WVzM9d+Q*i^Ztnp>zK*
zp}v%wL&sxzkLTUhieTJ1gYWDK>Fb~4Vy==rA<jJZ!G<yu+yFx&UH90sQXm_zFBauV
zYv}zSUJ`+2<2MRk^7L4Al36x$ed-PZ;<#r5-RVz)sCh>OW1EYNk(k^3I2^3!5%O(E
zyG+0AY1icjnkd3pv3EaHUSrM*F(nfMOVlvxZ?->no!Si$iTO0jZk)sfc~m$>^o&sW
z${%^yS%kjOD~54SGbwM$RkerBvn<GYi`f~LFxuChqt&d0H{4;$J|`2g1Tz)8w5iry
z=t#B4p0@JdAMe;Xno`meHID}V*^6kn6QTNBB28JQMLDDh()d-of$gCyv=I}VaTB38
zNu}_qa^XNFOUm7`pk5-zAr<0?#tV?(SND<|#|fokeq_MBCm<?V();thvXgP~mTOBr
z*1M+sW^++~_~=NZUdpvnJN?2+ue4qu@shd7nZKexP=CSgtH7Q0(Mt1AZ_f%onUnAc
zVGd1NrvQ4oJjX+pNC)i@+&ffO<v-u+U6)yCigssnX70&+eRsQ0384p`&%A?Gtz7WQ
zj(KYWxiZQ^GWDfeb$Zt44L!wrJ<X3jl_rzrwNVb*7Do#1@79*ZOj+5tj;x6{|JNTI
z|4IFgW&;oRn=s$}KYRXvHh%x{Ug+9|*w3|Ek2xKux*5o-DtTdL+y)OJjL}`{$DR&(
zyoEDtvaEN%Q}+Z+8r0b>Kkz)yYlUA7%plxv!`3d!xb9&aCCxH-<ir)LXD`nedOqg{
zk%NsFd>F?Af=rz^SLmLwvC-7`QZ8E#&AD|=H7?+FLeX-g_H`ukkT;v6Z>3Yi`~m*5
zNN**vyW1TZDT`DZRhxMQzYB@Y{NfCMuMtuHxnR#~hAOO9hfr@>1oKyu*>;T0jL7Y*
z{Z0oQ0;9P6+4D<|fg4PJY}oTz`1#r8b~8%%rf@qB<I0IQO~SGP|32kP95XSw6#38L
zN=e}Tb-sVpNBPuyAYuN3P3TDLPBZf6`$_{kqzpn0+HqrM1yOZ5{ZpYJ)NlqlowROQ
z!XWqMLS>99AH%Hu58ynu#Byo+#+p=D&8mm_46^Lq=SEORZ*aj~^9MWWx1dd564s>@
zRWp9U1R7=`V|jH^ed99o%Hcyl%}d8r8gZWL{vkny@dU4rl@*UA_%trD8#)ByW%o)$
zTr3=SSd*gh>zu7gq49=DkA6IKPy>MwhO`8^l)S^MiDaM^!u50w2gbQa_oGYUs}&sS
zS1(3ZPjA;-Bddz+X%oaUAnb7FDC<W~_8&duWCPTp6g{z0V+|XKm1^1Yap@}+x?oGP
z!fk6BLCE0kWQLl7gYzXw^=$}Latr*0CF=@9{4w1vf|6cO1mm|^Kh;W%@;jo>VDUGQ
zx1JWj0!XpgyZuN&ZB^uwH6`~?bL7=p%#=^MZz@-Qb@fyJpo4y;7L$<;V3I>HD-ZPI
zvSu!X=u91WJ>lo}@fwsVZ3E1*?uR)#c}iQT=lr1avR81wH3lK0WN#ogD$dd#ZYyhj
zg`Jrg02)L2-*&*CP~FHKbV<-n?};f`&1a-LK0*Mb+#n*$mudD(OE;%#?Qc@xC9fsh
zTd$Ze3!O&cYD9fut>Ys#)d>?8$*7>2+o7Ig&fTWBjp^@#LeKkScb|<teAj1?z?gvP
zRcd%gGBOXpt$;3dozv{4DClnf-6&~0cH_NB&crIO=)HrlfjIsh2MA;lsU9PlZjXJH
z8+FC-VdsrPNl6LE9!;u<&^z$ON6)pPnG08mXH=v&O_$B9?^X=lTi*eZ!3Xad8U$?{
zTs`Eynx6vRBt=gOLjYVJWT_!G@Swa1*{SY8EI2DJUgtP`hKmWgsA=qKebAmC>7{k5
zdK)|b`VcpLVg_@;>Mz$ca4bAjglkpjb>bbp^y!5fzJaW4HN$BL_mV<|O-MnTTjx?Z
zIQ#owxGK*t9LSW&*ekJebroIWHcALLFgMC9o6>ra3t3b&EV}Cgu`S{@K5fkqfm(Q|
zzc2En9OzDsDgHdZkbEIXbbXWc=V4LWBOqIqaSq&__?~F=3}7rD^pP91vCdWuz-iGq
zN@`yjy<65~h&*b<){{rUli{VMOUqMl52`wf_Wz@Z^TjMKj_gyR*V+#4Rfqa)M1N*s
zdZ@u3j`(Oo%Sp7>95&A4cH&eAAV`Nx<xD;}I({*r_PM82${Xw+ZEa8$T5+0*XA@~6
zzx#8V%8!Ao7s^j9r$SIK-~~>bZ1(Ifk6Lt9)+P3D&N2+5sjA!bfva~UCFHDayDh!@
zJ-1Ert}h0!6x`$`VVXboce8bb?Kx0%Z8pq)8Q3x;>eN5G94F$b#RAv{bU8#FBq!pW
zR;b!KkagZp-x7n&f2t&{^8@3Djps>A;=S^3@rMzM>wfPY8ycPO=t)~#5oOlD|L_T4
z5$xX&w2eJOFp)2bZ`P}3EWKW*0|1Q=QWzx)pSNql{FW?-T06>aQFFETw1~F)NBizb
zCZ562NqEPGjLi@?6(wK$`_rz$s`&J1GFZj(lXEQS{37?VGM5ZeN-Ruzgxa??=wp`0
zU|MHsUs5DlgI=y1kC4DVNdK4X^ZEq8lP>rv_$&xZS~bR=E0XI+wF_o4f(#A>71apq
zBZ3La=2Kw3<xJr&7i+C0P{ReiyrO4H+RAt<ozr-^fkrpis=JmUTwbd^aWi*%Sz|@4
zM9Hw{$9cWd88F1$iC>1D1*n$bbJiV3_g-KpORMKiA$1!G1gM3c4~Xwa?XxZX%jTzs
z)@_lG$rT5s|87xEW<|4Z(%2TUk%Om%3*Z`L>ro6r3ucJarM6!wMJc>VyE=%0W;r4D
zPF(}#odg%>(S*0q`|6GM+Qxxy%T{P;!(SP#vb6?V_RYLgCZOg`!InE$aJ?QbydtZo
zl*V9`kB-G%9@baj!QLC@dG}g1Hgrl(o36n()JEr0`|r_d>0o9(;g?JY5$O1XCeES~
z#fM!zvh%XxB?WtX#kH!YsRDfzsvvC3M+`pL@Y)|mvbR5e!b-U0$U_%|O?K-tgXU~W
z2A&^z6vodHzf6c&5%+&qu#+xgwxuXcEDfKD6Tz`us3W!vUA|$f@j_2)m>_qhwW)d-
zPh(qNEkn<29WW_&AuNAJUs}kQj<h!GHHp54e^&>K)6;v`>O?LbZZ~68NS6PGWd#ek
zk7ql@9AJcE?b7mL+9p$GBbR%;bm2<i(mn*bXWsZi_plum#tFfUF7fpjJ>@T$POYJ)
z<_~CLSFI8bp!Hv1uh?0EBO<MKLAlB5rI3wb$fzea5ot+VAdM`=WkJ*Zt!Hjq4}K(*
zz4+}!bijzRxq-q%W1ps5h``5{SX7bq)owhNV?*V=V=aO>yOy}sY#bhYFqCAgiZMJx
z&5B%Yu@rrjX{o<TD6OUPFm$NR^gHS`$D4{+GdiSu?1t@NUZ+B*)8Zw*epiq`L$#~}
z3BydUdf1l|`H!CL%U{K#cU~IejJ^ZYdw5N)+o#x$oN;=IhW=WH3mkrrJO@`J>_Q>y
z^F^e)I1Fdb`<O?G3!%y%{<tdxrrj*(sUhF9ZP~4O<t97{r%T<a@9n^82$b^qx&d~H
zZ>cJ*L*{jy<^tkBZMn2{v&R}8d;u)J#m`hd3A?dC#e%ekR@94lp=Jy9nG~OY4s7iK
zdG0`RuJG$r8Lv8W#u`2}mWKQL;&s#X(P)`Y+k{44c|0oDIwGY|nyLSpi!$1iwF~_W
zA9_U24ToLMGDRU+YFz-VsSp#XBl~hskmjUt@aGuxDRXx2DL#t%?e}lUU5OC_g|P=t
z5=;H2!J<UZg-44Y9cait^E<U87?5vlPtjNXh;$0?ORUX&{d?FxW=5FIQD6q!3GN8`
ze@3>;6`K@_WB>L8-|4!l8gHZP_8rKZyS*6$0)BhgRd3Xzz9zZgu^)qE%k<NSeb;V>
z4jWMW;m4930>lp(i)b!L+<VNffGWb(>&IY+Iqa~`Xo(KVU@EIBB-PkkJ-Kc8WRT2N
z|2rq=uU!Y^9>-ISyBiG|#B_Fmg4Yy3<l@pz^A;Opk8DH@4ODv4|6v|;qi_oU+Z&sK
zMat<h#ju&WsRAq_i#MzN4!eCnfcFkaj=IP(t0LFn;vd*aSl-(!J;LBOl)a%8U>p3y
z#VB_m^O}7bjMOF5xN+*+aHam@Ms80+OTb!q1PVN8_!?|n*B)_eYG>7cAm%S@=kT`%
z1+*FH)`wl(_=sGv>IA+h<b<RpJAvPLa5;i6e&qMhw|&<TtbimN#&XFAi77H)2L8mC
zUg1T3PQOes2xS^d%O=+PRzG0ZL&g~HOk}(*(SaS&p2Y#2hCqtRV@<#)Q9t^P!l$Pz
z62I7{yVZbUvve?v)2{(}e<lE4zl)WP(o=uJf9&c9@JqfAL+eIrEXsRgd);A0`uU%|
z08IX(#?(cA{p~FBnlhi5&-_czF%_0I#F}knHAOeeKSR#^s~A|fX@VLXscDNeD%Io|
zA57|vjlaBnQM|Vv+dpZb;6TH}*zz7MKG_#8l-s$ux%GbbSzfJ>FL2R>I-41dt9&LQ
z>SaCKFTqJg(KH>Tm(po|xRz}7fXCwyRxC;HL)W!Py6i`ku-S!GKWfCpQl)JyfCw=0
zX_2(#znJd|?!Fzt3D=IFRf6E6#6nxCL2`2XX2k)RKl}>mhYJFgWF2*!Q%tRnqsL8k
zIu6synD#e$#6LVFOMz^lZOcj!M1p}x1R;&|G)_is5d-0d!CI)QfsMN|@2Ejv3mx|T
z@j5d3WB6wu$e!Ekmj*+Hdmyf&?U*sU3;%BB-lzq&&N2^SUfGTu*<;7>T*uY{mwsq`
zf^eO(0ml~!!f(Yb7$*ygX19WvsqRV7h#s6S{;|@Y6NUZQ-r2FKj+{7uRowOfwl`XN
z47OZDWK=G6T&aRzre=R@y{MWZf2i|nNp}}H#Bikb-b^JAdh63)!?35}TIZ1Av_YHy
zUBj4N!-hH)%YA|;t7swi>Y5?dF|4G~S~k?R;nXIW+?gCCjE~tH7VzSt(A-6Bb+cl!
zA*1nb!)k;})f6Kc1c5wf@#J0D3c1+N=TiKPv+wW8kbimi(KA5qN|kRX)u2Y^6U%Qw
zdD!iz9%_uUlWZQA{*Cpin~T!Yr-|lCy$iRMU)GxXd30O}MP&!VWq_*u6FcTIfP<K2
zPR~GD^BlG`lrox$^I>dors{23d4ZL2RMf|Uj-4M1Ricc!M8-I&;ZX|tmfP~knVdk{
zC>Lo@+wkouYt6ceO+mt@*jf443~IVndF7Wb_rl-kSM{V6p2#g~^bbY}pD^9E=jt5L
zBOn>O#LrLbZq^O<Mo>To4N4n<t2Vv7K283b+G<1!6thDtP$u;txP^mCv9-@cAoZeS
zg<#Nr2^JT3<SEsRRU?jF@zR~Yrz19)KAQ?`xyZB{v=TQ)dFhUCuV3MB+-RtEgg!m%
zbw-#?{MdQ>xJ`E5KUs27T~*hX=3Oo*B-C~llEE@BaP7pPH`!}kKopi(M-BMMkXvKP
zIzCfMwL`_Eu{ex1q2QwFIXo*5J#GtRDyY*Irr~j6VmoDJ;P<v<M6Rfo4=R-B{;>*)
zxBU#FNmcuzElkfdv2U&2X<-LK6JSm+%lI1`<eWLE*0IyNpCIpXgrSp6!BzDe{8z|y
z*z4OhLx!UI%gZo!A9sodo^U~h2e0&|-6m+UbF0Kdvew|!iy9H;H(^R7sdO-qZ;X$J
z7D@bsp8Lp9vK!CVX14FmEt4pVelu_+{CA1^08<S6^nKTbIRUO;)PUKLADZc4p?T`x
zPI?&u$)Xy;<jyx4V;Sg#swLCKx)IuH&P{j%N)1|nRV$FdNwB`sQm6U(#Z+Ly?&<Kp
z@tdu0kMvvOym_O=EY5eF(-)(1OfBgQ`D{L1@iallJH3gTl@wDWr>UtmS#<s#B(MP*
z`0y88T-OJvDtwk_ASH;V={B^=b-EmoZXzLb;?W1d9WfIIk{ADwajF_B{=Dv78DbK7
zrepab%JEsgA;SqNOie-j1|F;8UJwgaFL>AT8aee~(9U3oPbX$GbFp!Gvd~=4U=aRR
znt;?<Zwu|OzR7&BJ06GWRqqwE?!;K8KuT7Y%Z-iWSiXqzbMHLN6M@y&UUp~cfE=Ao
zB$rtL>iKIpUtQ-)`yljOmCCzUAtqK6k4Yg2+5$|?kZ1-UPCHH;m^ln4npG9XWtk4{
zl1kM(MR&3o@d}Kv1OuC&*bA2WX@t|Ra)4}^5BtW0s<)t$gVlF<pfu0RWha=%<L-7g
zf34XESjy?FgjCuM0hWct#SeQCMNB6VhW$f{<7iMCw!<x-DYKoB`2LBI_=02;aDUgp
z{uj6YoB&vMc4^mb;B%o_de}x53@os(CoVG2Rxy?}*<bZHG3+a3>zq*mWXtGcZotO$
zk!9g?&)2}Gim>f?9#UFP+}SF@I|Y*G>8aPrL}0i7EeTM*aRN07ABlY$UdS;dFnaXq
z0PkMExG*L%`}@rlwAylD>@q&(;R{8Kj{ntQ(`K1WKLbdI#5R0(oX?b^R*#_&aZ=@`
zF=;d`Vd;|0akr(*NbD%u1J`nyS3<YgowFcv_m;NRG1%vqY<)u(Zi<>j&QZ;`{66Fc
zEen)Fvj+YFZ{J!D_U(NVP)ROkEW?uNAA^6CXh2+vXb`+xD1Po8euQ|>nkg{4jVUMw
zrH<;PEwkC*W;v#+^_DQ19bKF0=Cu59@$XSyV(5j%);%zWO?mh1w2j;hC!>7HjAejJ
zC8THPT05Je+F}HK4J2fIv0Nt&`3@mjO*#20y35eZOsIM>Ck4UoYi0t;+sc!&ra<$9
z$$O^&1#omj*p>ioJoYa{M!)6F*o5)f-=+Ek;q8UQ9o^8|7HEg2%2BL^QlRoHBHx;-
z1}H#^4Gj(FBTA|4@`Ia<ph5Q#V9)vC`@@1d@<L$H_>QLtdIF|Ud2B2+MHX_#tNJ%H
zf6OT+R;NUOFEUJH<iuzqtu>g&+eI_Eh5&di5<?pocA2k4QWh=pop!UC({jMW*loCp
z+8ZnBobiLN@CAz}i8VbIzl-^RJ`2bu?_Q2z5ia!ya!1#^nA_O`)s(1ix&73*lwif9
zjN@lL8MMjdX62%eDbY4_fj^S9>XwAmM9rqu<Fj+b(H>tQ;j>N+s;^F+`u>cRSvm(W
zW|2$B0t3&(s52blH}x3`fjt`>KajyEJhU}215>{!+SZ)*c~;3@-LXRkwfR1)Nkj_z
z@sq~pk-@f@3w%?n)_6Q2I4?wI;x=1Nkc<*yqOaQ$-922;#Fe6Kb+pM!B%E8*gF(?_
z2C}l=VN2n3P@}YWL9K|j25qg#DVk;CWREMH3k{tgdI!6k0Mv^`%)IqI1H}s~qT-9y
zSL0}^qI8$XIdH{4=;^y0f!&0Eb&Qa&9dyuTPw?G|!oewL?s)BEgae-jZ>b&*!1m}0
z@B$*pZ~(Zo+gur0mm?Lr=sBrAFQ6m)!8V*9nu?4_2x%@0-_A535&=$d%e!TQ>Mb1H
zvSIr*(*MQ^=|7oCMBEoRxWBW0od0Zj|358$!b&yG{d@ORF~m+FeN`zL40e;tJ=e$C
zlRq9SwgH@@X2@`Gkw_H&tnph?=$MTf*gb9XCAvM+fst4y%kPOz9(&Hqb@Lrq6aYEr
zW9Ntb63uLPc+E}E;izJtdU<ijM5oP(4lm>S!b*Gvq@GB0(<#DBxJ;KEdE|_BQz~Lw
z%^Vjy`}k4}MLCx3fki3HJ}VaJ1V=$K5;>sfa6e9pC{}G1oU@~G+yf2Bn~MwL_p0_d
zCL{Gd0)cP61&Y>OXhFu|^yO5h3*iVGyQi12`?i)D&$ZqeCdi1K2gIklBPab+Ycc`n
zh_|23kq5lac`N`0I`U*lmQY_n+HGNhFg+Ue*3i2vG1Z)dzIb)Qs!RW1)2v*x#mGQn
zCW2PR=~%;TaGy9k#h6bb!%$y!P0aoXo5PVsJTNQ*rMqV<&AqZ%6xIAu<daCY#8E}q
zzch3E<iad=hXeBXFL+m8)3r<Wsa*v4<Xvo$?BwvK)Ni^(d8G;b*ZjzTOA<(7y96aE
zz|$Zn(&kCCY=`nRl5TseyzVeHVZe8ZGEZP+uIMh)F>|R`yQhLK4;nlk`q=lvODp^>
z(^-2>*%lhWc5o_I50!m=+h&De0>I}79%ESaYaSCZNel==_DhuqZ!5DUyjrYEFr1HC
zyoW5XM9FbhfO3EC<7$-rWT@{@wG<33*88d|^_$7zR6>raOPyAYwJ5&jnp?c-##P>!
z&+a+hk2yEm#-~oL<~*8#+E|`b0CI5w%<*R@259KX*|~hudM4UmJ)#rFuzPFV^7x)y
z*qX{3Z(v+(B5#1bi_JhhdgLh-3S~)v;){sx!Lx9uUf@H%;$FS)MwD?$3Hbn)7mFA0
zD?>@+Z~FjtlnR?+^wc}6PTI)CV59k$wsxQ%ng`s#6baN88x(A<&U6pVJFwiR!kPS1
z-n{T8=^dH3T;xYOJ@NKizhpgB5b<uY4+pOUtK0gUzH8-tu-Zy_yo;06YQ9q@C%t5%
zjQH|Siq$2aeN-p|21r7Y6!H;eB6y&W1hVt7*;D|M6<d|Q2oKtOX!|K|z%Cl}yG=wC
z|BgxnR7j#8BiJxUu_y6yNrG^A|MS7YLFp1+n###rLq^^MC4hIzEb_6#r?(4-+-*+W
zz784TU`#fyw`w}a%^CwGj?B2nf8J;yP703#w%Zbh#q9hT20W<ub2^dXuHkvF;;C^^
zhE@2A8LSZ0UelN<LmzlwMhtBLdO0dS5dWr-#)e_%&xyGiL&+#7Sf0x}yV~Kj#s_9;
zU6DQb%A+3$FTrU!wTUxR!`TKZ*;eC9_#$Ke2}ww<T+<4J55wJb#^Lv-2Jl!)Ejh(X
zLrX{upUKTI`t8Xfh)l9;DfTRzWBt33_5}o$qNGh0xGe3*k0Fg~yDG0b20LgcEk6lZ
zavOJ;_tPnpDuUx_?c&}+CYK4?7V<XeZc%-9gQ=MZ20np5xt3S`E~K^vDT<kSJ@Ia+
ze_C3)5(6K26Rx@z2Lwv$Q*Jp`nZ!R}DyoiaD18ya27PNIKzou2K#L<{<-ZM2jX-2O
zXA)@hiYxOr)Z-k_FlIDi=Wc-m(MDdf#|kd*&AluDa2Ci;uI?O8x=Rdxt<J#l5dVDB
z*2kY5sln78K~Rx+GG3gU)`^+aSX{W(9~VDetz{b;gHGtNRPRCm?s}Fz#1mI4-IioK
zNsd18jb^qd+zagtQClADrF6*|aF<`f<KyXP<Q{wuuRAd!&{}h@><5~nQvZC_rF)TD
z^Du0+ZGTBRfj5S$bf~u9ZVtUFfGvI@KpUEAsSl0_@DMaaq2x~>f6g=<3{42IK}IbE
zKR`9zzxfhkKoIRO{KIM=Pm%PtPg)<id@=*MS<zHZyXFFniU~|el?OBSa;@YaABzV4
zkD{q$d|a~y$hH!t1RRCyQ2AOqFPDu>7(1qKD6o!gWG0xDi@%~GlbaNC$yR~1D-)$$
zKAy|$0houxUyoJ%zEZu~I_cwueHj^1@FL-50nq#op`{NtX55?SW=(JcPA|~S#u-`l
zgQRDt+n1gXVw|*cN9V$Mb`EA9*nu9KQGDD$+vV~uBCfa(F%;Nfr*Ls8VG4PD5#O=#
zU#qA4sX~ijl#F;-wjpCgH<U;jfPy2&D?O8kc7bMi&^!G5_a(NLwW_ALi(jK{pT(N9
z#CPI!TDgG2zXsh?ygk?oztDOTF?K)7>VNE+ss;(;fgToPK7XUtnDE{t``Vf>HrM9j
z!aDn+aW9E`OX4<8F2vh%o9YAK=TKgK1If`TYVtx_6|VF9d`otNbJFYXfyKgt#utMR
znR*oLJO+3EslcgFeckZo*V<(x8#3^Vso?VVXkheZ@?bi9vS<vGJKm^f5qOYhV%q;#
ze(*qj?{8WRX8$QI8&HlPvwxtk|4{~Mhmt6W9B{1qp2Al%mkHfOJaYJVNNg10UkRbD
zErehOXr434y#(}rtMI+98qsPH*7BPgeXF>4FOJG^<Qhupa<Xfxdm1jAmISA~+=>mS
zQ!Yf18|6MC*t>e}5}dA#OD)!gvY=Akq$ZcSO|~nnL>@Of=-+GFqib0jv`5uwh8MFK
zsP*^if%~lcbtA^{LA|1C$Duu|HdZx4-jr+42B7mhMolz;)MhIpi?~O~V^#ELkuzrE
zm=D_*_xyP8S6y?rf3uE{eD)f2)=GOa1TRE#(6|Ek#bYn5E07E_{Ok7TptY(NJe<>|
zKn2|fhS%c)5Y$)@RoFw?Ko1KCA9KVNwYN}?jTgMYVL#|KP~48=U{NLfVIF)<_fka~
zGmqK!@$}g3Ln^HP5f^7``8UtpMplC=qJwF&UmVrSBD1;;AqeARbmHp`HDOG!PXMm>
zXv9X38u_33``Nn%qE*xVmfiwMdiA}7K8?vJ%`SfpNkDDnyP~ZYUJOnlD(q^p?Hy8Z
z`Lxg4q3=<4m&ki0!v{fZi}x`xl)SS7Pw0w$rqK!bW&B7dPQ&Y`agx}V+rEemYL7+K
z5zhBi(Nkr5G|GEYd61CO`lHlRtA}Xz0$}|fR4~8UZsZl*Dw_vp2P%ux(-9&!Ftp<c
zo*?R}t_hRsiCK)9VNWGKRZ}wyFgHPRd?c*A{+=~ytP}haM~s#7!IpTRB7KLMGswMx
zvSw%-m&K;qGEF!ziksvIEpRyNqw7p(k-7NAKznvWMMr-gm}7527Z_L9Kc0R*GG-Cq
zneg?il&It}wMA@h+;FZDCB-y6)dx122svA@TBB#TYM7v^$SIsZGCiY3iS&LeSikk^
z#mv={s!-}Zc~{LI{Q=?L2}N(nFA`7y?r5_)aNI!JdT;h`0pQ1H#b`H)f=oo8Xt4bH
zdzQ9#+U#irdyy$!5u-W6op&r4$*R=I;EN#SI%ob?Xr;*@(PLN0BRHnjfAkCE2lEOh
zhA;bB)s}W6H%lL(RGrv*G*d)Wmo#|kX`#x2t7?D45ii+;85Ug6pytTPY+#X3{@qaL
z`Ektn&a+LevfP!_(yJXd4Ns9=`tymh%K!jQ?l&Q6?>!82IBvP#W|ys*xnArl6UIJQ
zYl-^wH0SZ+uDR))%_fa|)!8l6BM~#gt3ReRhT)B*GX<fWK8d@KtVx^B{R(8zMDWX*
z1=woO7lzg|<v_95^gs+`u&=MSM<)aQymgUk!Y!|yo0=NamVx$|tDB(>mlqM_wMc01
zcC?MpWJOdkfzvbVCcG0K4`Qt4Ik@w!Wc(RWUNdwcqRWd&-$?*aigw8ioM$^SO(?aQ
zAz|jg4IFoFB0@G&x$q<uZAq!T5C~=%U=<9KB~~U2+O^;R;@Ui>zg@CuCzdiZ_Qxyp
z&&BCY_8pK=7$QAQO3{>-cQk**HcqtJsup^L9dt^(f#7b2rjI7JLJnl^poH|kfdC;C
zBWMiHf#%d9QJ+8>@HU6Ik5OpWNs+648l=&QmDtLnId(c~#4Rb5>uwrwkdyH$r$Dec
zVrIz?3Xz5f6vx#%eH2oYm^R{`PZ;zlwgeFX1uL_TzLH5%MccFw;0F^st2tS~yEzrk
zi5zsq;ZkP5&%SA)8v(-KK(P9j%b2i(!Hv7x0fBub0rb?o<Kcdj@83S8x#nob8d8H0
z`|9FeUmXHDYsI7f7{Xr7PU9Y~Z;dEoHVTCB)>w-jhRpAXm~%%E9W0A%j1(VaeDjCM
z7R&2=@5ai_VFyCDEvX*u0QS-a629!%;pW?uOrw+L`&Oq>f!!5uJE8jy68b<6e*QZc
zcc2p4Aa<I(;@;JHAN6#a&fe+W?+*_rvys%G4{msq!{GP&fyuMdn-4$Yh_Xs_zLm*C
zXh9lFa0&)2q;?c)l^Rsojt`n^@90PaA~w?XScM=yZD01*PDN9TYbrOA_O8kdd)XWx
zPLNY4<~4qH?KgT@e4t^71ddQrbUfr3{kf;<a_dxL_hIC2HM975%LP*i{CjHcGxD3L
z(8KG;l@vk>LzkF93eD%$){8s}qjL7zy|}xY!l^wakSK(EI${!>UFk^;edAUquLDO9
z3*td<{_4Lo6}J!{f00&(x0AT)fpcKchScIPzh?V_b6_I}hjpxCA+vraQDFVnHLnEm
zr>XKU1pco}pa_Z7`08bS8{5x2EsM3E_%AEWmr3?Y2F1PO?*t;h<FSq$JzDuPYl(?W
z8GH*gN*+gqF$q#xY5mTv9XZ_J5jLV*>I@C7CCn8?YLP3x%Z*F#)0<dFus4z><|&yn
zs<qQ)ACLC<P$93N2KZ90Q2hNkZf2sabuI~N#UML))s=fS+UasY90M}7!rjj#KtJ)B
zF`UD<=w9Ph=xGSLb6LH!2v}#;a_!^r^19i@IeH7B6l6ST7WSEl&9OV(ZVA#z`rbtO
zn=x6hsT*1E!PT%Vp#bkDF(r}M<BxMrT~1E(PRNLp{OR!ATNROB+X4r=c0(4tBrCtH
z&EcuKn1ZbJ)<rR5|A-}v4}(*xa6aQ&CQ6&;;}LqU0rs8ufeXeT6*LcbN^O_c6-Xxa
zY2xaGVrodP@uxapPd28{0H#%UJN`VyV&2p44|9npi>vl`+I9{IVODsWn~m~kYi5@k
z5G@sY7H@J6C)ztcfNd9AC65P<y_Dlu?0l((uTk5!I2}_v6R~Os?&RedJtKJplHxC>
z@kOr61NlB&RmbS1F2rK0Ko33|p_x<yDNKe2?>0LD>|7DX1gQR6`^g+t+JV~rxQZN1
zKYx@LA15e$W=a+iKypl>K1Q|KvZsfc$PI{E?qjfk-fhe9jE%#iBzxQR#bhk4$4O+%
zYoePAgfxUyMLSLI?BO_RDV?wkIR+lY6$j~r@T_RRuG{n3zW1e+xjo$(`%0C#gZsLG
zYA;_Pn#c2}OQ+GTS4(LNSO5I_tN9TsF5O|)ft-IPN3(QQJb_U@0zzS?Y|m#2hWA5e
z6sEo#8?_&W#D-XOls`kv4m3jo3i|krB=)Lfp%yDJnZ&x$<qgMC0~hn2pZ*ddD2RxN
zC@As|k9zfe&#5;=GOTEu>yLW<NgA268+ov~dWQ_kDWue4<YM)?!oftLDO1I67^dEr
zYjcRXKza1ZCD8LUwd3gudSY8rL#^yaLwTZ?Izj6=AZOu}#GtSq0?Q6)XU1JdmsDES
z@p*a5mAKPtUE_Xd3Go0vDc&{_ifcWy!d{xtI`Ro~Uk13ub!yR4P!8+H+0Go_CuBN`
zKUeT7=riA;RT-bm-?&GfHm;lRQH5bYlr3icPR4a{Vs$=dOk}8S86TfK368xr+qV1O
z<6z{(c5_O4q7ZE`c3f`r{!}?-<ohIP6!3T<dlKNXDp7cG!E!xb;Vs;+j-Qvn@Fm&A
zMCBr7r}Rj~x79cEP-*2Njh(oyf&&vOO-~J?<+$1c=Y}4`ofhb*97WvSAYq$v`Li2&
zzUMgg?m*J6BWe{!-q_i>vjEIR&Lqx|?$Wki5qSNQbF-pTpYg-2Fb{PxIhdVB^TfOx
z9H#W}<t0o-5g71iTJ^@t3{^}Gr`TDh?uxStykd75rp4S7Ncw7itbRl%jaO2SrCV2|
z5#00X>P3>#yCjyu!354s-rC;z?(Qa*NBC3AL*Sya&L}=dEowFA<*GYu_bx7qG8QKa
zh(Qgyl!WY%{7Y;Q<yM8jF8)r8+*g6t3cd$+n{oCA@`8t8CCI_llDY<@W-f6-|0C!;
zGXh}bqL`QbId^;U5oZjI#d;uICa~u>+W_`IKMbg}Y}twGP=;!t&Y@r?JxCG7ZMZpw
zFo1m;q^X%ai5Jh1u0q-Zv^)-APYSw4C&Z-CVg-f$b-P|LUf;_Vj|XDZWYAM&v?6hd
z(>k3RXGmVn8J`a?^k%lAp}Q?$d+yfueMxhQpkHQ7b?8VH=bCRha5||uHnVxAF0@aY
zS=no+F4r_DCj{tp2Swv(k;$ZPkbq!^T_n^XNjRO1Oi{`iq<f?9SAGQgVr?e~vq(oK
zdVoLI)by?*UL)u^k{`MI?xpmb!FJONJ0ru6osBw3{pw~2gHf-d;mod3OJ^oJI9S4$
z8@@t*Qz^Vb?KUY_mxZwJ3#7I6-+xH{auN%C-u-Ft&Cet#=+(1ozHhlUm;bL_S#*ct
zN0W8Vd&VzYw7&@}Gqmd$U49<=AuWw%)9aZYwdv|otNHi8^E24`=J1j~$%W2)3md;V
zpYm)txS(}PDA$9x&a=Hs&XgssOb(hWH9IN1`td9)n=i6w(?6N(&#>lqdBnf}g6)GF
zJL6o}32u7Q?NUDZ=WYktMwz@`*3)Ho!wTb=)5LvN=5ejPXz=pMic9M?ilw?<NGrbM
z3Jo=3+gP%5mTzysEaNU!g-v$@3Yo>Hb_l&=a=YKD&{65|ODC&E&Pv)>_TXpJN=@O5
z+<tART|X8zDI6;NFS|l;)@)|2;0+B59UER1lxMYYG%5UJe-_&-;3&XC1Uj<!c)rE)
VbB-STf|a0QOix!omvv4FO#o5AWcdI9

diff --git a/doc/ci/environments/img/environments_list_v14_3.png b/doc/ci/environments/img/environments_list_v14_3.png
new file mode 100644
index 0000000000000000000000000000000000000000..8fdb85338e76c8ee5c048917babb22a671ce4799
GIT binary patch
literal 14885
zcmcJ#byQr>voA_QfDnQN2?P)B?iw6IaCaYE2OlH^cZc9kaJNB&y9Wp`4DK*EgY)?Q
z&N=s-ci+8doqt~My}G)q>eJO#U3+!!y>_^=q73>w!gmM=2<URMlBx&@Z{P?BuNdAU
zzHk)vrHWt38%r?-F$9F#ShNQdq?i6HpsI{GLe&KEJ_5pP5o>jAS8auF0%nf(EGFiT
zrWP!o_D(Na2na%+0xwN_3s)0zPkTEDpn#_^#lJKJUfTb#St-c>rQ&KUOrfoyOfKQ*
zVnNQ$!o|WyA@Yu#oLtDo93Y@7DgE#8m!2?%m8+|h04uA9hX;!XCyS$tB`Z5WKR+uQ
z2P+2$^NR*E(96Nq#FN<pNcnGr{Kq(w7C<u>YbRH0M+fqM#x*f@baNG^p!mno|0@4B
zPYX}$|Fq-){CBrr9Ay1R!phFV#`=GPxmpAMFR*_k{|5V)U;k!K=%2v^G=LT^5{~xv
z77nf=YGy7L77jowM^~YLS^9qo|8t)I22{58w6N2bw0=PXUwjf_=ip`kci8_f`aeQ-
z{u9c<&-Y)E|3&g&kpK7~pyXoxGEtL%f++H0?f=93cYPt&e<J)}BK~j7`7iFvdWyUg
zV*OvaA@Xi@xuoGGlOC17sY^XSKeMs1b#-+;KR>N7VgLYu4^~~|ZlkBCr_0OB06^d0
zs~45)=f{`p`R?)I_NDiH`@(~-R6pPUUA=q0ytpj?d;R<X1pwUK0DxLAfJ?>l^V2y1
z5CDfZ7cN{|1FW9!@B9IP{io-%r|0K~os~MD=c~o%$HVJuc-6}7^W{#0l_kJ3{(H^x
z<k|Dpe96k~iKN@8j#bwOn*o4J?cclSr|U~LR=ca4C);0(bt_lZ6_q<XyMY0L>J?kH
zVME8T!=$zq@apYK%Xp9#;Gi%0akI6&f4R|?jR3R|1bO^h-D{mS866!xyn0zUywAo8
zTqt#eFV7s@U3DEimU{n&f@A+ecgWpl0G34^qsyC{n*irBL-&#A^U1FH!{0HM@x6OL
z$4;&{7FX*W;;Y7YrrYh<*y@s<mtc?lQ4@PN&%>>MJobJ=YlDDnY=eV?X3?EiUa?lu
z)m#SP?d6-PiAl21t-X`m&E?Uad|xk5uPS>$-Soj?XWrP-dSTPw{R0@lzuvfUk2riG
z-`|prP5b#^z$dMKv?8we=DEp(O*4CbYX3I-WHynF?Rj(Yv_>DkwZq05QJFmw5;{EB
zKYw?!v{-2Q`)Y&Tx1Y_k;d*y0(c3ECyBBB!RNJiC9hmyg#`>lH{D(sixFkWiaARq(
zbb0%%Hq2sobCGo=x23b8H+x`}_w&)roHjdKTKo`}<81u#_`%<evETJQ;cP{gfPn1D
zyc#f@Z9_m&Z(mc|QA@!0gTCy%oc+<V`GxuT(zebdFIMeh``z}W%<A5)za2dT-`n@f
zQbKI}^OBR3?QOe+R*Rs46?LsMMQ&^)`P*y;-fV2ep0UN3%@t!mO;-&3*A-Yaqoxug
zJb<C8zdCzevO4=}Mjb*&c3sR*@_&YpoTVAFVfhR@PTrQCE>v&KR#i>ZXtAy6{aRsk
zU13b3gJdRcKCWc87-{QmIbkH(Ye(C$Y5SzJ*(bSbv+l&H1K8ZPwb_8$Ky6$9aS~7_
z0s=XLoTQk#=h9Jz{Wo<j!of*r7a<AcEewtyZ|T?&-@i9br7OV2M^Xu*a5QnF%2JiY
zP2RIn6GML;tSlDw#*4j#DvZ@tO;yfnQ?E{UTzbJzS>G&wWlmCJ!;c-%Y+bi_1cY^P
zvhi_PMNz{p?$><zEhoSU>#5Jc$pEZ3VsXz}?Jq<`dFu4-5Ay%}-Hzgtc+2&f-{YwC
z+#B$;bGfzNj3_1|YtyvNoJFcs$K|LOy(whBlfMe>jRX|0!(W7w3BOcIhUMKeub9$5
zqBfv(k-a^CRp+`qvwz7JlbAMJaGo7*g!SeYYkl_IWD4~5M=tz-t2wgHqSFf8IA{mp
z!V22}noCk|Ofe`L`x0tjdvmGj6lhQQjhDw!o5_^F(NQ~7My&?_B4~DNY5LRe6lNez
z?J#oF(XCnKDv|KWoXfCV8Q$o@%H-CDux&@K_lDKo;6cbn6PmOVCtR4T^HFK45>6Nh
z>RY#)$lxFS*p`pd5lVg%bDLD$<-&Q6i+;N5B7ui-wkU~+Yx@9{OIUvEzOkCLlj`}+
zr+%KD+>bH*!4{@YR%0BPGperDOEBsxIO}<GTcIBHS%HAr$E&Q&rRsv~B6pX?aj(N~
zhK00@n(8b%Gugtk7juY=!8-;jfdv=J<+`0~vuLC`{p0+LE8nVOqeJ30<ZQ)<<b$2U
z>}vItd`usF$-^fn_|Z&ok@z}!iwswA4kb$Wh}W+S=R@jY#_mpQ#xV6sWrIeWS`GX>
zgdU`{DFFq;Ww-S_V=tP+KpLvlFHwYGdmcb<3y^)K+GDKJcZ)M7+wGPxlZ`Lz1CKh!
zX(zjctlpeh82aC?683{WPwl!_$s-?%Boxd+g}wi(t=)$Oz_>CvwNPqnJQ1TNcIM^G
z=emI(jyeP04B#1A=B4E>Ad1=Xj;*Z_4~)R+p}>KTn^kMAKI)c?;W>~_T_blODoJK4
zwrNOjZ{=EtCf~4HyXB`1Au(0krQP;`B)5pBPU#XyG#oeI%7mr<w#|=GZ=08o>X_%c
zmyQ}G9!yxKF^k>!WzN@xeSd9qd?2vWF-@+;X8HUkM)&xuET!b~aQS;`0c<}RhxJ8G
z&=DJ1^l)&^Ut_BDD`6j3j0fVwW2bMl>&fUe*oc@I_UoqvHhNu>K9?^E<!no#tNR5%
z&a5HnXDrh+Nj_Xrd>zeC9viBsus_)~LwZVD^qj|~>8XV2%V9Muo~q?Q5th}ub%wrb
zX_D73u93odw5G7>({v9&k|$S*G7#z&xr&T2Znn%ce`QW0cw;YJ5_4n>?}|1vx{b~$
zTbuQ+yuKjz;8Zxx9v&P-5gH_l4E3z=<5wzg;QhKG01R`)g>vTXr1iMFcuX9AUE1n=
zWg+y@$C@)hfW$y#I6*wb^TU39c>5tiMbyQbso+9)u28)MiM8s9^$b<yQ3pc-O><a-
zC3T|&+pK79qqbCGJzji(>+4FI{7QCffqL#N<t^Qy=elsfnxZHwtB!0)zm#0O&!5!a
zh`wnUUyo=t<1C5_DjBl=q~^l0`p`v0xtR48n&aold7U9@Oz{d4t3mKqOJbS;K~_1H
z%aC~7sm)F&f01C~mI&m?*jPRNV?SxzO#JGs69h9mk7CK!l&0ZNz%ZYB(jY?j?*~H+
z*R}p{=vX)$oXzzyK2Lu@4RCJDwaiR_6HDORA)MfC{VQqC9YJMqmyB@9B_gg~J=9x8
zy0U3W@f0-6{kt3SX;!&?!#B0)cj72OM+WvB2dwz%>7uwpCU-x1PCklIS+^Pv4E7r4
z+E?u;&R%h}Ue|`Zbo<y)B5EuuF<aI?daq222gQciIF=9Z$h6X!&Q<h##m)>-tUk<8
z#3GSJM1Hh2Z32X81w8XbX>ZwU!Ak8liU+lKDZ&Kvn~6#Owox15pEIr2pt=|h!9^dR
z7T8bXdy-^6se4wdUv?CF#==(pvqfC5pb>3c3WtjzD)W;x@{ivh0$+#0h0aW!uk{W7
zAeS&AQoeqm<QX}+Xr*+oHfT$smO)|uerSf%zMBB2Im@nWYHG4AZ`K}sdn<v6y3cUp
zL(!hfz)RQ-V!RDT!_THWxs}v;fA@pvnh7->tvk?Za=PC%mf5btjw{En?143@dn6af
z=iL^A>))O8fm3cMQC*{zK)33mxuV;Z>bP=OF<c5Xdir+gYgM3GS$VmfR&uGlpO~d>
z?Wvt(+mUcdbaE>`@&|n4B>EVQ;;$^adR(U}i7rYF>-R6uO)LN}nLhYy)6SGi;O*NE
z`0NDxiP*(tEcvRG3LEwt(S8v8>HVK*R*~TA^MPZ-Y%1fsF%EwmNA-66qtk4;E9mPv
z5M1p$_H=mMkA4<6*xb!4`{s*BsJUC!PqeQy$X@KdkWtn@Zf{SbhoGE8&~hAt!S)5Z
zDo#0G*1JL#)%IVm0Uwan+Q9g!qxV>DY+m+~tnH}+8YgZ)epMjXBm&6sJzvj%EhBCe
zxoTpBCZ42>PGE}@&56np?%;GR(6=$`U1b+~Pcn$;&TLvqoO~X#omn9Cww!DP$hsN@
zKI#tJ-SMIx=!C+37QVc>T%~A7S#-=&-JK|Id&_Q=$a~ozWz8x|y}j}Mms>PRo;W(v
z8S;ni_TBJIEv&NT?wS4s6i-a)>+EJeHi@^jz93`dKW*{ORfmMM6fD(N7^7J|tsy?A
znjMz4fok_#0{H54@zlf6z#gu`?5K-u$*>|_CciLaT9DH5YYSin7;ci%?mNw{{mGw!
zC3m9nlT<3bSFD5qBf}rV+AK`<or3*0c+KU9q^4kAZReDmUtjN3S@cMtINm;IgeT!3
zOW@5<c<alCyAe{okA5Q+BQ(>X+$DXq87Z=QnflJ{k-}-$d7t2s+9EO&zSkj><bVtR
zjPsOGmk7nq@o-?_r&ire=*_;a9kV>^_iycSmy369wtW;aHPUbEaT&t+sO!V>R@@l5
z&8PB5a>8p(SYxbx&}OXRYRMsCOliX|ftj`L<h`~hz}eY3{GdZUvcpaIMvO^}s@i|T
zG29J3vZJ<d)Pa+~UFMzF;T?+zMJ5d~GCb2@sb%~N@>~(xps_{fuGiH$MXmO0Ug@Ev
zc9j0w8dc8~wL~b!$A)Wj>JQWzVjuK<<Yfdhp@E(AlE2`6OH#TB*1NFw1*IJ-JF1VC
zdMVwyp-_o9t?+!*jZ*}S^1c}){xAE{jHbfylFz3@&h&SmibSEpER_ZL>lK-M{zJTR
zd;Tg*>c8Hfju@4C-N-kViy2qmFQe)V_PB0+AuvNxpt6B~8rZ<Zc@B$oj!KrN+G=$o
zDjaz?&{?8=)avL3S+)IE=cr?_V0Ec+k*&?P<`D#+A-6)3U+bV!Mcyw}*&PE(!jkN;
zO$E!LKv#Bn%v)B!iuY9*ngg6T{R8+Gz;ETw5zumu@1umqgokn3BLpdwnXUU6#WU&*
zCr4Ys;ePAJzu=OcRJv{D@TWoO;}chMkuyS9+76waqyN-LYqXCJk*XxRdo&EMq;c4h
z64231=7ak`>t+S#(nwOV_vBa5Nc*m5concG_;Rny`0x*`tN{!Zc+&PFhiNi=Iny68
zuSNgv^21Ro`;nFy8*U!WYZ~E8K<{i|HfX|npWq$@@=pfYo%okx4}lPf?5?N%F;eB7
z58>mFe2???E0oi{=Y^RhoeIaWY3%y^A6<Bh_CjfclpdGuDig*JCObU7$oSmZRO#G#
z%grispap-Gfh?;(Wu3QQ^)VPG;(gsOPf>C-CiwfWx)W7ku1@`4IP3?vvKAtD_uy0(
z`=@CIlINA8!5d-j@5jnpaBL?AFY^Z)U47dc><vJ~(%A|1&C=g#HUIm`cC#D9*WV2)
zZcg&<+zq={{Es(wA{l~D@@%pfx{A8bda=(*5$x<|b~*5qrG&?!$JNdJf^Kc`a0FwN
zwR?CR93k$d`gek0jNkptOYDWYRzJ(GEa3L3rgQA-EM8R>Btu%@k8mW-%YvRX6jklJ
zHiLfQw~&o3>mzgRn)i>S>M5p!I=?{F_5kiV83Pjf4trH2-`JdLD(v2=d3?M_^si4W
z|50tP;V-{u#z1(9F2Zs-HiB`gcnHdW2>*xlyUW(6=N}JSqh3?fm5mNE>!H~yix-{k
zgLB&{$8^wjPxt9|vTq(KYJWRlcC+W7t9yl{&Usr5RU<SWvG84?JAd8Pf!}=TT~>t|
zkG3kS^GyXX_o^v>z2r~Ul67_UWb^N^ODBA}l3g9HtO?)I36Z7*H}8n*4esQa*A$%M
zKSRpg$o18vRpe36c$j!v`7(==*2%7t)yFq=1MO}gxfYF2p?FQ4Z1m&S8YVdQmd*7P
zY02%c{aqYP$Q7X1^u}h;4BMJb>#}#=gc!ba`9o->x_ZsRUXCn`C%&aEBh*$XIIae&
zoEblp1Rp4ixD8*|rne)sB^g%$9^YA#F=UHwLAvEL%~ZoCjwbx=E)a){e$x(vt{e^D
zvhQq<Mx<MpDrur9`4mOp9n4bvDKDvBrItK@m37$>mPv%2A6b>|aWlY&{q1dh1q<B?
z{a4<r5Q%zmh^=~v=E<n#wu!SE&afYN1D%HOT)r4c8{}TVK<VN=J8#s^6gse39@KJ|
zEA(RrU&v)M=|c;%A&GJbj5(6G7l&ddjikVM19!zmFIgFimf<xS*689S9+W*(fQes%
zcz5|utvM2+Eocscsu{sq)EM`Dt;cBFR=YC4p7yCJT*laLKwsGi)-N!!_HICr)Tb9>
zB__2}?@M@}0~pvBRh3v>M=bkdg>|r&$gTp+HFgQF<a|{`xVC2ng;Y}%ys8gx&NdgU
z=@c-#u#Dy-XGe4@Lj+{WKi*om$UyFQItg<7old@OG^Hw*WnvZd)_>mZ?#o!0a)$D4
z=*YREgV4r6-P#fwG%f%k;i7M<%&<r_A*R;;zav5O0&?<!>LuJ=<^mpW78I(F1^}Cz
zFCV-n>1gAM@#~boz@Xvb63t-4cQjQKtTw)XKALf&{UP;`_SIpQLTvY<)A8!yy2$=?
z_-$|Oo9>^IN&1Q<FP(MLT3vod#f(r9F=+XANu*{v-y~~9Cj$!|`wT%C_3nw9NISjF
zWukd?HU3Fg8lF@&Cka<mE9IQ`FR~*mqJ;^jv@^>493|Ej+$^CuAx*ai!_IAg2-g9p
zfRIay?>$Jy7ef69obouShfAozaWbuM<rJhk(iQ9N*~N@kdL0@=FYIbc4oSm)RN*!w
zq4&ue{ZJhlIw{k!^4SsxC2h1^ZTIfxosNv0_V73QTk87~S~};-#079w&qcP5BDuR^
zUev1cM=>Iy18(@ORp~Mb|A2kBXlWQ{c@f{>jZFJj>m6ardCXpX+(Cn{4lG)iSXVSv
zr^e@XyT(7fgPr$qwuEE6^A(#`7cTVUTr^!>a(<PwT}29bB|w{_#gs37PNqv(vD%Dx
zgsEi@^*Q~7h`zOVDcb)=w5}9z1!)<Lb5*)|);MP|UXUW)Ra16?1)egFauw9LY|^EL
z+hK)+H&jokeKrr7EdBNuVY-q~v=AbzrhZ2!W$4AH?b1fk5jbxdhp!lEr`JEu4XxyF
zT*Jp)=oFI1Gl;lWIjipcIwg*KUVH+x&s-Rm9-na2-4SU?S0JvdML_!6CQa<)@v@UX
zJJez<X2AD8SwIWE-gw<@xu+pH2cBUTS){=)J6Bwn87~y$gJ-d?`+od9AMq7FXn@>~
z-#9A|nu%BNoPVh+>-C!SeC!gnd2vSgWNsR1yL8@WyF(0?5gW6!-QlDV!8=!QY!mMl
zTkR^bp)NG`{J<6+j418pLMqKEMxE><R^IxMV4<}272_K3x~JMe6N83u%*C86GIiKz
zk`>w0pLLpknWE7Tik4~)O*~fMUz6dS$K=1{DnH3vC_JZ5Wni+@wuiPj4>k2%Im}Zk
z4!6swq#nbahMBA$+j(Uls~OZ>q4MD#T2(&PjmSN}tnXyKSRrLU&t@lci%z^WCg4#A
zee;I?iSh8BArMa`u#JI{F|=dHM`?J9dUynMWqMTz=|8+-JL#XDZ3bZb?tE}_X#H+q
z_~qu?_A2cjMfE(*t`bWumtq9m+pGO?7UZItSq$mRSr}r~sX8==%73h>A6l5+H)5F~
z?0I?U<|itdWHPruG(^p}IRZX!6gFw6hbs&>X^Wl|^+jLL=oUm)9WsvMYBSCc-zEo@
zfEimELg@bJn{*MhT_rSoT}d=0cXaW%6r0jy*=<z{#&`>zg)E(j9&q5f(k`~7zy-$K
zShy`>e|GYyTs|3c_0A3$w^Cz){B7e6t%QW!SE6!=(aO6%EwG%vtY0EV)}|h?lQ*K>
z^5V&Gi(v9*PIrRs2Mfnj7$??dR!}No*JwFenEHj>)dxcfHwGmuYXRRyp?nB#Ughq4
zaC^s+JUsp6t>0k<eZ!YTU$R}{<auF2C0pd%^q)p`BC7>m^Py5=^$obmkCxRsifoTO
zOccLHsBA(FfxW`Yb<3s+7lw*aEp8<yhhNKk&%9GszjB*a_U-RDt}7buK4m&gGq%&U
zEbD~Y&9;vnyT^OqY1r@`cq(DnJ^mQ2yLS#mn$3jM3A*X}-Vguq<kmadCExz>gSMqJ
zLp@mVPq$@%$z&MW=EAq}Zp7iTiOKY^OUA{E4uWgANHW9&Rp?Nun3yGX&}=g$8T)Ez
z&%0p0UK;ZvN8?<;+JD#~)!W5Lli#6vBhMxYrMa!rH0J}^Br>|5OU|Q>piZ87|I+s9
z9`_$gR>q^Lwk)@y&Jf!~v0b$C=~|0>aPr<@#@Vou)j)DuU0!Sk$#Nq1M8ysNd`P+q
z$<w#e(5Kf$ndHZ(bdJ1bGI}SoUN;1mx6S<pBoME$C*OGV<r6z?5D^adGFg|)qC<#j
z^}slp19oeAHB+8}NUXNwuM-wW3%7@(au302wDOouk6Dq#?ll)<0DN(vHOO*!FXVrC
zCV5e#u6q4HIL_RV3GR~O&bbYq0l^^H+7WC;OGhOD>5Xgf>EEM|Mz3&j!vfLhUgIcB
zQd5--+0ZA3nC45f6}(m{myk3>EPVG)q(GB8{f^0oke%@JYy-()pF4-O!fe{p^ePyX
z>Ve><0RVP#dc#g29a_6WBD-+GSb3@cdAS<nT27Dh`gnpNdlB5#sOwfO1m=|$2|GS+
z512>B!<z#t^I_12FQ)(1IuF)oQzhBro6XN2<HNY*7eA_9b^ajCbNgv<yby2WuPJY4
zGvA^DcAIsW|JKOuVgr;|!HjKSe`T0$#;9%ULfesbx3DCot+fF9=R!ZzdSCElOWO;7
z+H5o-(9b^?x+PxTm$z*vr}Y;z9~;zRU4rlR%P4OR$Yovb%q{o(coyT{Y@xj`ucfe2
z+q*-e5j5Q4sGvGmL22VFyc_$MBs6u5wmkzShCEVPK7Q3L0F;lO$D)V!^f{r@u#U<F
zuaZy(*I#5M#t|d}k)V4Ns^phZd*v5Qb=>h1x}{!LE_M9RkIq0(EhckwkB{lA8u?fD
zmHnwp5m;sIntvOUwwjA7S=+NHMF6jIKIpZss*c((_oo%sZAriReB{y)*Y>>Vwx&xA
zzgj@;3ChWtCfr@Jb0LX>B!UxHcb>E6qbR?w7uIYpXXC?hwXDYZmwZMEdW0*bPVf3E
zghH%-$%n<UNU&4UV`vED9!VGCT&SctvCr@DYYOVTE0>Cmb*sM1?5mkU*erH&u=WjN
z^2#PeBB&OJ4j)259W4v?1?LaaeN70I(|`6GY=~7A-R;{a!$B1|m3%U@1dw?EvP@+z
zEu*6&4-SZy-Bl_5A_*5z&4Komt4p?Ju$bOrAV`vB{6qQe?0O&#`?m@nkf1aE_>TDd
z%3f6b^l|$w>feHIL`a<+r8Nqm1Rsp44nOKso`<;O4l*C?7{-z)`}c)9#f>4IyXbN!
zfeL~^VJ?%e9);t;9q<PEl~4h|^rB?yh)iFWVC5gSvC8E$r{2bxu@i6#dvlLqTA%V7
z^lRV6Jey9Kvkq-SlLxRmGmtNp^Y#rvDhfe!a8YsbJF(jK%!{KP!{*9rUb*mR4@rgc
zV3$~z$%&Z>40$EYjLIT=<x6-?k&zA-Oe#x(OUT?I%NwU9biV7=L*&6uHZuk?41C3~
zaL{Au%rcWG6{%ZS)qNYdx?5fCcyw!zw)FvKe_(M~{^lr;A3~wam;_1!T^AYt1ggT&
zk;<Jg3brU2YFaG=old@x*02z^pv0GeXv8vYp<G`Q@5|qNT0%=pSmA#=4++l$^{3xa
z=2irwy`#L>-e?&@-w%D%XfsvwAnHyzHq7ecV1@z^$(oN9<wsx1Oyi2)uW9RYCV^NZ
zKuGJsNHP7wyQ7%6?d$okKTFM6ST4OsS^1sNys&ffxcfdFDDhK%Tr|$@z3(T^N`ZuL
zhi-07?sO`ej<BoM!Tjotmec@HS(i4PIT4rTyCboOzaVPRu#ZvDxF$8)h5wg7cnhD4
zL{=xmK<nmxeFdSQ;FeXEr|A*lIb`Z3u^35`nnE29zhOp{Wz)k4g;^D(N!qh8UV;f<
ziSE#uyzVQ}e9dOnwd_cYp5<qDP%<^u*vi{}`h~~HSAR;Ow9YUxEWSVo39hf2f>N^E
zYQaDorb7h|Z7z*vqJ~F14n0}Y!cjs|6c}ER*#!cuvPN4~hNoZfH4Mqzl1!}=3znQi
z?1OpmuHbRt5}WBN<1pMjP1(m#MLcCdUSJ9g_NgkyZ5cd&*9(TE7mr@QbCX97IHHXg
z?cQtNef|UdZDMJZw}V!Zv4NreE~rQCao{}Wq~1DgK4n3vouJ&N|CkEuBz8XZWLhq~
z?fjeS<bEk$lubR5rKS)=khs%GQjRknjPjj5QYADR<advXC@kF<@&vixh`X9v%wx6V
zw+z3X)EGK(bQC_}OU;}<TCLnjN%XDEb_c@64b?28(4?mMULAW`*Rp9_4WJ9@VgX8q
zm=(%oH@qbFr)OT?i+YYO$)<2aG4@(@NCIOyVHW=C7<a@O-9ZP3xym20JQ&_m^ovF=
zZ|aW@35cK8TZdELlD`r>xQmUsjA`s`L8@Dw$SwRd4#6>zq0#G;*Pw~Hyqd@+;7dS^
zd<1(8xi4MERm#Y9=EQI%WIV7^b@{!AMKcMIO{{Jr^BI<z*EQ|hSJze8t%fcO)Pm`}
zDP4o)DB$hsv>VI(bxKM<;>Gj13f+)-Pxb=S^#eaQ7jwzwDf2B4uScfw)TGy)C--`D
zwu(#!yV7xz7X+cImO)uCLfGow{#{s)RK%6Z6Snx3+_3z23qG@<QHCotb`Wa!gNV6o
zdQ#XVMrX_Ly*p(=1qMpq9y6I3W(Y>U<8RMMv<Mv(;X5UM38(5^PQ)fs>NS=^9%+i(
z^D5SeC)M)>v$Z$S_wlk0ip_}dt-HH?gG~BYr5F=@V_s#NMBsZY(;>Ymh%g#0v;QYZ
z`cksZmLFSATXWW!=k9$fYdi(qpila)>@ULv?p2>z*C&t0Xd}yyKM3LDM05EPPI=vj
z+&OZjd9u&7Sh^FM<W841owg(6_IFjquPX|Fi8_q|o>On<WWF=PkwX^i-X*`u_V0T$
zpa=d1>iY)52aA0DF7ng*Fwlb{9^#F-ACYlEP|F~{<Zrwr@Cg_n@@kSLBwSoaFks%&
zqjhg|sDO|r!ac(QW}l7fa4H!9qE}uQh&47gc|8IR6*e_7HV`GPj>K=Fz2{OUbV3)1
zack<wWNFL&%?Mw2OYv2iH=41!k#d=AZ2)|1!aF6bHa-mFCR6CSQAaeaK*m4q`BdF+
zgHE$Ay=~^iD&f)`e9CMby>-ujP@j;I^FSnf6CjD*EPakyM6v-vKrqn7!(vTqd%nBo
zhjcV}n=H>i{_V|_V+d+>miber0~wx^P8@aE9GP?>$2lUeDLTDunp?<u&?EK(7EA?|
z&mSV?<K%WvrAwUt#Xdp}3_JBLU?Y&l4S^IB;o<S7vk-cU>_cWzS_O6ncOJjxqX~3p
z3e0-zmLlGfOv)!=!}{4o4ZRYb)$CWwB|nY1OfUKp1oRPY^(~Z!%ww1&uofro+kiGT
z@4qdyHaZ?JcFiKeIz=o@7DI=Wwz5T!d3=3#uxuMcq7ua`Sp#)rX4c)tGxA;)t}%}T
zg$sWR>(FG=XRyJ_IXx?tZ*WdaH#hxDvxS@?T5D2qMo{;q(EZ(NLvr}t5uNtt=SCOD
zT5t6I;b~96dqu1R-M~B)h4VNOWVkYy{%YlRJmcB~-iAS8Dn#860hwrp_S|>I4PA6o
zh<j#XQjLo2EZ|a@il83BqD&_Uq#6L)hG_Jq5<M<%y<LBgQ>)_jL?dcOS)0>fq%?jV
zvC7FCP(gZ5udS~*^~Dh();P_sN4J4onOweAy!)d4b92u^^Xr;H8iV$;OQTS}SKn2$
zWL@b$XDt1uosCZeCus8a2)kgeEbe0~{Lozf^-aCH_46`1Nm>Wmhk)X0y`U!XfST!z
zGp#T5Z$qLgXE&y|I1Wy(sEr0ZyX!4!W8tpP1T`N?_7ZRXuP20yBN$^hciG+tIOXUE
zFnWT8SW{D9mu}1%hv$<=N9NNZTgCB~#50=mM6?koAfT66{PM0_MnJ%I`sZJO6<j8V
zg}Ax9T*gXqtpmM=kg7^#LIwB3r&^j7?Uf^*r4>Np<Kx7bK1(%PPf=JJPLI&U7?=|X
z5V^R|y136C#t4)FbkQRpfq+9o!Oy#Mzqz<bW#gyNTuALYk`}Y^9=zFby^MUn6(PUx
zf2@-<Cj?uD3Tu4*^5b_0lHvMd-dOR%nZJV4GaA`Yww2Ft$7^`fheHN^gH#;5RWo}Z
z{aJW=@vdP|#x@mf9f7c1M8j;<;8HID5p9S!9HfdLs<}m~H}Ak_(L)l{K@$f+s&#M@
zSw=I$yy$DJ5Y-~9iz<B6=TFn}6Ku3Hu|)u<h_y!qDivueWrM8ctX#AaOayb?OR7JJ
z6$Ll;3(hgI&L!kFf3%uydh7i}x0bCr!lsMOMo92U=0~(!X!`Oz(~ogoILr?rX*54)
zH%0eVycdD&4DB)~Fo7RX_3Lj$GaqX%=WoGheB-}GzkY?bFB89Zi=SZCytxoET=o%J
zo3P2#nVY)Zy%c_xy^gj9V86fZA*<y^9kupef*&O+)^sSa17-Qz``*A-<bqtooR#1<
z5X5tObWtI+dgs_M2xUwQub=3`rDk4OD-{SvjlP||iv^>8?=;D!0&|AlCa2*own0$A
z4!xxMzs>EoE`r<c30W^ASjGNYMEJp)Jh_hqyhM4UZ*zx)H3c)G-LhY!$AjVqO>$(k
zY=JVk?9FX04UPZ^4ri1b4{TrX=UwErt?pefn`F!MsVkaFyf+srde(7ytkMTKpu}Mk
z7YB=RBIKl6$2j6v=38EmKgxW!FK~#LZ>8`Qb3<p)*xC_mGTl=l=WIW`<F_zX7QgHU
z^mQ6&cC5pdJ)MEoTol>PqWiw=b<P?e6rapA-(Z9L6^vVWdE_Y)a*r=0CyD^q_mDFn
zr35-g6_EA`JK5tAK}||HR|Kh9eBSMzvfqIZoqgm^f!z#IPg_`rlNNpspH(@mT_BVZ
zMtE@_+bg4mo+~3qSCj)l^}w$ZQ&dB{{mb6gG=Dt@6(24j_D2gXSk)8<!*E-!%isJW
zW2cH1o9xH41k)1Sdef5{_3e#oYX?jne`WI2UB2SED2=e?pQJM&jQ_HgH}`yIAv;&z
zfW}L=f5?RdQnSq_u;ZD1m{eae4C+D$DIfb?$ofqkY1`rbAhJpIL+Xt3tJhc;rA@BB
zRMqb*A72vqO&b!*@S78DJmTFcQ0up^*=Z`6cLh>EZgD1fon5&D2Z>$1+49-q<^8iJ
z3fhM0in!as(4);h3oOX&Mpm`>RdRquTHm(oHNv_oj5Zf<5343SGP^rK4$(yZhu0o}
zVR|j_cwn%&3)FsepbI<>w*$<2wBr&%<~@D(K92ed`H$zj*;T|Ow+P9>_O+-OwVS1p
zE<6^K*IgG=y+n+;$NJfgLTmUwHVRyvhA%V4Z1>E0()QIlIXBE~l8>MA6zaH4h~(C;
zja5M&3t3Wd;a0A39%(!r0jbRSucL+Odu5sV#}b2oG$;i?^=g<?G_yoNA;<|Vx^?Pw
z5h+K4vcD)k+7};O<KFtrx#OoQh(8W~w{Xfr+37z+;hFz#(VW71R<hImq!-0Z=G_Gb
z$p_ac)*B_upp&hY#-g^)Mm`eOY)8A;@ukjkIXPlF$~Pf5652KOK;aQ2v|fI&&m|4I
zo(a4kDBZ31Ubo9^lkze-q(%1jSNF1gzm3&HXRfKymr5r!aCY<MqKos|@PpNfwt&ZR
zgtYU2JNDt$IL|?LR&!3|QZ{i1vmV|6))YW~zx38XH6nKsO?It=ExYQXF`F&MCUy%I
ziwPDrTY^!Vo!_Cb+Ogi{4bCjA<}nMECEzDJ_6x+XoC)F6Gf=TZKLuIm@{m8@FYXAA
zuRpdzvq7pMRl6KTGFoV<HOx900|G_$Q>zBZ?y~$AQrO4L3@Mv-N6}TwdS%_uXrUos
zBi2tj__~bweTwYtb)FkH&!#f;64>=zaKC-u$Cart!!~rwN@L8(8;)TVJ(fw#3_hFF
zG*rqEJvIYr+^3qVbS0jU(}x&|9yO%cDLK#YV;x=3JJMmS?CSN*+g!|$`|V}y>!U9P
zZXTAkZtG}V-SItT!SOHe=>zkn&V4dd#HeH(%5^HU>782i_~`R*6xxj_<Cq$f3su97
z-UZP=QOK;l;hP_#%R*H_CH%g&M&CJgrwc7cySUwegfAQK<S8ro-t=i$?)_2!TBKT$
zv?k@0KoCJ}y;?Ey<biI*#TL__!p_#n%JFwlM&gZBIcA%me$Ax%`!B@&tqzWwD6Pl(
zqgd17S?_{vNgpXC^hp&cepdS~@i{@GDecoaZ0d{X0MjCsZJ(Ab<fc-iEu&J5$)foh
zJDzhR)Dbs%dq=Ts%K4|&A_7r0ZOw@laNxwnDRvpO0ujHRiSP8;{E=6>JSDh=$uu`{
zwhb>QzMOm83@e1gJC2Sr$_F>t4RwlCjre$}H?jNBQ!C=V85?g;?<gCLi5sc)<rPZ_
z3l3<LiTAEAHA4za@^RYm1R?{GWs2e^qx1v?J+_!-6!U*dIWn8;?T^xIV!l^dN_+g_
zaDBd*hk^M;adxC5zr#%Ppl`s8-%n-xCukE6Y&>!FQ((O`UTgD@54YE8-qbiaDJ~Xf
z+<07n+5?4WAXlmH9xQCn@XZ{DC%qa=Gj(y87Qq!GKFX!G4FDCfD%&N9?{_hB=YQ=-
zW-m5OJ0$s#ICfquucxObeb4g>&M;bPQDiTVhzs8as7?y#*SEeB8^|$rTw(gf%DeCz
z(^?WXm#We^DOjZ18}l~8dq3)MkUPic{#gE8X4%jZ7X2umP7ZHbN9sD;jFDz>)&d?>
zH(4m^JQvwWUb_@5lg_3P?_VRg{A!-jOhx&V8Z=vWP1~T6_*Jhtb+#n`yj7k*;cGvj
zV4CbCJMYt4(z{!$ErUFirmi8`DV`~^Wn1dGcgPm2M@)hTmAzQfJpxT_cbr64w!e~f
zVJW>QsE|kzSxg8zBg_OcnvWvzoVdOpm8dmhbn3YR=H>alb(Uh(JrX~dmI~2FX%z;+
z8f|3z5*=paF{k8D<|RRExg5a1#_topO8t;qm{#s_v+&%6mFDN@xe^vQ=Qp6QnDoWb
zu-B2UJl^FbAhk*nTTAkjqMe2p9Hwz8T>=&6&DZ%x@|_qtMj0@9$bm{b*_kxyFAg7p
zwT1vee!(A4fsxp=aM!o`3F-_9IFmti0%)7rDmJT(9Vwl!-57pqLC7MEa>it_j)Y=x
z_BDOD)Md;Td1m}n?@39+e+zdsV)|FAR0*VkIN)0^+x(&{$V9>o^tBeA<jktPMS2<<
zh)3UWqMNU=k)5mhsjs7@8v>FwG871h2=?FXbX2YMZ~K*Sy-DR8FF4d|<$j+S)1uYy
zO5id#{)daRi-?rTpZ6j997yt#vi1bx_OgesVBN%grFT3Zzpqr%!(MgaKPX3W#;Y^*
z9Dk0PnIgXd|6~o1SDT(h5=}Gy606$ptk2MNnO5CTv6A%lZ%tX{_o)639#`kokyYHB
zS~)k$h47+BeaL9X=LJYcViJZMh`GUL6Nb`&@K%-#l!REMYZWeo=qKIoKy5zu`Rek_
zTCRv9_Z(4y;aJ{B3<+i;@<l0QzPb5N1SHU<tduTyr@`8-#P;k>t2NR06#5%6LqQnz
z2Og_la@hLkElo_<=ppN3>Iq*^)df>$PAKRA(k8#1{&Gl@Sjj#;%e5d7_1H%(qW<Ai
zSk|r=*pq~)w1d_AX{q{y2E%)0ncr;s@V49xG9Bzodle?KO>Nc6Btr)I`C?zR?FTu^
z$M4{j<FxekN-0M6>cF(*p^o>{P(g-)lUMMn+^(!|@0)|n5@w?m?j7troONB?bniq#
za5BRFv_a>G_$<qo-Yf<8M5_eu@(d#YH~S6?yV!A_=k4duD(vbK!qK|yR)|05N#_|i
z4A6JJ<k8z~D}RpD#r%^?r&*FIic!li{!YeTHQ7)#2nVmP3sw!vPFwle!qYq*o!WSU
zkG(rsKM9~s#GLd1kdkaGI2ce~Lu<r6lDt4E*-WOvgL)H38TgazwU(uPQc<Ivk7C)r
z=#G;1IMyeh&csvYyJoWc3$$!$ghffr{%(qpDs6GkGx^zt3vb}ap~6Wv(TPr@MI0x+
z_NLNmKNcj(J-0*dIC%9vl<q*JqF4yk>o)T5FRmdZwMw=%Lg*|0Ep33K)$l8%L|TM)
zQueXs3(o<L`tI$s_ZjL!A#3$NMP99OC%0~jIAS8u=%2H{kpH%bZsQ}IhES}(`fs(q
zqZWAm4hswb#87>I<J{(7voQxMB{=FDuYD6ofQ-C3JGq81i2X&pWUo3*ONRIxLU{L2
zCz4kPU=)NcQiM1V!WY=TI<@^8Ccul}E$5MrsqpB{`?L10VKpNIJpU+Y^5ZVvq+?yo
z%Gh=if*%09+v+=?=Hc#cb=QyAaaSU>g$eU+gd8%&K(EuhTzo_g#ddT_d>8{03*5n?
zx>$|O+epXK)2{Uv4J%r_w7?&)aQxdncsSOt?Y6X*JvodD2|BXXHv_dsgv((MXib3F
zi$VFy1OW$2<ot`V!<>&<pigGQ!i>}fJ`ImDyYZkeueYG}{?_C|2u#z?mdUPv2&Dau
zvP)pR$Sfsd#*X18mlLtfa2^t#acVisZx;(jkxFytueo0z(s6e^KejeZg)c%m`$NB}
zCAUGz+|&C-iBJ1^;Vy;xds~Kk7rE^qHvKk_(WoK@csqz=`{f7-GP@xC1Uae)PFnAF
zo)y_N-zkCHsvYA6F<_`)8wDXkj}sl5pR`%airzcGNd#Fqd6rkN4jRk8W|RITy3-$N
z;yOWZ1fg0I#5sX~4S;+N1XkZQe^O%b)rx|aD`{Xi5lOG`Y?`<*fm2t3{`;RV4y$l1
zK&heLBPk+m_~FPGPcuNkBBW>L6I5g8k(+jGF@Hj+rg*j@8VIv^S{9|%+ReVNKELb#
zW(nE79z8Tdnv->Ev=cNay1uno(`?Qx2C~jL0CM$%Smw$Np82vUIbm+2pW=6r`0I{M
zHOMRT1U<bJyys%{+KPPBIHY8bJb*5|d(efu^jH){*4_7r*sO5<IU8_wFXfB|q^R6m
zD<}%O<=&Wo?Smx`!%OL8><d=QSDgdHq`Bt>fg;w<I#s7EEE$>Az-lI?tyI6v)q15C
z@hs=bjz#V|!(GE@eG2{iz-uY#j-xb|$cxB>V7eiC_j@-|KYThZFurxO(YAiH{@!)<
zIF8o#GDU}#ZlRY=%w3ygu)czHI^B@|XUPS6!S%VP%lr*OaL=N!+8p@fuYcl8tFME;
z{JubS?+`S>-FY24d>pGGR5XwR%2T{x1vS4@@i6QtKFt6=GgK<*7CBmS{ZxdNTENSs
zZ1yaT-b8u86!4a}{xAj%Ul$2B8?BBy@sE-zFb*x&+AVT`e;-%lU%!0qj$N5JUS-jo
z7;ZGmtKI}ZN{p)k0egZpYR7eaU9zy2_BpTSG@y(8)-wG$tj@wi-EJatck>M*Hak3M
zw5~2&WCXMi!GTeRDqP42!bO&?{lM@(Ah=ofts@`2&vPrAaNO+>!Wg@i{g$<y{QjER
z;&BLq)?AM9a4^HQG6G&<uK>f;3wQXyv~?`dc*QKn>(N!xtX=tdUbp(dEz-DL@WN9`
z{}bUv2kim;p>#ypER|u~bhINv`Y{tKA~-|%4UZwxRwGOAsba#-h4l}3lJ*_QW-|wr
zPp^hdqqHz*saEWZxnQW-Xy=`5_}I{2S^X*^*&T-7$T;+n!QdFWYgh<Q1RcoBIn~iU
zWHC6g+IwI_pY7+Q=kC=X*K(CAd_p0J*yQm1Y%@9byH*|pc5mTZ=~bj;4>$DZ+7nx$
zgH{`%>;42#&d(EW(nYYW>reS6o}c~Ep<}wMw17ou@6IVike*>2PMVay84t?W-8M`S
zHQNsz<lI>*f>Sr@Q$_ZF1>dH&ZMWU+^fy+UcVM(w9`nd@8xo~}&?v@3U8<#<xQmD2
zL|tz~$ik-`sg6i>xAhy{9q}y**w%rpci?U8j-`xWWX2-P32y3@>fVx|RlMH4WopwQ
zVJ+1n>vR-dNt0h*Grj{{CuFLNP5Y;<8@4-;hiqAxFO#IqWNWl@H4x|u1M|KakrFHa
zgPHR;Jx1QEqfy&@B~Fz^C2hV*Y6K3H`butJl2tCLRjmj^a)qIDD^=GWLV_t8q&heC
zDw`UEbBr9`9RwH^h89zRzjMC-c?!lS(PLq^h<MD+E;>=rO&KgWgocvZJ`I7AMOWf!
zL7GjoiG~v&%L1!97-SDeLPW0)1?t3ijgI+JLKfxjI<h7cl8B)^Qhe*0?EapD_Klo;
z#Ebn&_&)9Q5|4_hoS930n&xQV`$mNYYxH~Pk7{iFGas-?gbxeE=D@qs6Dsuw>RHRy
zPdDiz@USs=qX^Q}qUMo1_Uru><^_QZ5UMbFH}C|hYi*Fl)3CBYVRzoQ%hdeFGnUv;
ztLy0*h$|w5*GT_d={O*8c?kn&4tzpt&jbG=bMPvP5h7g}QZc`5Id@Z?yMHFw9=I-L
ziX2P|;N^u6)KVgl!x6qi5WlAmJQHE8Sy~#ii9Ei?aAJBz6|(#o=uB{?@&0;sNBgzx
zd(DgQA5aj-iN7MC7UWZ~_?~VN{<quY|F6PldrS<}e=NLt^gn*f_|o`|i{B}>_ACpR
Q`iCtir6^e?Zv5l_0d6`;Z~y=R

literal 0
HcmV?d00001

diff --git a/doc/ci/environments/img/environments_terminal_button_on_index_v13_10.png b/doc/ci/environments/img/environments_terminal_button_on_index_v13_10.png
deleted file mode 100644
index 4a9a4e65d00bebc96d4c0414a016b9dcc64f95c4..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 12536
zcma*NbyQr>)-BozAp{5(oZwE71_B|_NN{)e0Kr|m@!-J&1b24`K@#Xj0>RzAahHZ}
zTwi|YeDB`xy?gH&cl}X&Rn0l8YE{+Vqej(^R8x_~!J@zd0021ha#9)qz%#^Ozx)N-
z-&D$L5Ayf%%vxMo8~~_`$G$T||C@i}t|2P{s2QQ$0|1_i+G^=}=qW1+SvWg#nSF9L
zx8#C2y8LAU0KyQVzpkUDhZ!xz(ZR`G2qHrNFNV-x|DR$YJ?+0J9`+*iddh0FlFn|H
zwESFrT-@}cShTdX!fv0egfygN{!9KhCqi%I;o%|#1cJd}F7R6}XE$pgkD#C+kee6C
z%ggzf!RhYp<Y5NkbaH3-cP0OCJyMqL7H+mK9=6U-wExs=X723iAwp08PecF1{@qVY
zi0%Ju$;th{!ulH^@E-)o!^I8!-^n~|t^N<Pe~^F6{uS51n-l)0G9hhuOE*bpM@LI1
z4^d4EH%m(=cN=F9;eWOC{{jDJKmRRMvxQhX=t<fBRl5I;NtB28-P`|?{r{o=tyKTN
zN#6<ncjbRW{+sfj7=%>aZ2xxD?4Lmt<q-z{FJ=G57Y6<_!vAf=|2>`mD*Zd3qFBPf
z|FJeiu~4}7od5tDKut+Y`tk8mz^3iu@8j{Jy}g~AoBQbK_~hio%F1f_4bBnsv$>1M
zeoDag<Ky}HU)Ih29lUzs;_>c2I3)ODsdjN`5ndl?Wff>;=_zR2`PVx~qV^shxq&YC
zS36dYH8;0+SMa9$n>pv&m8+$x?_jHkhrQ(Peb0(HcW&;+0IR#R*_E5ehwH12jg5+c
zc26s-%gdW19?Zs-o6``d!=r=6+ea(#_lL*Rh54DKI!{z)RCiDJ&E_J%eM4+)%*e=S
z6PWw{<Ouorc)PcW&=uI(-m$l`+<?VicK+0>+OCiH)wgXAYJgXiS1&e%TUq@Dza~Sh
z^YZhKg-MGSuIx+a;;pR{p=+qA5>#&des4x|l;uphZ^TE{P;1NLDP(_&?d05c$Iksq
zy{nk_)Y#PQuhc-xv;h}am*Vn~+tXn;LnVlh_YwG`m2D_DP;VUdxO@3%9sP6Y-~l?d
zQ=T7ptiYxR<SzQ+-VQ(iU6z#CFxH(PS=_t%vwv)%@sFCO*4QfQ;_>2qWWa%&J2f>)
z?%V9*$-`G?y~zTXiJrQuIES0Pew&!z=0SzxAye_CP2jY~&)mS0;?m8bihCsdQ^3!7
zZtegtt)O7XzP=Wp<i5F<oWtp#I)%%QF{M$dr8UDlu-xFHV0&I*_~-K3uU|Yw!eH^m
zgAeytWo-k<(sX1(K&ib|(f3Mj?#%9{jP<FWsj*JKwml)cp^*F@ZoSGs?bTW`0=Zv1
zTT?nx{=Tg~eH)zvjbN*xG~MaSE-SmD#`?yKpOu21O*vVfg<z}gok=U})SFFM*{_*j
z^%b_@1QT7pdK>Qc^1hLZBy-0EZe#z1fR5kM+?7>XRr#N-KG%c?n{@x4a<pxC43Cx*
z;Xxjr?w%sQ+PCvKB_mVAK0CI1>IhhZ%Mq3e*5IEx+}x*Y-FlI|n=_Mhd#HD;)IN4<
zNArs*;btF=l(KZW+j3m<U4iw@9zT91pfV%Rs&k^gCCAuv2mY9u6rd@0*4D5n)pK;e
zmS+b70JH#kDRC{x!eNG~oS{B-FP=d6z4(_%er1W56xq{J<xKS2vK+~5e4VRgoR!2l
z<0MszY~s~n+LaA$@9mOP4Dth?gE%>*U2Kd8gkKmRh8z*m%tVmuhaYLON#1_{uG;lu
zFvtD4mAQPcf!S6$3xTmvbeRQTX>MOZ_>Cg6jC%g{{r*qMXW+M^M#RGzvoZ)6Rh(}7
zR!g%2oq5_XwH^)S4!YXjO=j1PyO1^IaM5v6KN+$-C2RLS8yK&RbB-&THd~TlW;{7b
zHM*JI7iNkr@bWxa$aOY`sIo}rw+365%n7R-2b}6SPffo-w2Q2MdcM8wetJ1HcI!{?
zpXz{gj+K5>@gpqqQ}Jk?c0cWh;G5lOX?E~WNG2zn*8B3JQ&FY_sJEZ~shHoKiosrX
zahMK*Ah{iJI%6CjwoNoBu;*5}a)qnD$hXS)yhn`{L45TU<hH_eJ3h>$j&cy*=7uNS
zkY=w)R3-*-9<Kb*gDTWFHF9`H)Rt2f8mv!36H~E3zodLu;GGp<c78_+<p#@ZTi2di
z@Vnda?0sR)a*%QG%!lrnM)h2_LxDAHR0-KBTaLL;X^XIs@zN0Ub{l2eyH%H#`NT3X
zliT8}>b&D!LL#u%8@n!6WrYO40mVTA`U(-fximp@`fe5J`q#n9E)V@J%VQ7jUk}l!
zcepL8;|Pz=t43U7h1^tMDaY6OJ<=7(Vj(t*2Ju1~-t`OxvKT<~eoi^o5Qx2h6gEfQ
z#imlOAX~OT0jRgUyBL{YxS$49)>mf%+Y1i!6UfT=lFO}L4*Z|o*IJ;VnX4qo*M=|p
z+WA=m*@IjtWqRNC6ZG-1XP2SuyfRIqCNDHBq!sqFsqNow6gKxOba!-7P^e*K-7<|E
zA!Ia>=Ugifg$=ZKq!g=A2bOW3o_z`Bh8fQY%KIg7RLbJvJ{2->heLJFFMERn*gu@D
z$!vv*+kpDRIlIn+(VH819xRk_wpNAA(h^unNpa&`qtnMs!MeY_M5w=HI<ukwCEUVo
zZ=OAB<d@)>w`UAgunFj#|23)*+xW9Q1We)c!6UG9aX1rb?2Jj?m=Y4g_s9&ttH(rh
zZ%q28jlWqxGq3l%G^E#-#`}Y2so!~(jqRIoOE~x;s8$f%dASRDnxtA^$Tzl7vsmDu
zfF`WsnFZDV%msWm4!G=oVVb^;Ve4E}T7i-wO)Y_b`!)p<nW^S8ek*_A*AHu-BdWkh
zqvkvv4Mb#WpOtJLWGCMV@B0hycLuWj%3nw_GNUMS?v!_rR*dDEm*4i%rptXMI-oG+
zGu_Fq_&t;KyB|I}ylOTnKf#1EprAQ6oWu~B6BS8BJ@WRtf9+9R5hAA(?89=Ev?Mbn
z7~}bn^VGUE|9jee3f|lJRA+uvdDlL|Oq#R1AnDpwpq2wEgU#+cXvL~%Z#Dyo1ADf*
zlc8M*Se9mWqmNirh+vRT5W0Oh8jPs^M%?8VR4;j_S;zPtiR>?3OhA2qD}sB9mF0Wh
zRpV55CV*|Kchy}`+(*XdH<Ce9IwuI$Lp11NP#D8LR%;DCatvm<l68L;fkV^NpX3l5
zO!kg}a`<p?H#&(dnpJy3>D+yD%nfy}_7BV*aSL~gwwtn^RYx8y<29suhQHaQ#mdqj
z(y^V`V5t<N;9}=YBDA%5AA5V%qqto(2I5@H*N@Cz$!7C}rmMYA2owHQ{Xl&RbR94w
zR&RP=|L0-i<d>dN3YDXGPTrJ!D-#?AN)Hr<F(IA6-ddi%Zn@b&PiMb*;;tWu_Jf+6
z)^|y&KQ-^85U(BREQJ0j)grD^eR`&=^{+nMMaCtJfv)-a&sAbQW!I|cF>bL}x)PRI
zpF1QIG`&7ADcUn$3x}7h2kuwt*4l?ljSRwc&sByU{a-QKiG1+L_`@8D*V#prV>q_K
zl2Q8**2lx46cNGT?k0(72#v5}+PG7h1kE%r@L5irt8h7r_4z2C&7~>&6*i1Hnujw)
z&Af8<?*)$@7Jz3Mb@;sUbV;}>T6KgN4r&UDn?H&~o9TzQ8|)hUoiEeKDw!kqyd3hQ
z8uUeQ!jMYGOE+a@cu@wOKBUA9+6axRHhUDxCnI(-)~5<>)X048HK#2lp=UDLcO@v$
zgu9x}n`duRVDolBLArK7?6JbmH;k^DHoy>p<?RpVAV1G8wrsJQJ^z>sZJl7mj@%b+
zY-86r0M+;3d32l59e^C)H(A?dljeh`$DmS|^{7UEe&@{qooDZJQ&p5^p#|uVeFg7}
zlM<Xsvd^0NR3vkAi`=TiFkIRMa9iu+r?QxO$=^w)iUocMB$g%0Xw`%_)?m_@?o#xP
zcbV(WbRkYfeF#TGFl=_s6mtp|ZS(eOFs8Dp#qEn5A4FKn(=knzDjI7l!0J4SJ_7#2
z#qbX3ZhibAc@bL@^})OSgBIn3LZ<u&%-S+UNjxd%dl`~UiQ9&f&Eb=G8KMt9iE*bM
zII(^RL*1tyk+-$5<ku8MkKgrtW*uxw4XxSCTJ4K*6FlRnGas+JNCKcA%1p=CSsK%1
za%#RL9bTLGzo%#EW;x^Xp6YLvtXt!$t?FLTXrw2Z?#<;{WIvv-1pnRr6$D-4XTM}J
zujQ-MT4qM#9dHiS6ZPu1i{Hs?r2@_1jHjA<K`3jQc?><#m9x9f%WC)AtDIqwr8y5r
zGy^_QUj>k@hO%!few*xLOZM|yk!z5n5BJ8_LrX2U<Q!>A-WaruED|5NMc;U_+qu#?
z?o-u`iQI3uN{$vsu3(dIeHLNgA1yJ^M8>R~xo$|VpD#OHuLrGVo#nzF<Prp(H_nUr
zwSKqnHyiWs8n+%RYax1GZ$;1W4V7Zu@3WKEGJ4pYCRr2Sr8k2%r6wXa+GRW>)#DxN
z&;BlDe<k?6hC!mKu6yR6H##E<UAjd<<jq_GF9!w56+*L%#KvU1vyuvNMR82~2l`np
z66)a9#CZv-1>K*(KkPM8L8P6|5(5f_cRK;4OkK@%>f}~TJktyqn*q1!U0nn_V5jF^
z9Mq=0C7i%k;g`L4T;}&|c+c((S$%r@5rwIXYB%w~!nDQlw0H-slLM~4WdzeqZd?U}
z;okj8e^Q`B@5kD<4;lYy7xN!52Z2BU;4>8#5%qr{{RfCmRbM4sMTLCn31F_-E|ma>
z2oLbpZpw;qr&7u}DgE?a`Uxk1w(-4kVj%*d-|!>gs%r~37y}^3&l)`0*gie^%E7~b
z%*yLAz`^zjfUO4n?LO0ZxCGoN=Z&4U^U_-Q{^rhGwjK5q@f6S$D>?6%l%DR-s(>)}
z|H)@;_v5v@>Z{>c@&#ws7<7}C2mh`=R>7N)k*a*^ZA@wlSbtF}7~=tCtf`4&-f+H1
zh%kLb0I-As9T)plmey8Qlegz18%1N)kM-`4;>vI^Wk>r;D2qRq!d3osFO6WJ)D)JP
zxkTOD5b=-e->08M?do^$Grs9Ejd0HlmO0TGEpXq@()BX3SAA}{^T|?8-`3TAf^E6Z
z5U<)GyT;(Q>wXeG)8gMYDrx>f(mnfG3}V(hAjz3pnadAxfA5#WvbO&0`i^ExEZ#uK
zk25;0J>WL9vIQOa9Z7)vGl`UHQVWn3u>8a5+Hgf1HGCo6_^yhNEC=SVey@iGcLnSM
zzj=<Iu`KC|9rQz88D<XV@CD=R(%m-o6n>&3U)^u0I^=Q-By<n8Q=k?UnzX1>-b=-u
zHPn}qXo8>*1#5dhL~ts>uN`b`p5(Qo)%q@74?*W+kWLVfv)RqQG*haNiaR|~Fkd54
z8h^O}iJxaUlXoHvZZx+h1uTe~l?>>)fMwE4G2+tG0Gkd>VZiQX#{o516y=oI2Sv@#
z-(EOcsN&TR<@Qd&GLw`wM}A|63k)@1N3=q{@Gds9&3wXte?Pk@?>=x|2+(RG_r?IA
zDc5=nB=Af|c{)u0-0qu9n;DHWKMZ;58i1&9D&fH09ROuE`(^$<*;p*q0TMLANj9kf
zFZt|`uf2)*5#}aImwdtuiB1W3G8uiKWr=H`;UgEKWD&{eWsp-ZE@E)Mepo&|N-C`T
zZf|P6y(X<qu@d3Z`V{c|)zR%I5iw`V(;<f&-)ZnCZwUXg9&3%!E@|~_-Os)6tp`(s
zWZxom8-Ye&MhoX&jxN7p_uVO33!ApIv~=7*$MT~_2T)V4fu&P;{DzhzY*|hmNTMm+
zNuqI5*#We2%Eejr<POX2V)l}M!~Cs>VTWmbLVa@k6hNzoHX3dk{}g~HuNb{@i3z|{
zUSGRx{^wlk|HeAHHV6QpX~RM>{xf^`wJWaff%WyZ>FnlC;LN_;pEbuPpFa|A^$q<r
zVeglJ;i=fi)@(IA>LIl@{1;FF`Bw7Zt4u8?e06ecWH<%T+7wwCD6%fOO+;6Driy7V
z&Z`1v^`j@;ZJPdMq(}XH0SGSoHCVb3_ojJ4$=xmsnid_U$ZtJkFfEHzUw`sJ?N9c6
zhGe=9cs9L-^}Nc2ipeByI;I2dGe*w1wp5VLX1%rYFh{|A4mY|Jz^ZudvD8ws(Q$D=
zG_NUFeurcj1_19pG<m&dX8eFB&HzielFFIn?Bitk9@^Hq(F<#i<6wOFpgK7^x)8-W
zFIE#zEx}XE&8V*d6CZ}{<d^I6TR}RhlAO*Vh({|mXVKBiOMjOtJr<!|FY84W3VV$#
zl{$QTtY@x+#~wPjUyg31JgaPl;<kvm$K4vp5*vT-q}<GC-oEq5EN>nYsO=p}mYV4d
z^U1CavCG(9BRohmru3p8dMnYf&h>}4C%#MKp*8}sTxnGjv2En#=Z&w<QDS{_Y=a@P
zkSX5y(3)X2;@(|AT*5O+%o7Jz9ee5(S+|~pJzrI&Eo*VdQC0dOoonz%_uH#ib&`oi
zeNLLSm%jpY8I9K)UQ#v)mYiVa$~Hr^A#AzbL+7t?j!YPy4PZr^Mx2Yo)dezLh7Ws#
z#8?$}s|)WFVYf@Uv*tv%PF&H=MN%3_&Qkvt1?&CQK~}^&)4skJr2wrICjKZnm@Yhw
z4)K%|rp85tmh9cy5O2X$zA)x!H65orc|3}p#?y5hY4~j=(h{G^YecTZS*#<Op#hXZ
zA()%GO>W3acz!zQX?__e2)6z+`c_S%=L$UMKMMUdlQ?!}5XdDJsz#?bL2*8fJRTQ+
zfRWu7SKzS@4H<b9(Kz$<%uZ4?PWBvVm_u8LeLl6XWAgc8?68+VaT-|{5VFmm^wB{I
zeFX<4(YLdOyCINHkC)g<U^&9{y~V_{JLQzK<y`rR>)qj@hXO5~vSd%yi7w3tWw6+r
z8mpV10`gt&G$`)(#;)Uwx;WOc%fDZ#<yg0ozAgLy&3b7bc71B)xTx5oB^H%_7270Z
zAj+eAl^|oXN3K}D!{1|%v5@>`TSVdmGVWXxE?AY1>Dhbdb3D}&s#aMDM8z5BNex;K
zD|lk)R@ll%X>!xU6|Q4Bw&W=I=?A5r?7$<H_3vyL&N;biC`Z;6$UNT);JWiMKXJ5K
zA(Bop*lNZ}2(3uF?B*77SYkd8a7y$sRZjlWUmNpEJNIONwY_}fRfaag`LV<&P}qI+
zQpbcOd`M4ox8~%mK|IBd$BLw~<9%{)ZK27m(qd7aJf?emu^)ZCb@`51;`%k;Hot_+
z4i&NEUb^JHuhaRQ=rE{c+n8;KCC+Mm!C|f5vpm+XInE0AF-dpVz{cWY09rJXy$-*C
zSfW+iGYt(@{^=**G^Ryyfk5eYRo{+}4&c$V0$kr@oWER=Zp~=9+HbD9CKU^Bv*ODN
z%WP3mUF1qn0P%8+8s!%X0*!?P-><Vw_zF;EdjzhZ_fJ4B?=EEdL~>h%1-)aH6h);>
zlCrWmt)%eS?F1%@j$@AY_e|>YLK~0AJyc%OBVv^8fNSJ*zffFUrc(|9+u3F4sEwxy
zU}7OFA>G=^8eO$7$#8rYqi>D-+nh+1)~BTXlp|djL<3N)o`MW%xH2J&xm8_F1RcOz
zHgS-1S#>s6Max&G{4l0$@{bh9k&4y|F@iXCSsBALinzYsTEP%6rwGEql~m;X1s1LK
zc&%9HGa!En)8W#{pL>gF@tMcxNtu*V7S<&?!f+m_n2M~fE$DCyYf`i<EY8d8c>6<Z
zXRS%b4iamu%NFy?;M8R^dzm6b^YxZBTzY!@%E<;{0q3tIWz6^^zeTi@@^S!pUX>p$
zo6&7BV_Grgf9PQEe$40IcFS6;g^DZpmd*4TO4e8Mg#hl1WEXfjQeH0heH?+3i_~h_
zoc81-M~#l<3Xg`~OGk0qeVUgb2sZI%F+Um#a`Fc2Y-Ya;T#$vA-yc%c2F%O_ob8UY
z`)%>6@2NlOmjdCt%Qs*c)Eewh*Ju2&8E^O!{dhR?LOcgtV_zVB{uUu6={r1q>CIB3
zHYQZ9YEP0IX}8_mh)qiL+3J)It=<~wl<zlLdGAob`pAmtfznXpo1&AapQ3&``Ty`a
zAH*U5odIF9v-BK=WwN!t8nlZ$I#V+Gco?QkWXOZ4oZlLOPHOOUfAxNSFaX-OKuL)m
zq$7AWZ@O#7+aG$T)lF2VH+;hS_{K-~K~ps|-8(o(tH~|*`U5E{JK5uN-)6m4TDg1T
z-)DR05ZnkLIM)2L!PQLp(pK%L5hEgli8oG*IR*@a<MSzP{UCqg+}U|?$ExUA-JkCJ
zAOpx&k5`-UFxhClhZWm#d`-($?7O<0%<IVNSR>5BhfBFq-j4=^k^}jM5dn|K5i|;j
zwmU;fwVFlW0DQ|TooMBGI(c_Swpo#UF_4ce&$N?65MR9a*78Mt;@OI_M)EHcI;6^q
zXR8Dv2Z5|QgR?wZ>@0<3v>@LHZ2Ihz^9G&FF=8_kTfdaxM)OotlfxJ4R2pC>ry-**
z;D~>UuAZLPlRX`T#c4p@QZ`LO+$cmmwfqKp%u$FYsxxR%IkViN1QnWYa-tEvxhcE_
z?ZCf&#rR^;n0JZi<aXTLoaGz1<KEW3a-D5x#)miKjeE`d4ea8FQar2*#p{i|<($Ka
zx)s2V*1P;Dvrz`voD>S&F<Tbf7$e-u?&(j-s<<9MjTII~v|-@!uLXIh0^o?t6Q1N3
zi}FCRcG*GbdlLWauNlP{=0V%-PnLhRV_}{g_R-s0X0SZ=n0|yk?EG>K3?P4*y@1Mj
z6lFxL&lC*vWl)1_wmN+N_^Yd_;hO@`$7>slcoSUTH*Q^eoMYTneD;bRuA+7?Lc)na
zkMK~(6%S+RMZof7i_=Qm{X-KErZ5hfc+6Ww950U7f#H65=Y~CZeXwv;9Y1SJtvQ=1
zC!@al*aCx28}1gd{nsCj!Lgqzj2&C~j;%Rq#=y$@#8mu8YYgghCb%@A_fwdJx#Bys
zJ<!uX1dt}X(*UW<7m%MP=%e7$1r!%Ne$LVIG^9r4+<26fWTIR04_Q3ST;mA%@C9N`
z)znJw4Ly71^!Yr*`D5Nax3Kz&p+5$E{&Fn7;}#*!`Y1)eAoV)AO=EZ^h>$vQ!vk+b
z<=wLN7qv64MBLqT>t5Xn&F22MS&iZ!m8wnkb#)uNHL@o?Zx^Q15`HyQKt;MXH<$yt
zyhPdlcp7h+6B&Q)`@m_nw0&LO5S(>u&NGUdB4%i{hmi}dD6tzeFOXiz_*`p@2v+;0
zQIOeQI`$4`bPanvpUuA;cXT~<Sdu7tyQYe5MnQk^l4}(g*d$PDNv)azuIqS>u{vK7
zBvwvHiFFBMS2?GM1Lx%A-YlSMVqPxXJvUyw)Knb}%R7$ZpIMDngtyYe^xmu`M{F+>
z&S{|})$|B7sDP%}LzxjKS%l|HxIdJ#WOSmPrL$hx(b8zUk^GSJ{QA|6U@EEhvrn%2
zXBV?v!2{5+{e}e)oJ>+<pj{?l)UIQ|Z~g2srl|R?%`U~YY&I7grYE82C_?G1S5f_p
z%IHa6O(`$-Rkc$IjmC#Ec=w6L_)zQ;3-y}g>+9&J7mwCy_8!p89EjGUmjr}{PWfVr
zBLj!|_48$~b2cQ5YTZiovB;ZL(YlTDvvno2OL&j!5(@XTV2t1h^6U<G9yM}d5x24%
zAGot8sAysMrrdoP8g#kK6hjSnt+Y$xHF!Gl`u2SFL%G{yA9din^zg*DAJC=-rI`X0
z@r4vMrsVBy1Wrp6@u;kVzhK|4y1lZk&>D^Su{)dY{+i7F@u7)*Wr_!WRKvbJ0d-`2
zItqTDFZ2p->_f~1X0GUHeP(^aF{4vq_=M#e&^o-*6d{ntb4<WM_#mwAP5OxS!)aq=
zdY^(lurBv<1g&x_DY@v!o@y+%;QNFsy2!8bhxn<FpS(#&M?u{}Rb5`2RM@0=-5?3O
z*6_7u4q5n~!xzs@s_Gntn2>^q5m<fpTOUYi#dDt5;sYa+7-<<ULBC&?Go(bKAAv(M
zB#SguOS~^71qkSpguQ@lJ1f(jVFbvKAP!9`j6kxla)SjbD+jHmK%BCgnwf*jgQmk)
zH?e`?;&_3FGJG~{o&aBwRB73@L)BnpR7Wi|4p<}p`$$ndit~e!PC{ds!O&GU$biR=
zdo>FDD#3Q%o*%N|(*tty#cBIRh|aE~@uc@|QMu=Un9B3lk-#>;ZInv~r3;8~RQlRu
zLaPG*nw?~HCaSs3OYPgh+yKwYX>*7)=o!4Y_%%b{;z9l`f~km&65U#<RK=<I&zQ|>
z@k$9Gv5kVd->VG#GDfoO{mr{bx<9ung*nbRWS{+{Q}9FAIOK~?asAd7GcKMig(%G@
z_KtwUp{Ep^IpDj)v>Go~c*6SC@35EFCILd1uzFhsUD#xE0AUa74i(kfp9eRgCDkZe
z#t`qM^H5!o5lQ}L9sv{w#(|&DCov*vt>1y-@@LXY1STgkv4XOtH+CFaz=)BW{pIk9
ztfj1piHgA;E~u*wQ~s5?VIa-JFH-Px&yW+1renj|QsP?+=_5}{H<F0Y7yAT?5<8eI
zQybBZR;=m~>oof=1c~NLGNZ+?%t*0jqY%>Mw3UJ<0T&3<j;kG-(@|t{&`a0lDa{gX
z<*U{Qs(e|(LPCNQmFWeKzL?A&(PJBvnD%6FXoGgwTW#5~`$*bA!4E2LNXyaWybYOr
zH@B#sL#~+Vozqo6(c5>A&)Rr)5Rs)=ay|)F21x7rL}0=yS$6D`J{)2?@(0x-vbDK<
zs$dpyhbl?C1VY5!QuyT|M3$1bh;;;3WoD%dL;dK^Gd^|t-V4%!q`KTp{dl;E0semW
zi=l2h6bqWjC=Q=a64+BA_Z{j0^rD<XFf?{}1wLDppk<davN7GzBCza_|E@gqI=!>!
zA^DY+L@v6;uDwuyb0Q@MJLW^emma9z=wI^-p8l(T6$XtJnY9H@RcX`?p8QPt3sPDd
zg~U6PuK<jO*~zi~0Q18%AuXtrmo@$@3oL|DkASP(j0Fwxo|bJC6d=N`d=y?e{>gNy
zDYIlq1U)krEIRgc^qIV^FfjA#1eO%ZjQ(Qn_E#V}9p+c_9}a99*@=-=#ImMIEb8ze
zKhDTB`aYu|aMDw!XZhh@$f@nxsuPV?13wV>9Ksk>ez~t_FYYbUL1d-Z0Ia#EBNgeP
zzQmoqf<MXxl34nn4pHwynKfpHN@XOxQ-^T3d1@mBvOlhOg)RS*zLM7%u49nJHU4h&
zefRt(E32iVqC(QiyBFBJV4xG?U*LR^cYNV80G+?uSg+P&KRz~^T_6+EU7#M((Rnht
zOUz~4t>IVaz^?NJY3tDbhq4nQ8y^%p_-9gKXs8Y@Mpx_Kidp-G2qLgJ0QG^@t>P<M
zTfnf3xm+l6Zuw5*x)Bqb^lZ~8CV9Gd@ZuNzc)HibNg_+1Dh`q?(THW)5FJWph&~XR
zZELyv;7?))A0OuQ3y3$V<a4HsU(qW#D0Z%U{ddLo=*5-SSZ@IOpHz0-+9YJndkWeX
zrM%$um4(6|3e@kO^im{VkyrB}sqfA$-{lEGBv+U9zrXzR)N9J))8OA@+^yA1#$*(o
z%kW;>Bu_6#iiH2%aTcW{V!GCM=Vd=MR>nec(2Y^s#$ZJv223ndShqpLs_9y_KG;^G
zc>DEcsXu9FX5qAE*hWbi#~h|PduRI@e4f3Qxb4j>n#q}D8W*;*>K%c!eQGGL995J)
z(ru;TDCb@3a3uaMgTYvj|Bdd@Jfs(;?8E#;#-5ZLUaStsRFh*sHklxkV!;yKJl#<I
z9I%9;*%CbcQqlJiw`hV0b$l3dqEh-g5zMvC4s&Q3W22Eyt92O$rNo;Hm<EmYub1(>
zY9IWj?EFzGQ<cI33v(`*7NHc%*VIs?lf#5WlYRNktt!*StcYjkL&*yi@ej1HO&R*c
z%~!t(zwC2+c}yMuAR@_m>V0`W&1qOs5Wbo%wiWm0Ii)s=rbF5Cfdi+(zma4~6W_a^
zEMo4qJ<+Nf!kq05apiFtjd*?l2_%VQGZgRiv~b7kI)5<S&iy8Ed5(P(7bwuLB#Z-z
zID|xSsoQ0o&^J5^b_8yQw7U9#t4VX;q{@!K=sxZmKsmrRn9)|I2=Wk{gJxCr+LV$o
zP0bbKY>-9vn2wFLki2+&5}39&N?fYDSL_AiFpUrCM^x&!L5EV;Yjgd!{EeqijTH9!
z{Io|M0Koq6&%Xe%*Q|0v8;?iXzG_6eBt6b=;qRq8?LCy4-)p`qqmvr@T*yyG>|Ors
zlP(iQkf-(uf!fo^r@>4q*uSOJzJ4jVnxTEBI9#FEQq(Y|Fr!^ae{eHrpgvgaGU!k@
z!)#Ws?K^UGY?c<Zrv5f0@%H|0?IMoI<o$tr3j!QBsrC+(55dg~h!;B~bAv<#qgf1U
zL4@}hb9OP=#Aw??>o+R36}FO7^-Vaauyc|k999BAKJp%C0=XlZy6UHAUb-lCGK9x)
zgNH0RK#4%%pp!i4m5nAmz~{wEx-!?ehXvXfnHFnV_SRhuC4N)tLW~H!!ZSH8k==N9
zA;rrq=fa^vAQ~^fZ%mDTl~*Xt9oSX8>fB++ocrd36))U-JRD~6{-~Nj!^}W7(e_e*
zag}t6$9e?1US3PpuQhUVsbNB{Rdn}Vq|GpoqxDWGYhznNflqs0^rU-hS<W5a%=G5+
zFs<;eG6`1wz4y^7?C((|`Bs@zI48nE#RakR+VHBsYD9qK{?idEHbe}+axvp{<N_7D
zJVGSoGJA67aWqxBHZ#8XWJAg7F}`EaSL$*&cT?%(z(u8QZp|BmV3@DZt(Ua!9tYrs
z8Q+gsjbQ~6*C*9PvG}D&p&Vx$YwP|x#s`drYZ8|v#hI_@d=|Ao*b)|XoKY9!9DKQL
z+IwG`HZjfJH}>Xr?TJ@dE=0tNLPh*ExR`?XBY&jUO;Qno<ZsRs<VRfi0~PA|pMc3K
zorO<6<@UWxf4bM(*)L4@Ww3o*JYgZ;oBci;730$p@%(}K!}R>WS!WjZkUPfn(lAE2
za#u87dk#<Bp%2xFuFF?b-8W)Oq83@Vh$4XXrc$vRf)Y|!X(zYGlUFEw5=Q8dNPlV}
z_i|e<b327~xP6l3_jRjHWs<9*<_dg&Qx4w!M$!oSdgl0+_tbAb&*ZbVSh^MvaQ_Kk
zAT9$vz9#!*<aq$E`$S9t-Oy6Sv*HPemXFFWpGNwY-Hs<O5D%X0^>%JxOw*1R^^FAD
zA4%)uV(Syoc%CVX?$%=QUB~$A8I5hRNmx2fBx!BzFF;Yj#JxtmB3#`C%PRl^XL2wY
zmZ4PQ1)Nhpap+JW$aABO=<R(RaHjMms5QJ;;-b%~mHXTrr0nNAXhM7V6xPCmM=6K3
z`@Nb`-1hR8hf1zE=4j2b%_Lwc@<s=5Ko8ilNwWn*JBk{9D}SM)y)>{K_z_+xt6ItX
z7GoZ`tf=xci^DTzg3;Ich=@I|+3cHgxcu<3I1R5{sV{zR8ZwUQn5YYGrHuQmB&iQ#
zu&415Q$uUAckn!(>h+7?HCADC<2uG;t5PJ$rgR4T&kC2awio3a$oV$h0}%xMjSfPy
z3WM0*=Lwt{cH6=ztyb&(Dx^`3Xm)DukAyEOI%5Cj=Ca_qp8%v*6k}qs*e!|ov|RY&
zVLvn2N0i|9A}jpGM!&H*4ol_t$>8r(YdZbEf4}zHmI-Wem|xkoCp?S*Y5y^g-cV~?
zgDt<7GxQw7DRgL|^;J6@DiNSnH~H>Oe9j6i$N&<qq%JeiBPbq{lm+luFa>za1?G`o
zN+f04@*2K~@b>m8d^DPTQ=!j*QW=MNkai438-Kd9%cnnMT|IxrA)?DbUF9HQVRzwR
znB6amiFu6z7JU46;Z}9ezJ>HTR<cLW7kWMxstg&yWMboyNF-U+y&ku57}4AHP$?5D
zCrMnA!QLNWWJ7k9GFxaqGef^P5{&it^?P>SPxf1v$KZ-yn$`8HW<zkRKYU61ZD||D
z!4)+10tm62=E2AVJ*(?{cL)OIyz@`YZj&HT;1{d5FZOjZt7GXGp-09QsBeD7=J0S{
zQCn~+ioIFiWeD(S+ax>f*d_^N!w=DcrR-ozp=dEPVClQLntl;p=6?)%TQAG<g(xTV
zuVr4&qFCUyvg^xa>s?s9Ty8f3OqCDiv1}f}v*)vbpoO$oGr8)=#l4USRps7oY((9w
z-fM@Y_XWPc`dr%adkzmGR;E1xv+gvO!#t^er$6_|0ogEKJg^w8DbKl1DD@e}P;2DR
zPcY&{-_Yb#OyyC!C>g$}4@!CgELrF-`Lg%&cE26^d3dR2UU7xFCw>Kg=qu4j#~<*Q
z(S_PbvSq03sycRzoI>owQE{jd`h5Sm8y<5WC&wY*7;qGbMWBba3vQ{N<?__`>cwlr
zhak$3vlQZD;@nr0b)tQsx_ESsnTa3jdS||RetQaSsq<;z8A|v5Bn`SR*djtRcntM)
zgNt9m4l|0cE)If7|8}xZ>#1KI*7MEEp(D-W@gDN2iF42;ud_S6@z>V`OHZz?!vOSb
zWiJzNa-A<Fgd?C4&|t%k_x{h}C|5-on#^>rA1j2+n`H<CUS3&Qsd>TEC;d@1hw@@-
z*rO@|3{C*QfAC*_cU|(?v$ffwALQP<#7Wp|<VIyHeB*fGart!BxT{J(x3`9G&6s>u
z$t_;*#EESBkaIr@9AE__RHXlyfZiQG2XlTBad_<Ul&b5nCwwM43!DWm$tc6a@;RIg
z37VY@4n8A{EQIvl$X=6eKojeD_8Bj77CX<Gf7;Ja;#!a+yex8QR+llY)XVgLQQvY{
zpWF|nWSIY*LZcmC(r7Pw#NFzw`m;yl^<|BjTqQcFEE(ea?ydD6c^~NF_iJ=!7}_UW
z-Riw8aCaK@LB>HRq0`ldl(eayaMqKr_xbr+)HEa`ehgj}sYBC-@Yr1-yqwk{+82M^
ze?60AhmySbhX8^%=5*Qre4prdAIPD?t@ANP4YI?0!G6#O3fa?J&3?MxS`BGmx6cnS
zjZ!PnuAE(p6eJkAd}}yRVSx)NwJ!;K28qat#~j^tmErCJH{?G>==L2G^nfb*Zw0c6
zMq)awZTHyPFRpM+oEJ`GZoEc7dLD19eBY%jzDBy$&2K<jY)=F9Nc}Wgx>OmmH@L=y
z&SHOE*4(0}wl+Yt0#D;YyL$z#r^7u3D&CC<a={16oFJF(fA31O*<5c#W$-JesTZKV
z`hGjlP8J;B<9Hu=_{qn>x=Kqd>Neun3={|3ZV|6$AkY&A<TKG))pcmPG81S!#bY~7
z@wtK7kG<m^agXsKRQ?O;7IL>#(|-GNW|_+uW$K#Jwn<{-;e2nL3q9N`1zuM#Z*ziV
z#)Rqh)xQjJ_vtl0hN#x%@zvDWiV#EyT-U!j=QD1TP2LB;c(ui|;FxqJk7%9)KaZst
zSA})OkbJfl>5MKLc56x*_UeV|+TFhL@j{w>_=wlDuX6jUF1q@Yx>~}AoW42H{G)P<
zxGAz&`sW;}rb81$xW@$Aq@$77AF$D%N6D(hhS~p_oD3rZ-U1qiQXdUQ$xle|_63Xs
zUv^B^;yh^UVwqH8EQz!^IWpDiO^%-8-t*#IhTSNLuRh7nzMO{(ZJ(6dmf&dPo&@y0
zi5J0(8eVHBNj<$w&n4NUOeLAtZlWMb{<}E7rL63*RXvG=({?ou3=DYQr8d^ztfx&<
zVPnqUsy-~cp65RGI|DTIb*U4i$Z1MTQN=x@-1ol`wJ_bfQr0*%oqpm|4vZ6gm~=S@
zhYIjer;!kq*Ty0-vAHj5a9^MzE2isJ*IAIu-v)V$k7Ro(Np*9BNJ)xE-MqZwqLn6T
z0#3R>Wi-^3Go{i!zoGg!W!w)`uAU`9hiMxWeROd2m`x6J^%ZpLC0AEh99DEGsqO<B
z>+VKLAS>5FooHKqrH|2H0}3ONz&kRU$GEbqD;nUY?6Z^Fu;~9At6Vt`y!e=1(VeOR
R{pTWBURp(}M&e`e{{vWD&pZGC

diff --git a/doc/ci/environments/img/environments_terminal_button_on_index_v14_3.png b/doc/ci/environments/img/environments_terminal_button_on_index_v14_3.png
new file mode 100644
index 0000000000000000000000000000000000000000..d1faf4892778d84693514453ef68799a2471ee20
GIT binary patch
literal 14134
zcmb7r1yo$Ywj~K95F|hd5+ryC!Ce{%?(XjH($GMHySux)dp8o?A-Fc~(h%Gk^4^>O
z-=Fz2v*z|))#q02b55OIa%)vrhseu{p&{cV!@<F!Nr($8!oeZHUgTON_?NV+!2a{g
z7lN69i~t;5O%%$5!JC)oS5Aszf^d~%g!^!CulX#L)q(0V(%eRNHuMI@c7`VOt~T~B
zC^$GCSMC?l#sp|U;%Z}U>%{HKOZE>0_lx{Dn}Lkv9}u7wFPXZGJc*E<qX`KcJu5vU
z86PqU2?>v*u_?Eru;{<kU!Hi$%z;3AZUzPr2t*HJp|^81V_@Rq;$mQAW?*KfdqL1S
zx!D2@T<L6`$p2~Nf7%f?aWZnWum@V$*^>OVYhY;S4CEyv`|IdGu7B3k#MR<IJ=r?_
zE3B6Q8UB_qFwrwI{C8?V3)BCD+TW6Ys{JFbf4bxOYm8gP$;45}&c?>X7RaY$<Y;1I
z>tt>R<oSoE|5Es$_57!zyoIZYwYspyi>A{{Ongkt?9BgC`(KOxTUCvJQ{~|Ncg=q*
z`8UnKF>uQ{TD(-$;4g`MOgs$#Ti(C$JPdys{x`<|*_{8#eQ8fVWFCh9=o@^<gYO2P
zUwYD`ytJ~&^Yb&Nc?TmSqp7KBM@Prg)6>Jl<LT)siSzK%($d}C-R0%w$;pYSY0vcw
z^!e)f`Dx+uMYw%_d`ae^-_Y#KmL8s;uCK4Jpw&J;K7xXR&Zeg2^Ow(0XT`-O_iIg6
z(3_o|-Kwf8Q&Z=M`}^mIwHi0m=j)yIwYAlo=fk7p=cj{$h3lE?=grN{+1VL8Mn*4F
z)BUICl{z0&Q*S}%k=vEou&}ULGt<?(KYyN|_4M?JU1#It<C~$^lV4F88LTrhGfdrU
z&(6<HZ7L>?AFa&Hq@|@Z1`eKYp*}UsHNk_+56=x&j6>_^n3jE}CNX7Jri=_u&7qcl
z%a0}z^+Q8Ln~%?zbEUn9Pkp_;&}!%B>#OIZf#SZ^tLNLxo2TWLvHtm;xs~1BU(rMX
zYXjA>)rrpjW~P=IzZ)kHjEsy-%?h%9pP86ig?8>A-d!H;AN<_!cCdGtEphohKC$pC
zPv2#DW&b=sFR#$ObNBR$c_ruhY$m31)N!vJ(gx}3>hj4Ss2^TXE#HiY8U>{^zg(k`
z>Fdqj&fY~=7ht}x86%^*j(JDV&2wVw!p>k((9eE1clYwFA%lj!wHj;lh(5uPiOiEJ
z6%`dm^@e&ECPs$P`i5##_h@skf~Nh)=e?!V{b|ySEpJ8!{<^cp#^}Pvh42s`4B*uD
z`qt4LxHrzYu`q!VRIimczXzQ>y|^FTT%ND(J{lZXXJVYqwf+(@(SETW`_m%kcywdF
ze`&Pw_WVL>qg=Rbo6)NN@no+jv){-zM#bV+`Qh~0pH-Kztm%>Uta@;cBVz@4ET(m{
zE6?|IBuyc4raK)p*ip;KShzem=4|4e%*e<P*cP7O&{I7YVA-)&pgdF39XWmu003IO
z7$X=NC$0~AqZk>~vl9}l?Z$6)wi@^>I;zze!CeE4>Mo4t;jx>KUzgJ{ehen6Gfsc?
zNdT%xSo>J0GX$G5&e;@C%LXiR63ugbo}reUvqqh>3^iqRVYITMu?P``gCl{H5Ef8&
zT|7$rA+4;2|0`-&au;tP0}-p3fUtlqn6tX;m-HYfWhJ_=cX>{8ytA+fqJOc!Kj+sN
zYYL-1;5%+XN{A*AA>G@s$`DCuHl#1Up<y~x6%rA)sDlTwtPt4qea1bWX|&mrO~|ch
zNal~v*Xd=b9Y0rj&5#5z5dJT>0(G!~lYg>rP0^6Sxu=8rdrxkREt}j@UbFjU*VtpO
zW0ix;->s`-ub#&Uy2cTGTSa<CaxlJ7iMAO!b-J8l+}!d<Hw7IZFYQit7vrAqh`RHl
ze<wjY!|B}F>duC}_=e{E*K{jsBV(W;mBfmC^)@9jRiAR2=-|D;Q<ku0ALeZx9d-y<
z2ueB-wKEY$(Jf<FZJAb;#L(_;ktHm^#>R4{vwGs$p_D$8M`#s{ruXfj4I8WKV<BJ{
zS@!W}0aY&kyo2cTFp%cEZPP;!_%NjA%&^(frPT4ps=OG0a63VpGyN=T)Wwx*E&b^9
zTPkb9SOe!-JA*mrnD3UMAi!km9)|L2KA&m_=9|K&fBc!ry2NO~SDt%aG6x*CLK<e+
zs)^>-7TT#X1f;o^`)-^F2FQVLgc_1f%^1XLEUv&#@xWXd21Pgnb;ZxROY2WxPZWP+
z@3ZPA_6~OCS0`Cm{%WYX72s;C5Y>rm?^sIppa{_((Z#X~56jwzx7DBuq<3aNJ`Fu9
zc!O2(5eIr~KV79m;B4|>z1YgG0=nB*ofV18(gx-4Bko1k5MwO2^iaJ7_AY8uR|lYC
zeS<_+8O)GqngUT{BMt(dtn;_$L&7*JE4U3`K@(ITsPiOeGfIA{oTvC!2Ol1tOGfN$
zm3T?xu6WRTZ<Eopdw!rgg2bWMp-2IY1}n)qru=;<Vo$UB!~{jD)t$Z4?eSHACz_$4
zp_@S8_(5cxQz0oWSQV_Yph=s+r)AZ?4idXSLs#BCTlGpO=%pLpa6+Jn9+Bs-#o*EY
z`_I?>AFS#MwTW;NNEc@<lQB~P%Zk5>q-WRZ&#SLqs~Z<fWLR)RKmDwQz1Cm4E~l5m
zQntb)Z~$-DCtySbwS*3@?f&6EFc6V#^5P<BQGv@bNDJ6=(ad@M9K~k)wNBi>X;jv>
z(@0RSheYXqER15&8!Qx!@gx~!xliVpp^A0RQFckSUq%pb>NBg@3?rE$a+P_056-(_
zEBK=g3N*WzDXMSrUnQ!gD&zV=j|Z*Dux=1q_!NO*FGAshvf5rxiz(Ytj^QW)CRskj
znGNn^T_1TM=pw6?;yk;Aq4EMzA4svd1(Qm3)T$<aDsxRpZUW7sf`i|-)qJiB>Loav
zSEyQ|Jaf+r;@t+b+^bvA#O3i0co5Wb=eHXZgi(P#gNVXQ-rtUqroLzX-ZB(g5U!p%
z(x)CiH>#+wI9oi%S^xtI8D`}Jl0?*01;K>3I<zFduODTpz0c#ow6EJ-J~Rweo@4Lx
zNA`L|Ceo`41D#jSd*mB3#j!m(;sd`SHLVW&9-jAT6a=j)?4uaR6n~p0^7TJ0=Q4SB
zBmH<jPZLX5JKGH7-kFQ>pI$QL_AnrAxR_)&*ApZ?SQ06y`V}=ue*p8)#4eXf{S3oJ
zSO*%>N{EM1VJP|n+D8WD5W9UgHX<za*`0RqoxbGH_0=!?kBrtB3l)|FoHG`AvmuK^
zA*#r885dG3Wus2>61fnW>qG9>wXa!xB&FT7Rqo2Hd5M!4&>4J4(E2RT-ACGW4X+yh
zz$p+J8c~PXs#YALi`Qf`r$lUjm^83~hwckRpGhknj&TUS{j_K6&+pAydLD5mb=G6h
zGIS5W#f1JUtNF-7@e`bf0O{d-+fzTh6k=8+Y_YH@&3vnXA2^JBd3uM5OYwY3L~$Aj
z?@*c)<z^l!8|3Zo+8Mo2pi<I$UN>cPMqu(r7)q96CB%~Ns<9m4{&2&_O;`!2hANEK
zgUNd?R6yw%Lg5Z!!7iWFcDf4gE_kDPY{j*VrH5lyW}q^F$4*3Ce>@|?Rg#u=dS%dN
zE~Esg#;(q;UbL-+Rp@8a!#cml)p?;vBy9Q$daR%D*<4D&Nw0d=VBDZdC>|{3n#N5r
zL1gE|)-uvwbk-r58IJA?`Bn0Y+4J1!1JsR>jvIZTBv`wosw4N@8%_+O34X0@x@><k
zJ2w~iC5b3@(|dl)eBUTfvnd}S?(Ie`(?x?SJt$>Ct6jghrV3f^yVo|vdYOd<=S3(T
zNpx&@+`g?opm|&x93;cCf2_R~cG}k$tQDAnmce&$*=MuRro3572qa|B{Ml*#!62~M
zHXU{p3e(4qeGevZ_4>1MU3NnvXgL=^S+{-yE0i=PwTSd?t&>^IVk9<B$f(c;y&4SY
zjfHV@B{D%TPu;2a^`B0(bISp4NF%>jmpXAy^`j1zGNnJH`y56B>dCFojhLY|-p~{T
z#Yt>?+2*5_heFI<r3$TC9U?oMXysmBc0<lr`>-A`jUtfh8`$YgYq;E!_$8n&ql$=&
z&Y^^Dj1HSO`)F|i7j|S66{WC7oBY9^<RND&%4$VsNOUGiPit-DY88xlnO6d(Q{H*X
zMkU|Oo_yL?a>FOh<x|vwCCkOWZ`O&SH%#C3xRwnBazdZgUZ^IB)vSvh5e<Zmz-W>?
zRRfgGv7waUIJc*F;KNr!4cx*KAbpxCWadJEJ>h;?P}nd}cpR_@)n}P=<;V&o-v54P
z(7HTTjU>fc{U$m^7!)pWHZ&#Q?AXhXk6&@_;{%DWK&>ps(@=R}NK&WTE-ZyLV~bI}
zbOjV;=9i%>ee=zR#^Y5-$Gh<~DO3XLQL>;)HZQFlYY7VPoysXdm{P%B<kR8nf*)=G
zVQ(`&x$Om;f&FMF9#L%_MyNnMWf#%Ond7=}IoG*#%1uqRn@Nkj#AE>K$!N0-&Zh19
z=@2q$&@?jIFtMPUj=B1&m`NF#>&|vE2~uaPTd3dH@`=MsRci2|3=sXqU(f3|5v29}
zow=kt!JJa#FFFG0#eoKaRU@3WZ<{gr^>2cJjH=Ri2~Z?wW&)!E6rOVb6EA)t?-6m(
zh@AASxA|UqBf&Ds_oA5?Ib$|~!oyJ+(h31+r+N`vG2r)lMUL@g|CdRki)|R%z7sY8
zpa4Q*#<7{u*3}L&#9fUbxu^E{!!^px14xKJeTZ#d=PS5|o#$VzT*tFxbk}uJIPR^+
zvlAy!xo*-JPZ6^4;ULy>D~^m4oJ_?%F38u!T}(lJ?ag?Z3ZcUv{R7nv-Fp(=#^?l)
zSXZiJd5&<Fez~a#rH=eWqlH~*BMI!khMR}4gyiuBX9>$|@zn^FPse=-hXu3l)n?q6
zt63-oCA%T@HCa=}zqBysbZwHD--B_eNgx;=Q$vG*cJqSKt;j&xa`y+ezD9<cCo$DA
zTRN4WwKOQagFD<Y=up-T#L*rV(Ixb<h@wajUUSgQpyy8A6I`tq5gRU$ZHcvSCuj{%
zPdFxtnl^8Yt4Vq4U%7p(cQA4Ixq<QpZ<f8$#HhME%FvSngUslpPZBpD!~Rvy^nfp3
zY&4RXJ_eIkKz22fGQVMOB4Vxw$&e6<45g~2V!{RK2V{?6vH~reV)g?`kD;ljH@Apa
z=>V3-5>juQUwymeTr49*<84l3Evr9ZL`w<=?k)|3`NO!(Zyt{RL>ac5#?c#wiLW}k
zl<nuOrpz2#pH<TR?3h!Qx4R*1qt8mRxLmZ6eW%3_#uG1OCzkd@@wZQ{E?c%)@APXU
zj=1@}IJWKOc`A1I;gbL%$-A2nZ`{eb9#mMWhYI$&9D+F(@Z_vceN?X_<Xc`A5=ro;
z*u!_Y%Y3=z%)85rl`_ddV(-$2q#M6?ccsG=AOwM<H*N>XB~iOtrDCV>@`b<iv$i5h
zf`$A&Pa<CgaoFDvlJC~vhhSyDCoP*;fUh{#MPK5Ug>)EG{EkN^p}W{CL5%+397H;a
z*j1>t8zaR@2X735`}J)|(??<ihxAFva9^B+FVlvfD;<>_As3a_S01Dd*L~=y@gR(B
zDMtk=U3&H3EyEp<9@e8t!>|wp9K|pY9HNb1Btj+e^>@A`NdJdBIC)T-d|(M7X4bGs
znq2%8i7ca+{tyNfO=a}p2t$Y>nN)?vw@fuO0$a4Sj)9f2FM&-eAIF2NruGA^PQFQ;
zAd$%w)s|XlaYJitG)1N~e8s1>WD{a^o6>V~FJ8b(Fzeg>FQ8lYzf8!r3`=md43oBy
z2VcYkRPF{dLjOhEO9flVTgYFygW(P6?7a2d-8ea@5VLy&LC+JJImw3cIZr!8G#$&+
z8ZMb9g0$c%OSXooRx_UUR_S-mcQvFY*|g8!%T%s5w{DwTWg8T6{LDA+FxNAg?%bJ%
zv_j>0k(L(N?+iW4#sJ!4j<_Am7T@sJtXJKqcL$fuKB`Uk{3i1YP+KANVB1__aGb&W
zv3gkij-xkKu=0XQ)y@DC@h&d=<IWdn#fIgz%JsnKCy)<D?b8WCx_JMMuUpQSqfVEQ
z9qw~s^ThQIxBETu$g$=JaYx*l%}oK^DU;uu;QMj~qNwGFFXAvs1dmWoMXh7sb@5F!
z_7l%iH_pMWG1~~oYTd6*T1|HL#tIL~!)K9>#!if?A3i;pT~EYpgv-Q2DtOyn3$kjc
z<KXiV3uAjTuV&GsmSql#Ua8Kah<Uoy%#GSlf<_jahUUpoy-=ECB!_gu-4=~v0m)o-
zZ*$z^YFfAroC~w`uzz$Xr?s_@6g6yDE={nZly#t0uSJic+!_e+IQAd<*xsat(Qy<7
zQjMYljwp~`EgJ5;Zt4y7^5!BS^O!!cY<@HAmZt1z7PBpT)*#RIYv^<5MAaNA+>D_g
z=~24SdanO)MjzmCn=SjXaGK}Aa|nxZN8?0^BMk!A7?-EpY-iw<Cgp%mFhj($B9NTn
z<t@s&7`iSBn2CM9x$EIZc~UwO&)ESANQZK*Rme8rol=1Q3_=YpEcOvDva!9s(=gT9
z8cf;*G&9a;)IGVetIdpS>h~={b}U&_G|bqq%0_EjCFerD!Xv~fIcBxPJe9&7=Paux
zc%81=P-#1F=Jt0lKM5cdm6CWl@IRf<00?wg(g8|rYu3-ROZy!dLCX@Cc(2Q^x52wW
zN!PQ)-Oy$wnC6o~H!o6SvZj_9%L0nb0g{wJhiAjVV5YciOPt3sU7E)yeN~zMP_J&@
zE&?9(rrJU9b}oE01eyJf>Om#2?a9Co?Vy@$&OW0PwtpDZX&A228<$_4Rkj$O>3fuB
zIQtk@r-OQ@u-SlieZ;%q^{XUu?1xb~0$?&i-pRMEd0UEI#*%tX0=A(Gu~IgoFy~&B
zb*>jME8TQNOc~!}{5n|IN04lDn|{1gTPMhrj>Phv7-Bu;FJ+iDlA9Otb~sqpt&Dcu
zr+r&(28h~~U(t=UNW-J`A=gS3kUH(#3H7!DrPK^(Xh(JOks-}N*{IhCCq&~~0}%)N
z8OG{<e?q7a8c)GBppM5mua*#3Y{Bw)>~kbgYbf{CwJQtko?lZK$5tso$rb#@4c7u6
zQsVN-gAsf<cb6Y3$+$DTUeFm_Z<#-z$Stt!c%3U@Q{6P+NEP30ta?Sf<5}7AuKJZr
zzP*#?jcOv`A5mtFIJR`>Ti%EUVLop-xH-S$4$BJ(!zb*HJ2k1+8Vw)L*Uk+Qf@#vR
zMQg3IphN>2l(PyA{jZTTK-GjlY?MbWk2ab=d|X}3&_=I>7L1&S%Db5L5mloszSh(7
zpcvArt$@z>Z$;iO>br%%YgbVhX=?oQ7SJ5FBq$P+0B9yl0+{<Ryt|q@*be=zf3xw2
zWQYjADF)>0dW>{F?dv>iv0>%HC~9;%{3ImcZW-ielMy(aF->@X{QJ=lwCzpRB9*=@
z1MUEVg0^fw3Z046FKd*ylW@v_l(1qUOH6}Akyd3#OvK~<KlffUMz=@T0Y>f-vWkdz
z>L%FEVG$9n+<0lzkM8)Q)A%i)`C{=EDIhE?tV!!a@J#`BKU(T23YHyy2+i5WdC-}H
zY^|6Md&@&Pl6RHn;@_5h^(oo5;Vbz$vi-gl)?LI~_3*$sLf)7JQ3(E?!2vrO>wkhy
z%@A9&tAj~35L)W^U8rv5c;I)M$me4OM{B~C#9Qj3mwP!<bjpXuuF{NKurfR0KE?uA
z(zv?S_HwtzF!oxTcJNV$b#{em*EzJDZQ%leG6DV1eE{uUq`6)FHam8MN`>PtbZy}|
z!dQqxl-{RdeXCt7N=M#6e*3+Uxs)X2$Z5;g&J`)E!!aHq{p}U0``GHb<=gqA(XG_r
zy50~fl(qTjDqasc?Gg73x}8ejvYJj)cD5QHsb)ikt^+=mb;2R{Pp8xCwacGQ-OIw3
z<Te9Bad^~TqI7GVWW%^#BtrT^5wh*W?&o1^h-y2npW;q`A9Wp&(!t~0q%VfdMkU|Z
zg!l#2q6Y^6X3Bwc-<KRnZ8Cb7W>aa*!qUw~$6V&^;+PRxE+_z%pO!(J=bAOY79y#z
z0S>v!WFy@Vb?2elWZ^Znk5X^4y6MNebhlr32kA%FIuGp4;F+g-_W8EWe?KK3f0<%$
zFjAf^44Af!`HFw^QOr%@7dNf>jmGn9@p=dPjZk#q+$<iD*T2V`O;)xM`{5)c)sFMU
zz-dC!H*R5@KW%>P9<`fZIi8Vm<W!@m(C`x~;so2t#uW{2H#*uZK7R|m!nb$5R}b82
zi{T*V;Ue_pvC{ROL|l?z&)uohvCkN-W{ij~`SMPljx0qtKGvs|gr^~KkgAWr?jcL<
zn`M8Bg}AaZmS7{xcj;}cq-qNF&n_o_7Jno{pduPA&#{lBp7{fXT}<T@#&MOUbBAZ$
zc^hMFRz@DOIdeb%@Z^5(q$ozP8OlGHtECSKyl=*>PjUBfgvRUspu7Hn&wXTt-4P>A
z^h|^GJP>aul`uapXc<7<GUdRNU?o4a-Xug~@qEFu7XzYJuo;NAW#vvJcX4yF=haBa
zmTXFZ_=a(5G`tDWSZd27(M(rf8rHE{U!kDJX_-H4!1@9T8VV~;D0Jhn!U#4Ba6!}~
z-a+2D{_)*y@<Vx39l2|8!molYqOJFo6{-%h1H4tPdLLu+9>PMqKGP1j=eZ)W{0@s^
zc4ZpMs4bRPkpFhE{EDdZ5tXV*2f4TVTynp;*h&Oh<dHJxLUvq8r1Mh(L1AyorO1$%
zG0NuVrTo%G5i&=9{H6#l_6bYRv04Fd0J61@a)I&}-TUUDj4PGt*K2b+*W$#H1v_or
zL*wwC_dmZYt${?m0KQ+R4<)hKNsdTBS--w7gnpYT3ebxT+D+ZX-h4JYc`!=j9Orym
zIh^O{4?34B?S=*px1<;n8s;f)Bx;H}vup@zk(tCIelZTOc9EGCtVZQDEFCSTHN<RS
zBkG;XP4F$0mz28Av6T+S?$poCB~a1Gi>>(Z4ckjOwek779n`o<@jjj%=y2nifAi3O
z(sr`YvbDMEwhE!>-4as9m$76O6)lcMt!19m@$RD$4BabK-O0yzKEYjCOQuP$n!86V
zW+@P+vz658mh3AppregLJ6Cq~Z-m^%DTn22JY(WV4BV;8nwBVH>IdO}&tEA#FdARj
zt5g;=sPrS)p)k3eb0ai)YNM}!#Hg2(eJn+fazm2XJ{L_Wyzz@ec%ZG0ox+K*qOF`y
zhF!2nZPZ@8k?>nJIjWkD`^n32tz`OjM~EZhRG~MSEGB;?&HU-@tPBg56fpsN54<Su
z#2syqSX<8q1GjNyL=<n3Ga}qgBe3XC0dhwWMRB2pg@|-DS=e$jbi{({lfr9Fk|nbk
zc%EP-;V-mp5mcQa@_uRfgEUn%)91_y3-+u#rm5trBK0P56hyy`gxdXT)?)O#`y#qe
zB{@J9+Q0$rG{{8{84wY!d3cXr_S+-vjPzIfBrDhEl?+J=#Y?a|@LJf-xr-Jt447mU
zSG<JX@Ns`kH6OxxxU1-_@+T;pwl>|l6qYWED+Jo;5!zYI2EhFq*^88*>{A>=E{KR8
zdeW{)qRNTgpuoRQ*(22qHi_>B!;~|N7X@Vv6C12;`LC13kuTkuM;L4r=-xnEu=$3Q
z=5$OF7p7>%qz>r427F<Ce~qH<j}fBHED0W~>aoXby=D_j$RC%>=#hknA)!^LbJ)np
z^AfQQOZFtG^86HFCw6r+{|(R`S1I&|GGBfKn*CA2rQVA~RZ3zTxKNh_-3sk2-OT?c
zg3}iT_B)P$bTFfia6g+-OjR@s{PazN8cq2F7e=;nnXyAk!o0C0c4kB)wWjA0+^8n<
zW$U18B|g|l!`4!ITOlLL{K4Clihx}t-1lg*DG=6&o?<uEANcZP^XkhU*J!?H*X779
zN+un9m_hH*(6T4R^R&1|*!{-{d9V90KLT4Pn^uQ`PjFy(I56a}ePV4|lIpl_1lEKK
zeFX=FvZ-EAgY%`*x9vXt10m-PgY$;H@Bs%zd;w$w_TIz6K?Oi?aC`4x0Q{hrkl?_6
zf4xhCHatWmpdoPHEs+#%)Aur<Qn6U!pOde=_h3)qFNohnFYW&SGPY)QDBFO4A!il7
z7hf2R_2MHw19tPBe@nQKMU?-KY^9?K<x3spZNcZwZ4$k^&OZuO`lfM`i2outmowxP
z7L2|L=P@auzJ+H^kIrBv_;YI^icMoYxHyK-Vyl4Kq}2Q7C6Xa!P;69D8FgvFL#S4K
z3AL^Bg#0%l3m#d&Wg9-p3|UG#4U0nGL5#m<ZGgMjybIo6OG%5q-fNs47_KNK#DBFs
zj;(|sRGpU^NW?z~{H;^pL<asroJq<Xrxbl#$I9;?XS3{~O!py7jY$lgu?jCN@^guS
zEXBk6H^&B8!RH4*M9kUOP+!>ec8rAG)oDAaUN(X^XB2V%dUXO)ahFWt=3_U_LDjz{
z7QQf@UG7ZvhPr@WA-)9`hyu1sdP$UKPz!v_wSgizf6c#iV6GZ>GY?muW-}Z(`9kph
z*xUx&-unmQQ#^vhHoW`CPO<sT6!sr~s-)rbDur7F&ep8soq<6e!LLoZY9)3EM(0OP
z?fMmSQl>Mp{3F>m6Q~gS1OyKv+sKaa8P1^y2Bfk`Kn@5nsq}Q+$hA_REk$~zYv(;H
zQQL&0S{?(o<$#2N$+LOCYX=q)0lW61t-0--Ym24+w#&77f0Tn{He>-CIs=J2g%Wn+
zu!-CTzHw^=z*-F@cH^1|Xg*Nm=iL=8T^%16mw0Scw^_so+1Rx=A1~k+Hg&r@L2Fj}
z+`zDK<`VLm87d7{@lw8p#^VB<bo@QrMv6LJV%bMRQd9h$G=2qp5G&(ZRNjQ{<PAt>
z7Oc@56BF*TAlvv>?zjc>gmNpwY!a8_^zNprv5;YQ3oN4UZyx$ll#BXjv)W#92|lNk
zdZv4Zh`XL{CKauj0<_%&>QdR%M@pW;Hk2-x0>eQ?0x+z$MzX*|M{%HR6b=Ww1L)NW
zhhsPsMy-TW7ag-VOH^uyOEOym?F&=d_W`<m=JETR{^c`Sv}64t6T%c&qx~QhQFLYx
z=V{jWZSMSgL{Jqr`}r}1rjVKApVBv<R(pR#T~i2~Z%OC2ocw`pVM;H)QVT+n)9<)g
z+;CAXX=%f-_hE~ei;t>i=RRnYkd7j|rMXEfmoo*F{Y8&br_q$ltt=p=hD=psbP)Bi
z?fsPFXF^NOzIYM}gCTRx-}Vb-cgs4Pzu~LWZSWUoID3-F{Oj@)w_CE1t8js8%Aa|c
zyDo!-ab5=aueJ~vo@Tad#s<a|^pF66d;G+KzVc+9CAVJ@R;J#4jqXfu81<anB>E%{
zNK1jO7?CGmYR`)sWBnxfI;%6|{d;24^~rtnH^5R(ZrtS&Nh;uF9AXd2<PovmX=f4@
zy?JqB`Zi7M(p@DA?R#s>-q^>Ki?%he)|I{4A@0SjUX}rvT+7WJLR$sFZZQU7PC?;C
zR_DwMIa6#l4l$^16$7fH_pJ@4_B0e(tNN=rEjC1H<I~;(mtwHG@YAth=BqT!g_6k~
zIsoC0q(Z<c-V75t9!(D5<U?UIjWmcBs(p&Xu@p)f#Y|4;8p_x2`1>=n0thSV+d=90
zyEeP`&U?7I#Sen<SY3#ZFe;o`*fA_5!)&`$%8x^jKs$kfg|6Mn!oE6?HS<KBGUNWU
z?5On&^zkxrSQ9k)2gOC~5aqofZCaGn%`KhVo1xgI^9krlpc^wJbp`K<0ov156Sbc=
zfqoMY?Tt}VJ2pN>fXcLD6o4K0F>INkGoFUprXx*9@1{~oezv3+)b8GDuT=hQapBKe
zGLkr+bh8daLVsbfFsE@<U}g83hA0e`p1IUz^{Yc~DbS$b0^nf%rDx)9Ara-2=ud61
z_1U9Q(8`iblFgC!1<A1HvryH-+@GV%8XTNjqFZ{Cz%q|isye{C1x^J}oPB!9T$|cl
z!K$$77ag0+9&H)$*hdD4>^Fcb_F?e7OE#o-8tQ{9RaH+%l-eS9>Rh-}n8ol#<-1`=
z>o~(y+0J)87Pfe<_U-e>?+%=$DaVc0w?F&;qzswOB{VOsZ6_5foUdkPRAz~zT0Bz{
zvKL-N1sH*mEu#WBcpU9yi>xOLO`B)>)O42I^QN6m+a`Wl7j$Gc-hrz;gTW9_1-%@x
zO|h6vfG08^6h%Y;v|0+g@raB2el5o{R#aa#`0~oa^!a-hpa^$-TB@}D4CNjilsbs5
z#BsZg?pa)QH0ou3fCguIXvT1~`VgcVl;`}s|9CH_CvUd*W@MFRn>SWZkFKq&d2Ms`
zA*#*kRp<dX{AtTI9N=i9-L<lAE%aAcZ7zwHj<LQ^F#OjOfgEJz0)Bpd$^rG2kdJ<^
zu?<Cv$U-+UJ_*!g_KGoLl4GL1E@|itFLAL<mo86HJx`T=cDkbXH5C3m#tB0|YJ29o
zPG7jc8+*=rPWQ9la2za8x+Bq!e{IMk;(anN=R$~y+#xCmpTn^0so5SYmlF>B$j(O|
zNE6z?LOSFRd1irSGS=mbP)P3H<+dw0|Dq=RiNr7@DdoMpn$)cW(<NS}!tC{%3edd9
zq>=npcRKw2Q9`aIOV4xM)}vJ3{L*&>AQF8bvHU1;BfTVo$(lF_-`!;_E^fMtDT!z$
z)TuTi2z%@fn;2c>SH7DOD}05YmpcnnlF<6Y@*1D4;2ns85M+0*SH!Z@!HWr-*2_QA
z&+U%BXobEvt-OGujPRa){aj^KS*cHf;<X(x5_R%{tmqt+tdn!_Hn4>Svh9n&bxgvo
z$dS*=IN_u8AUZn}WUp7<%H{1&FUv+MSb5vAQUiRH)QiAX>{ooAh(nh>f@RuC4V_E1
zAMZDcUES@EKQ{0^*s<qe*zZnv)~bAqCuDgBG;$1iL%LUM1Ww2~=<w=tT{g?+Jl{Bc
z5?6rqra{Hh;19RFpQ}6Bj&f-~q3E{zq6q`i;3nH;hG*uoiyOkxSljGGomScc!^8fN
zjwf?jY#HObhSqcKol=)e_*~V?N2cX{g$et$eYi#qFEjTut_XzkRmYXdt?ytLy+#vD
z)n1X<98;;D*mUMLii&tWN9C}q+rPZD2$xM`2uld4G^q3y4Ag>3-6CSq<vbllu;&0j
z88uxB)~`aGAuCiN>GVF68Cqt-WrcUAWh~d^CYb_Uoou(vwK6@CgPe%ej5_KA3+et}
zhomIIkROsmAyR4IJ?vCFJ(U!?`$~S(T`9WHi3z^pw;KS+3fd#OfmqZ5`<di|)eDZC
zQ&)$QJtoon>Pg(-Knq0OOVUP$`TI0){wBY7y|@W7G^9;O>X&L>BDM%1@xD}5G5o2a
z<T!{_)qr;x0`?kD^YA@(b4%`9+n@NA_(Rj;aG+dQ!mo;8?ay5i7aKHx3P|08fA{ro
zJ0cc}U8Q7n7197Kmbp07+*;YMh*rBt77PTJ8{T#HSV_@YYQZh7l9kei>4xMFBf<70
z@w#xnpldWukK*8}C{iWuZ6pG`fK`yt9+aZi`Gue$r#wyOZgawFY`t}E&>AKGI-eVv
z3Hi6+9R3tD139<3jMPQ6daT1?sU4a7&}9UA3A?_MuVcSnD@E%zZP5dKAzIN?wsx9)
z{5(pVhGdiC0OJw)=*$-3NTUP4`-#uqjhv&5D%h_C1b$5~VSN<2JCUA+a!Mo;9Nj41
zY8R=edrunT^i=7ge$ffmM44@kkn<P69V2<~|4|+n|22UahXUW-1_dKZO<r2##OIMN
z45ja#6b^_h<>#VxbE53rehdIi*uV!IVmR1X45o?`F*Smf=<=sL9L4t_<s_U8r>bG5
z#8lsT+Fs?^ZkDt_@@6JfR%Qa2)0+Z|hvv_RZj{f{VV(Kp&BNE^dv#fSFfzb8Ig@yS
zei|+vch8s#2A>2u%_~qzOhUca7|k+34&QB(vB8slP1bV6TkmwRwOd@I%%nl00MW@4
zK8Wb{JjK&ni$-hPVHRS+l}j%0WK|36TXnGs@0k};EB!QCZf%FaLa(pjJsumzx23BO
zi1}bNX<ctLdg&av+hy_f<~MtUG4}piLkyscfud5=unW3nZ)V#G!Z<B2r2o-x@$?k6
zJ9l3cJ^Jc6P4x{^n!ea))e~Y2Lc#|~!)1#?v>czP2uFLht#V(X?!*35Av{>FqI7+H
z$Z{)ZcfdogIN1_Q&G>3X%QTQT^OujE!4pbz8DSVi5}bRCw=D6ckBE9rmqTQE!HaOU
z_*zHr;jQ2$KS0*_ce$U}CK9?cBRi^_!<YBvd>#2gPNwU_GOH;O`H^2bp_g1FIiZ@4
zk%TZ3Iq5FErpS1gQPFj+Z{HflzrvbPMd*5on8cyry=ht(bx!8i<nX;?;N2ZXjln=D
zxvW`}Fl7hDa$9QLL62ocA71Gd8nt%rtnF-INc^ai>1e9cLSIpob)E2#_Oeu<UM8A)
z=xTm}p~J6oRB~9NWAi!NI*e-sfY?buqLd!j07~CEv0F~#nyRiyJfR7c0YAIw`gD*-
zshtof?h*HGYG~lV@AFd;=j9UU-I6amyaRYGBV>_ZhrP0Gg$JMWtn_AmRzIGu*!=UB
zWV;0W6T(>R@3AgI-Vng4o`?t`%rt#7p54`99LtP7<O)iMu#4UD%oieRN)2nLurFs_
zvn`z^`p~<RgB1~Y+5>GGh0!yvjhUQl5F5hP8;z;`nO-8lw>2u>U_Fie{wUv@xnv)C
z?C|X%DHl!fjf0R>TL?><<T>(&vUhiQ;hVtVa<0w{CO-s<U#WS7_ouUi%B$-eM#a!z
zh*bt5Y;st<$T<DL<QEJ(L%B#ba`HVsn;U}VxbvUa-*I3U{k`ic`Dlyws7LLV=_DWB
ze!bzv6lyjj4+^4{A(tSJ$YF3n9Y;Xsrj{8yIzN5yjkv*BkVUsye`NiNs#@#=g756n
z&geNyt<Z(9ul4ATpj&v>kMiN|Teby>5c-_guWntHbvY{8JJCfKAAhMN7XP@pRnUXN
zcZw`!(Y+xD6PSqtvyfd5U|zaakSZ@rk@v4FTj8@NVG_%u`rLEJ`e((^KwC!4?4Kc#
zERfm9h>*nk-!^IT%02n&?2Nh_=M&WZsAVP?ycVg=PQ$1lC&U97oGm4ah&~L@78#Y3
z9=f99LCz6W1r16)IX(p|uGHNF+q2%-Emk$Vk)`RUjP;eIllid|ADcbHeYP4(d0M2H
z1X1O=WdN^c_M(vt7eBFlwEk^suci`+A^I7gOX4kN?Yp#{-a4*59IYL<9leGeb8M}h
z^s)AE0qo4Gy?ky39@(1)jb6>}$GO+7Z^iQxgUe>IeTme(hk5wA4JepjrkJknHmmX9
z>&dh1X9&ZB<uU$NPE}^n@^1*azQYHlaI(9BX1ls(627aH;1$^ne@;lzjuj$(TOrxI
zi+kZ>Y<4aB=eB@tVIh^aT^eg>m&%gDXlN<2%*Ofgx>32kisK6!#$_iHpI5?hRPO;+
zcKQ0bnCDePgNORa3%@j`wps#>m6i6jJ6P+Lw)eQGSO)e=F~JXM*pvHDueycxA``RO
zjHMDmw7x{uCXp)!jyQtgAMi6!GkG(Ys|#4S(MsgJu4OPuK?`308Ml|<TimQKObfP;
zu(OUsy<dz*=c<Wq8SfL-T)z+Zy&)6%y+Yr}j*_Dy=3k7#GyRR3$k1N~KMY_Lc;v!8
z%r5dtchT>@AjXY#SulO^Sl_v)u3nOY$hgH_xB8(gAB;A=rlIqo9&%SZ*uc+5D9|@z
zmFyZSbg7rg-qOdpolmL1I&?>gGTmv^r?F%_nHXX9YO&LiCLzu<Tu|H}Wt$ag=~z79
zzg~dQbsllkRLFvpe<~*?`!u}iZs(qptY~~M=8GHOnvBM`J_{OCL)n#ky&t={_`R6@
ze@qPN@m_Yf+%w-*d`SRICa2P3KEwrKh|?iR$Iyf<QXJ=W{$R2cN<jYdL}@6KO@d^T
zSJ3G8vag0ARo3P6F>SuDXY%b?cA-9-TlJg!FF;QKqzSarvJwDcp;{dmvOO_%v9%5S
z3GxJ-XV}#8ox7tTzow^W9ktut)%%d8-9ZuC1GxVQ0<N!9RAo>zFsz*=hv?!)%xWt=
zw`jjg;y4@G^BvpT`j`?VsA{+si9V{?HEhNkduh%)LqmOWphN%Rqi6O!iVb$Jm8m#x
zY84fg^<pXH=U(S}<o#!fKdyWa4+3JA(#EN#oV+dU2oyDru5QX?4s*Ir(kKc?{-<Te
z^`XD58^(Sr8%RMZCwS<beSpHX;~X<|MC^TwO5>VB)>Xl?`={xdsxE@Lz{~aMM@Z1d
zw)GDfoy3%5F5gi`d1~QpCW7d5DtN$z&@~To<=%YT!*<$LN?9Krumf(pr8ifP_2mHJ
zP^2rh)M|Mud<I=;(f!O`=<V5(FM5i}Kp|^kLGNXVjDd74?QTSjz!j9)4r1n|MBcNC
z)Qpo4ekYO~#(A~0aWkmtY&DTl!?m+wY&%#~XG19M%m<av!Lt(YL7Yg8HggusClFc)
zR<L<U|HD-Ajjs(lU@~i7sYEbg2hdw$;fk&!xc_37N^zvVdgN+Q1jgFCnSainoe!9t
zcyr9aUAI~?JG7xUv}18E`lwy8b|&gccTKpm7vm*6-c~yK$RtqYXiz}ZUxEeLk(%O6
zIk0Xyx8dX)GaV?cwn}#Pkk*Z%GJa=abQC7Ka1rZIkj(RCuF;xqRo*CnYOCIz->i;J
z8;0*!e&uIBi`{`1my_>|k^#lp7*cuwPTg$%IO_ZI`2aL12y?tGFdVmDP|vfT4#suf
zgepH=jrru}V)AS|@C|1a76`&V(9CBTSFp(phwkWJi0XP)?#lPK`vOOW`z(+|6yn|H
zabyd*wO|L%?5@E0mu+tojwl{eKSw44YvkHk=gyTFIXVUjSK&TW;!DQwQ9L5tX!~Qe
zu<NXwxnj`5(V&-xtEzsgjO^ZSBhKWcP&W&e%<95i|63}c>iyS&6=pF|0Yv>e&oWj=
zH;;Xm_fJm;1$JA{=0~&xmaJ`hpPX=j3S|q6`XMUHXLh?LLk&bFot`~e;`oBIe$v&p
z@6;dB2MbUvw319jt1aCm%BNtlqo74S(ITzRqks$`LzVC`ii#8sKCOkdNypiDIV=C-
zglDFnVH_G@-@FTVqu&C4-Dk?}>p%*NlJ~3Mx86G<#`X*<<5Gi;`+SnWC2w>dfqgE`
z0s{y&bU)B2avYHbG!!l;gb=u>p;vyFvHc(k_)!%4d2UaST+}&~(sFdS6nVjgJc=^T
zpoOMpt5P?sz>Yw0P5?#%B9UluVw_1i&mK)&X7i#(h&~*{OXG5VS@g=fO5|?YYSk}$
zjJIoY@jG5ukXmWUW$-v|sU|d-CEhL$wPzv^26Aie_QpX(pG<aZd?aQ!G^2+sPNfGk
zP@-l$v3*~N$*9T-s^qz%NLd%-`EYr;TA0m3F|}pQh0bn~6TD4{X(-ltWNOrnF!@!I
zgV0GR&`J0>??ch;U`t<dBy3}bcv(2N(1JB)qC?HyXZiMyI+6}4`><9O_KikSU9)hj
zGWP>-(&Nu9<5EZ$K1i2vJ9X>OtRLs?Z723@Lv<9|klBwYJtC9g8}IUatYIm`Z~59I
zrm7Llq@eh*pdXgqN0C<CgG7g(PU$IyrXn`khVDuB3QG6Q;*k@6R^(eSf8(Pp3`&sl
z8(m=lnBI!oyi^=|L(k&4TgnN>CrWzcOg-p12l0`&d~zF6PhxaqeJjMgAO;ponz#ql
z?o%=WLw1;7PQZ`VST$Jve54fRrW58WU}4XlD@Icut2w2x^@y_1xfxbo6fSeRLBto1
zUA`TifVPYpv}j2=s*zXV;X1!w_z_WIEeU;+hQ+U+Qi{>!xKxR<9_p7)u{Ko7vTXOU
zj+|yIG3nW8zQ(k2?SQDrT<_-25?i@E4Par5MDWxl^ID|_-!n4XaDnNT;5Auaxl(sS
zgr%JeGiaHR7e>U<AsIha`WEzN_Auc1!Sbq9`lVVAKQ;nC$+Y0{c%0u5mOAR^qdvZZ
z6DJQzK8QD7Mhx8=oQdChIh0&U2*-cbS7*U7^9t_QPfVWVgMa)R?f)y$<#vOEI}J75
aUw-x)Q};%2N6G)IFCii;Tq&sU`#%6Obq0$7

literal 0
HcmV?d00001

diff --git a/doc/ci/environments/index.md b/doc/ci/environments/index.md
index 6bac004fcdf..9e4819b8ad8 100644
--- a/doc/ci/environments/index.md
+++ b/doc/ci/environments/index.md
@@ -35,7 +35,7 @@ To view a list of environments and deployments:
 1. On the left sidebar, select **Deployments > Environments**.
    The environments are displayed.
 
-   ![Environments list](img/environments_list.png)
+   ![Environments list](img/environments_list_v14_3.png)
 
 1. To view a list of deployments for an environment, select the environment name,
    for example, `staging`.
@@ -646,9 +646,9 @@ Web terminals:
 - Are available to project Maintainers and Owners only.
 - Must [be enabled](../../administration/integration/terminal.md).
 
-In the UI, you can view the Web terminal by selecting a **Terminal** button:
+In the UI, you can view the Web terminal by selecting **Terminal** from the actions menu:
 
-![Terminal button on environment index](img/environments_terminal_button_on_index_v13_10.png)
+![Terminal button on environment index](img/environments_terminal_button_on_index_v14_3.png)
 
 You can also access the terminal button from the page for a specific environment:
 
@@ -816,3 +816,41 @@ To ensure the `action: stop` can always run when needed, you can:
       action: stop
     when: manual
   ```
+
+### A deployment job failed with "This job could not be executed because it would create an environment with an invalid parameter" error
+
+> [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/21182) in GitLab 14.4.
+
+FLAG:
+On self-managed GitLab, by default this bug fix is not available. To make it available per project or for your entire instance, ask an administrator to [enable the `surface_environment_creation_failure` flag](../../administration/feature_flags.md). On GitLab.com, this bug fix is not available, but will be rolled out shortly.
+
+If your project is configured to [create a dynamic environment](#create-a-dynamic-environment),
+such as a [Review App](../review_apps/index.md), you might encounter this error
+because the dynamically generated parameter is invalid for the system.
+
+For example, if you have the following in your `.gitlab-ci.yml`:
+
+```yaml
+review:
+  script: deploy review app
+  environment: review/$CI_COMMIT_REF_NAME
+```
+
+When you create a new merge request with a branch name `bug-fix!`,
+the `review` job tries to create an environment with `review/bug-fix!`.
+However, the `!` is an invalid character for environments, so the
+deployment job fails since it was about to run without an environment.
+
+To fix this, you can:
+
+- Re-create your feature branch without the invalid characters,
+  such as `bug-fix`.
+- Replace the `CI_COMMIT_REF_NAME`
+  [predefined variable](../variables/predefined_variables.md) with
+  `CI_COMMIT_REF_SLUG` which strips any invalid characters:
+
+  ```yaml
+  review:
+    script: deploy review app
+    environment: review/$CI_COMMIT_REF_SLUG
+  ```
diff --git a/doc/development/pipelines.md b/doc/development/pipelines.md
index f3946131914..8a7add3e9e6 100644
--- a/doc/development/pipelines.md
+++ b/doc/development/pipelines.md
@@ -252,7 +252,7 @@ graph RL;
     2_1-1 & 2_1-2 & 2_1-3 & 2_1-4 --> 1-6;
   end
 
-  2_2-2["rspec frontend_fixture/rspec-ee frontend_fixture (7 minutes)"];
+  2_2-2["rspec-all frontend_fixture (7 minutes)"];
   class 2_2-2 criticalPath;
   click 2_2-2 "https://app.periscopedata.com/app/gitlab/652085/Engineering-Productivity---Pipeline-Build-Durations?widget=7910143&udv=0"
   2_2-4["memory-on-boot (3.5 minutes)"];
@@ -284,7 +284,7 @@ graph RL;
   3_1-1["jest (14.5 minutes)"];
   class 3_1-1 criticalPath;
   click 3_1-1 "https://app.periscopedata.com/app/gitlab/652085/Engineering-Productivity---Pipeline-Build-Durations?widget=6914204&udv=0"
-  subgraph "Needs `rspec frontend_fixture/rspec-ee frontend_fixture`";
+  subgraph "Needs `rspec-all frontend_fixture`";
     3_1-1 --> 2_2-2;
   end
 
@@ -355,7 +355,7 @@ graph RL;
     2_1-1 & 2_1-2 & 2_1-3 & 2_1-4 --> 1-6;
   end
 
-  2_2-2["rspec frontend_fixture/rspec-ee frontend_fixture (7 minutes)"];
+  2_2-2["rspec-all frontend_fixture (7 minutes)"];
   class 2_2-2 criticalPath;
   click 2_2-2 "https://app.periscopedata.com/app/gitlab/652085/Engineering-Productivity---Pipeline-Build-Durations?widget=7910143&udv=0"
   2_2-4["memory-on-boot (3.5 minutes)"];
@@ -395,7 +395,7 @@ graph RL;
   3_1-1["jest (14.5 minutes)"];
   class 3_1-1 criticalPath;
   click 3_1-1 "https://app.periscopedata.com/app/gitlab/652085/Engineering-Productivity---Pipeline-Build-Durations?widget=6914204&udv=0"
-  subgraph "Needs `rspec frontend_fixture/rspec-ee frontend_fixture`";
+  subgraph "Needs `rspec-all frontend_fixture`";
     3_1-1 --> 2_2-2;
   end
 
diff --git a/doc/operations/metrics/dashboards/panel_types.md b/doc/operations/metrics/dashboards/panel_types.md
index dc96e2556ac..140e18b5b13 100644
--- a/doc/operations/metrics/dashboards/panel_types.md
+++ b/doc/operations/metrics/dashboards/panel_types.md
@@ -62,12 +62,10 @@ panel_groups:
             query_range: 'http_requests_total'
             label: '# of Requests'
             unit: 'count'
-        metrics:
           - id: anomaly_requests_upper_limit
             query_range: 10000
             label: 'Max # of requests'
             unit: 'count'
-        metrics:
           - id: anomaly_requests_lower_limit
             query_range: 2000
             label: 'Min # of requests'
diff --git a/doc/operations/metrics/dashboards/variables.md b/doc/operations/metrics/dashboards/variables.md
index 4b083284819..fa79524883d 100644
--- a/doc/operations/metrics/dashboards/variables.md
+++ b/doc/operations/metrics/dashboards/variables.md
@@ -8,7 +8,9 @@ info: To determine the technical writer assigned to the Stage/Group associated w
 
 ## Query variables
 
-Variables can be specified using double curly braces, such as `"{{ci_environment_slug}}"` ([added](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/20793) in GitLab 12.7).
+> [Introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/20793) in GitLab 12.7.
+
+Variables can be specified using double curly braces, such as `"{{ci_environment_slug}}"`.
 
 Support for the `"%{ci_environment_slug}"` format was
 [removed](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/31581) in GitLab 13.0.
@@ -66,5 +68,5 @@ avg(sum(container_memory_usage_bytes{container_name!="{{pod}}"}) by (job)) witho
 The URL for this query would be:
 
 ```plaintext
-http://gitlab.com/<user>/<project>/-/environments/<environment_id>/metrics?dashboard=.gitlab%2Fdashboards%2Fcustom.yml&pod=POD
+https://gitlab.com/<user>/<project>/-/environments/<environment_id>/metrics?dashboard=.gitlab%2Fdashboards%2Fcustom.yml&pod=POD
 ```
diff --git a/doc/operations/metrics/dashboards/yaml.md b/doc/operations/metrics/dashboards/yaml.md
index 45803598a40..8068a66d5c4 100644
--- a/doc/operations/metrics/dashboards/yaml.md
+++ b/doc/operations/metrics/dashboards/yaml.md
@@ -14,7 +14,7 @@ Dashboards have several components:
 
 The following tables outline the details of expected properties.
 
-## **Dashboard (top-level) properties**
+## Dashboard (top-level) properties
 
 | Property | Type | Required | Description |
 | ------ | ------ | ------ | ------ |
@@ -23,7 +23,7 @@ The following tables outline the details of expected properties.
 | `templating` | hash | no | Top level key under which templating related options can be added. |
 | `links` | array | no | Add links to display on the dashboard. |
 
-## **Templating (`templating`) properties**
+## Templating (`templating`) properties
 
 | Property | Type | Required | Description |
 | -------- | ---- | -------- | ----------- |
@@ -31,7 +31,7 @@ The following tables outline the details of expected properties.
 
 Read the documentation on [templating](templating_variables.md).
 
-## **Links (`links`) properties**
+## Links (`links`) properties
 
 | Property | Type | Required | Description |
 | -------- | ---- | -------- | ----------- |
@@ -41,7 +41,7 @@ Read the documentation on [templating](templating_variables.md).
 
 Read the documentation on [links](index.md#add-related-links-to-custom-dashboards).
 
-## **Panel group (`panel_groups`) properties**
+## Panel group (`panel_groups`) properties
 
 Dashboards display panel groups in the order they are listed in the dashboard YAML file.
 
@@ -55,7 +55,7 @@ is no longer used.
 
 Panels in a panel group are laid out in rows consisting of two panels per row. An exception to this rule are single panels on a row: these panels take the full width of their containing row.
 
-## **Panel (`panels`) properties**
+## Panel (`panels`) properties
 
 Dashboards display panels in the order they are listed in the dashboard YAML file.
 
@@ -72,7 +72,7 @@ is no longer used.
 | `metrics` | array | yes | The metrics which should be displayed in the panel. Any number of metrics can be displayed when `type` is `area-chart` or `line-chart`, whereas only 3 can be displayed when `type` is `anomaly-chart`. |
 | `links` | array | no | Add links to display on the chart's [context menu](index.md#chart-context-menu). |
 
-## **Axis (`panels[].y_axis`) properties**
+## Axis (`panels[].y_axis`) properties
 
 | Property    | Type   | Required                      | Description                                                          |
 | ----------- | ------ | ----------------------------- | -------------------------------------------------------------------- |
@@ -80,7 +80,7 @@ is no longer used.
 | `format`    | string | no, defaults to `engineering` | Unit format used. See the [full list of units](yaml_number_format.md). |
 | `precision` | number | no, defaults to `2`           | Number of decimal places to display in the number.                                          |                        |
 
-## **Metrics (`metrics`) properties**
+## Metrics (`metrics`) properties
 
 | Property | Type | Required | Description |
 | ------ | ------ | ------ | ------ |
diff --git a/lib/gitlab/ci/pipeline/seed/build.rb b/lib/gitlab/ci/pipeline/seed/build.rb
index 934bf22d8ad..9ad5d6538b7 100644
--- a/lib/gitlab/ci/pipeline/seed/build.rb
+++ b/lib/gitlab/ci/pipeline/seed/build.rb
@@ -106,10 +106,15 @@ module Gitlab
 
             environment = Seed::Environment.new(build).to_resource
 
-            # If there is a validation error on environment creation, such as
-            # the name contains invalid character, the build falls back to a
-            # non-environment job.
             unless environment.persisted?
+              if Feature.enabled?(:surface_environment_creation_failure, build.project, default_enabled: :yaml) &&
+                 Feature.disabled?(:surface_environment_creation_failure_override, build.project)
+                return { status: :failed, failure_reason: :environment_creation_failure }
+              end
+
+              # If there is a validation error on environment creation, such as
+              # the name contains invalid character, the build falls back to a
+              # non-environment job.
               Gitlab::ErrorTracking.track_exception(
                 EnvironmentCreationFailure.new,
                 project_id: build.project_id,
diff --git a/lib/gitlab/ci/status/build/failed.rb b/lib/gitlab/ci/status/build/failed.rb
index ee210e51232..b0f12ff7517 100644
--- a/lib/gitlab/ci/status/build/failed.rb
+++ b/lib/gitlab/ci/status/build/failed.rb
@@ -33,7 +33,8 @@ module Gitlab
             ci_quota_exceeded: 'no more CI minutes available',
             no_matching_runner: 'no matching runner available',
             trace_size_exceeded: 'log size limit exceeded',
-            builds_disabled: 'project builds are disabled'
+            builds_disabled: 'project builds are disabled',
+            environment_creation_failure: 'environment creation failure'
           }.freeze
 
           private_constant :REASONS
diff --git a/lib/gitlab/database/load_balancing/load_balancer.rb b/lib/gitlab/database/load_balancing/load_balancer.rb
index a51626b895a..5d9dbfdabbd 100644
--- a/lib/gitlab/database/load_balancing/load_balancer.rb
+++ b/lib/gitlab/database/load_balancing/load_balancer.rb
@@ -30,6 +30,10 @@ module Gitlab
             end
         end
 
+        def primary_only?
+          @primary_only
+        end
+
         def disconnect!(timeout: 120)
           host_list.hosts.each { |host| host.disconnect!(timeout: timeout) }
         end
@@ -151,6 +155,17 @@ module Gitlab
 
         # Yields a block, retrying it upon error using an exponential backoff.
         def retry_with_backoff(retries = 3, time = 2)
+          # In CI we only use the primary, but databases may not always be
+          # available (or take a few seconds to become available). Retrying in
+          # this case can slow down CI jobs. In addition, retrying with _only_
+          # a primary being present isn't all that helpful.
+          #
+          # To prevent this from happening, we don't make any attempt at
+          # retrying unless one or more replicas are used. This matches the
+          # behaviour from before we enabled load balancing code even if no
+          # replicas were configured.
+          return yield if primary_only?
+
           retried = 0
           last_error = nil
 
@@ -176,6 +191,11 @@ module Gitlab
 
         def connection_error?(error)
           case error
+          when ActiveRecord::NoDatabaseError
+            # Retrying this error isn't going to magically make the database
+            # appear. It also slows down CI jobs that are meant to create the
+            # database in the first place.
+            false
           when ActiveRecord::StatementInvalid, ActionView::Template::Error
             # After connecting to the DB Rails will wrap query errors using this
             # class.
diff --git a/lib/gitlab/usage_data_counters/ci_template_unique_counter.rb b/lib/gitlab/usage_data_counters/ci_template_unique_counter.rb
index e5a50c92329..b8de7de848d 100644
--- a/lib/gitlab/usage_data_counters/ci_template_unique_counter.rb
+++ b/lib/gitlab/usage_data_counters/ci_template_unique_counter.rb
@@ -5,23 +5,14 @@ module Gitlab::UsageDataCounters
     REDIS_SLOT = 'ci_templates'
     KNOWN_EVENTS_FILE_PATH = File.expand_path('known_events/ci_templates.yml', __dir__)
 
-    # NOTE: Events originating from implicit Auto DevOps pipelines get prefixed with `implicit_`
-    TEMPLATE_TO_EVENT = {
-      '5-Minute-Production-App.gitlab-ci.yml' => '5_min_production_app',
-      'Auto-DevOps.gitlab-ci.yml' => 'auto_devops',
-      'AWS/CF-Provision-and-Deploy-EC2.gitlab-ci.yml' => 'aws_cf_deploy_ec2',
-      'AWS/Deploy-ECS.gitlab-ci.yml' => 'aws_deploy_ecs',
-      'Jobs/Build.gitlab-ci.yml' => 'auto_devops_build',
-      'Jobs/Deploy.gitlab-ci.yml' => 'auto_devops_deploy',
-      'Jobs/Deploy.latest.gitlab-ci.yml' => 'auto_devops_deploy_latest',
-      'Security/SAST.gitlab-ci.yml' => 'security_sast',
-      'Security/Secret-Detection.gitlab-ci.yml' => 'security_secret_detection',
-      'Terraform/Base.latest.gitlab-ci.yml' => 'terraform_base_latest'
-    }.freeze
-
     class << self
       def track_unique_project_event(project_id:, template:, config_source:)
-        Gitlab::UsageDataCounters::HLLRedisCounter.track_event(ci_template_event_name(template, config_source), values: project_id)
+        expanded_template_name = expand_template_name(template)
+        return unless expanded_template_name
+
+        Gitlab::UsageDataCounters::HLLRedisCounter.track_event(
+          ci_template_event_name(expanded_template_name, config_source), values: project_id
+        )
       end
 
       def ci_templates(relative_base = 'lib/gitlab/ci/templates')
@@ -30,9 +21,12 @@ module Gitlab::UsageDataCounters
 
       def ci_template_event_name(template_name, config_source)
         prefix = 'implicit_' if config_source.to_s == 'auto_devops_source'
-        template_event_name = TEMPLATE_TO_EVENT[template_name] || template_to_event_name(template_name)
 
-        "p_#{REDIS_SLOT}_#{prefix}#{template_event_name}"
+        "p_#{REDIS_SLOT}_#{prefix}#{template_to_event_name(template_name)}"
+      end
+
+      def expand_template_name(template_name)
+        Gitlab::Template::GitlabCiYmlTemplate.find(template_name.chomp('.gitlab-ci.yml'))&.full_name
       end
 
       private
diff --git a/lib/gitlab/usage_data_counters/known_events/ci_templates.yml b/lib/gitlab/usage_data_counters/known_events/ci_templates.yml
index cf790767f17..99bdd3ca9e9 100644
--- a/lib/gitlab/usage_data_counters/known_events/ci_templates.yml
+++ b/lib/gitlab/usage_data_counters/known_events/ci_templates.yml
@@ -1,44 +1,8 @@
-# Implicit Auto DevOps pipeline events
-- name: p_ci_templates_implicit_auto_devops
-  category: ci_templates
-  redis_slot: ci_templates
-  aggregation: weekly
-
-# Explicit include:template pipeline events
-- name: p_ci_templates_5_min_production_app
-  category: ci_templates
-  redis_slot: ci_templates
-  aggregation: weekly
-
-- name: p_ci_templates_aws_cf_deploy_ec2
-  category: ci_templates
-  redis_slot: ci_templates
-  aggregation: weekly
-
-- name: p_ci_templates_auto_devops_build
-  category: ci_templates
-  redis_slot: ci_templates
-  aggregation: weekly
-
-- name: p_ci_templates_auto_devops_deploy
-  category: ci_templates
-  redis_slot: ci_templates
-  aggregation: weekly
-
-- name: p_ci_templates_auto_devops_deploy_latest
-  category: ci_templates
-  redis_slot: ci_templates
-  aggregation: weekly
-
-# This part of the file is generated automatically by
+# This file is generated automatically by
 #   bin/rake gitlab:usage_data:generate_ci_template_events
 #
 # Do not edit it manually!
-#
-# The section above this should be removed once we roll out tracking all ci
-# templates
-# https://gitlab.com/gitlab-org/gitlab/-/issues/339684
-
+---
 - name: p_ci_templates_terraform_base_latest
   category: ci_templates
   redis_slot: ci_templates
@@ -463,6 +427,10 @@
   category: ci_templates
   redis_slot: ci_templates
   aggregation: weekly
+- name: p_ci_templates_implicit_auto_devops
+  category: ci_templates
+  redis_slot: ci_templates
+  aggregation: weekly
 - name: p_ci_templates_implicit_jobs_dast_default_branch_deploy
   category: ci_templates
   redis_slot: ci_templates
@@ -499,11 +467,11 @@
   category: ci_templates
   redis_slot: ci_templates
   aggregation: weekly
-- name: p_ci_templates_implicit_auto_devops_deploy
+- name: p_ci_templates_implicit_jobs_deploy
   category: ci_templates
   redis_slot: ci_templates
   aggregation: weekly
-- name: p_ci_templates_implicit_auto_devops_build
+- name: p_ci_templates_implicit_jobs_build
   category: ci_templates
   redis_slot: ci_templates
   aggregation: weekly
@@ -515,7 +483,7 @@
   category: ci_templates
   redis_slot: ci_templates
   aggregation: weekly
-- name: p_ci_templates_implicit_auto_devops_deploy_latest
+- name: p_ci_templates_implicit_jobs_deploy_latest
   category: ci_templates
   redis_slot: ci_templates
   aggregation: weekly
diff --git a/lib/tasks/gitlab/usage_data.rake b/lib/tasks/gitlab/usage_data.rake
index 35ddc627389..694c49240ed 100644
--- a/lib/tasks/gitlab/usage_data.rake
+++ b/lib/tasks/gitlab/usage_data.rake
@@ -41,20 +41,32 @@ namespace :gitlab do
       repository_includes = ci_template_includes_hash(:repository_source)
       auto_devops_jobs_includes = ci_template_includes_hash(:auto_devops_source, 'Jobs')
       auto_devops_security_includes = ci_template_includes_hash(:auto_devops_source, 'Security')
-      all_includes = [*repository_includes, *auto_devops_jobs_includes, *auto_devops_security_includes]
+      all_includes = [
+        *repository_includes,
+        ci_template_event('p_ci_templates_implicit_auto_devops'),
+        *auto_devops_jobs_includes,
+        *auto_devops_security_includes
+      ]
 
       File.write(Gitlab::UsageDataCounters::CiTemplateUniqueCounter::KNOWN_EVENTS_FILE_PATH, banner + YAML.dump(all_includes).gsub(/ *$/m, ''))
     end
 
     def ci_template_includes_hash(source, template_directory = nil)
       Gitlab::UsageDataCounters::CiTemplateUniqueCounter.ci_templates("lib/gitlab/ci/templates/#{template_directory}").map do |template|
-        {
-          'name' => Gitlab::UsageDataCounters::CiTemplateUniqueCounter.ci_template_event_name("#{template_directory}/#{template}", source),
-          'category' => 'ci_templates',
-          'redis_slot' => Gitlab::UsageDataCounters::CiTemplateUniqueCounter::REDIS_SLOT,
-          'aggregation' => 'weekly'
-        }
+        expanded_template_name = Gitlab::UsageDataCounters::CiTemplateUniqueCounter.expand_template_name("#{template_directory}/#{template}")
+        event_name = Gitlab::UsageDataCounters::CiTemplateUniqueCounter.ci_template_event_name(expanded_template_name, source)
+
+        ci_template_event(event_name)
       end
     end
+
+    def ci_template_event(event_name)
+      {
+        'name' => event_name,
+        'category' => 'ci_templates',
+        'redis_slot' => Gitlab::UsageDataCounters::CiTemplateUniqueCounter::REDIS_SLOT,
+        'aggregation' => 'weekly'
+      }
+    end
   end
 end
diff --git a/locale/gitlab.pot b/locale/gitlab.pot
index 6f48a77f9be..b750df89e83 100644
--- a/locale/gitlab.pot
+++ b/locale/gitlab.pot
@@ -13060,6 +13060,9 @@ msgstr ""
 msgid "Environments|Note that this action will stop the environment, but it will %{emphasisStart}not%{emphasisEnd} have an effect on any existing deployment due to no “stop environment action” being defined in the %{ciConfigLinkStart}.gitlab-ci.yml%{ciConfigLinkEnd} file."
 msgstr ""
 
+msgid "Environments|Open"
+msgstr ""
+
 msgid "Environments|Open live environment"
 msgstr ""
 
@@ -25726,6 +25729,9 @@ msgstr ""
 msgid "Prevent adding new members to project membership within this group"
 msgstr ""
 
+msgid "Prevent auto-stopping"
+msgstr ""
+
 msgid "Prevent editing approval rules in projects and merge requests."
 msgstr ""
 
diff --git a/scripts/rspec_helpers.sh b/scripts/rspec_helpers.sh
index 797d9188f81..280a1586de3 100644
--- a/scripts/rspec_helpers.sh
+++ b/scripts/rspec_helpers.sh
@@ -109,14 +109,18 @@ function rspec_paralellized_job() {
   local test_level="${job_name[1]}"
   local report_name=$(echo "${CI_JOB_NAME}" | sed -E 's|[/ ]|_|g') # e.g. 'rspec unit pg12 1/24' would become 'rspec_unit_pg12_1_24'
   local rspec_opts="${1}"
-  local spec_folder_prefix=""
+  local spec_folder_prefixes=""
 
   if [[ "${test_tool}" =~ "-ee" ]]; then
-    spec_folder_prefix="ee/"
+    spec_folder_prefixes="'ee/'"
   fi
 
   if [[ "${test_tool}" =~ "-jh" ]]; then
-    spec_folder_prefix="jh/"
+    spec_folder_prefixes="'jh/'"
+  fi
+
+  if [[ "${test_tool}" =~ "-all" ]]; then
+    spec_folder_prefixes="['', 'ee/']"
   fi
 
   export KNAPSACK_LOG_LEVEL="debug"
@@ -131,7 +135,7 @@ function rspec_paralellized_job() {
   cp "${KNAPSACK_RSPEC_SUITE_REPORT_PATH}" "${KNAPSACK_REPORT_PATH}"
 
   if [[ -z "${KNAPSACK_TEST_FILE_PATTERN}" ]]; then
-    pattern=$(ruby -r./tooling/quality/test_level.rb -e "puts Quality::TestLevel.new(%(${spec_folder_prefix})).pattern(:${test_level})")
+    pattern=$(ruby -r./tooling/quality/test_level.rb -e "puts Quality::TestLevel.new(${spec_folder_prefixes}).pattern(:${test_level})")
     export KNAPSACK_TEST_FILE_PATTERN="${pattern}"
   fi
 
diff --git a/spec/factories/namespaces/project_namespaces.rb b/spec/factories/namespaces/project_namespaces.rb
index 10b86f48090..ca9fc5f8768 100644
--- a/spec/factories/namespaces/project_namespaces.rb
+++ b/spec/factories/namespaces/project_namespaces.rb
@@ -3,10 +3,11 @@
 FactoryBot.define do
   factory :project_namespace, class: 'Namespaces::ProjectNamespace' do
     project
+    parent { project.namespace }
+    visibility_level { project.visibility_level }
     name { project.name }
     path { project.path }
     type { Namespaces::ProjectNamespace.sti_name }
     owner { nil }
-    parent factory: :group
   end
 end
diff --git a/spec/features/projects/environments/environments_spec.rb b/spec/features/projects/environments/environments_spec.rb
index 9413fae02e0..34e2ca7c8a7 100644
--- a/spec/features/projects/environments/environments_spec.rb
+++ b/spec/features/projects/environments/environments_spec.rb
@@ -226,6 +226,7 @@ RSpec.describe 'Environments page', :js do
         end
 
         it 'does not show terminal button' do
+          expect(page).not_to have_button(_('More actions'))
           expect(page).not_to have_terminal_button
         end
 
@@ -273,6 +274,7 @@ RSpec.describe 'Environments page', :js do
               let(:role) { :maintainer }
 
               it 'shows the terminal button' do
+                click_button(_('More actions'))
                 expect(page).to have_terminal_button
               end
             end
@@ -281,6 +283,7 @@ RSpec.describe 'Environments page', :js do
               let(:role) { :developer }
 
               it 'does not show terminal button' do
+                expect(page).not_to have_button(_('More actions'))
                 expect(page).not_to have_terminal_button
               end
             end
@@ -515,7 +518,7 @@ RSpec.describe 'Environments page', :js do
   end
 
   def have_terminal_button
-    have_link(nil, href: terminal_project_environment_path(project, environment))
+    have_link(_('Terminal'), href: terminal_project_environment_path(project, environment))
   end
 
   def visit_environments(project, **opts)
diff --git a/spec/frontend/environments/environment_delete_spec.js b/spec/frontend/environments/environment_delete_spec.js
index a8c288a3bd8..2d8cff0c74a 100644
--- a/spec/frontend/environments/environment_delete_spec.js
+++ b/spec/frontend/environments/environment_delete_spec.js
@@ -1,4 +1,4 @@
-import { GlButton } from '@gitlab/ui';
+import { GlDropdownItem } from '@gitlab/ui';
 
 import { shallowMount } from '@vue/test-utils';
 import DeleteComponent from '~/environments/components/environment_delete.vue';
@@ -15,7 +15,7 @@ describe('External URL Component', () => {
     });
   };
 
-  const findButton = () => wrapper.find(GlButton);
+  const findDropdownItem = () => wrapper.find(GlDropdownItem);
 
   beforeEach(() => {
     jest.spyOn(window, 'confirm');
@@ -23,14 +23,15 @@ describe('External URL Component', () => {
     createWrapper();
   });
 
-  it('should render a button to delete the environment', () => {
-    expect(findButton().exists()).toBe(true);
-    expect(wrapper.attributes('title')).toEqual('Delete environment');
+  it('should render a dropdown item to delete the environment', () => {
+    expect(findDropdownItem().exists()).toBe(true);
+    expect(wrapper.text()).toEqual('Delete environment');
+    expect(findDropdownItem().attributes('variant')).toBe('danger');
   });
 
   it('emits requestDeleteEnvironment in the event hub when button is clicked', () => {
     jest.spyOn(eventHub, '$emit');
-    findButton().vm.$emit('click');
+    findDropdownItem().vm.$emit('click');
     expect(eventHub.$emit).toHaveBeenCalledWith('requestDeleteEnvironment', wrapper.vm.environment);
   });
 });
diff --git a/spec/frontend/environments/environment_monitoring_spec.js b/spec/frontend/environments/environment_monitoring_spec.js
index 3a53b57c3c6..98dd9edd812 100644
--- a/spec/frontend/environments/environment_monitoring_spec.js
+++ b/spec/frontend/environments/environment_monitoring_spec.js
@@ -1,6 +1,6 @@
-import { GlButton } from '@gitlab/ui';
-import { shallowMount } from '@vue/test-utils';
+import { mountExtended } from 'helpers/vue_test_utils_helper';
 import MonitoringComponent from '~/environments/components/environment_monitoring.vue';
+import { __ } from '~/locale';
 
 describe('Monitoring Component', () => {
   let wrapper;
@@ -8,31 +8,19 @@ describe('Monitoring Component', () => {
   const monitoringUrl = 'https://gitlab.com';
 
   const createWrapper = () => {
-    wrapper = shallowMount(MonitoringComponent, {
+    wrapper = mountExtended(MonitoringComponent, {
       propsData: {
         monitoringUrl,
       },
     });
   };
 
-  const findButtons = () => wrapper.findAll(GlButton);
-  const findButtonsByIcon = (icon) =>
-    findButtons().filter((button) => button.props('icon') === icon);
-
   beforeEach(() => {
     createWrapper();
   });
 
-  describe('computed', () => {
-    it('title', () => {
-      expect(wrapper.vm.title).toBe('Monitoring');
-    });
-  });
-
   it('should render a link to environment monitoring page', () => {
-    expect(wrapper.attributes('href')).toEqual(monitoringUrl);
-    expect(findButtonsByIcon('chart').length).toBe(1);
-    expect(wrapper.attributes('title')).toBe('Monitoring');
-    expect(wrapper.attributes('aria-label')).toBe('Monitoring');
+    const link = wrapper.findByRole('menuitem', { name: __('Monitoring') });
+    expect(link.attributes('href')).toEqual(monitoringUrl);
   });
 });
diff --git a/spec/frontend/environments/environment_pin_spec.js b/spec/frontend/environments/environment_pin_spec.js
index 5cdd52294b6..a9a58071e12 100644
--- a/spec/frontend/environments/environment_pin_spec.js
+++ b/spec/frontend/environments/environment_pin_spec.js
@@ -1,4 +1,4 @@
-import { GlButton, GlIcon } from '@gitlab/ui';
+import { GlDropdownItem } from '@gitlab/ui';
 import { shallowMount } from '@vue/test-utils';
 import PinComponent from '~/environments/components/environment_pin.vue';
 import eventHub from '~/environments/event_hub';
@@ -30,15 +30,15 @@ describe('Pin Component', () => {
     wrapper.destroy();
   });
 
-  it('should render the component with thumbtack icon', () => {
-    expect(wrapper.find(GlIcon).props('name')).toBe('thumbtack');
+  it('should render the component with descriptive text', () => {
+    expect(wrapper.text()).toBe('Prevent auto-stopping');
   });
 
   it('should emit onPinClick when clicked', () => {
     const eventHubSpy = jest.spyOn(eventHub, '$emit');
-    const button = wrapper.find(GlButton);
+    const item = wrapper.find(GlDropdownItem);
 
-    button.vm.$emit('click');
+    item.vm.$emit('click');
 
     expect(eventHubSpy).toHaveBeenCalledWith('cancelAutoStop', autoStopUrl);
   });
diff --git a/spec/frontend/environments/environment_rollback_spec.js b/spec/frontend/environments/environment_rollback_spec.js
index b6c3d436c18..cde675cd9e7 100644
--- a/spec/frontend/environments/environment_rollback_spec.js
+++ b/spec/frontend/environments/environment_rollback_spec.js
@@ -1,5 +1,5 @@
-import { GlButton } from '@gitlab/ui';
-import { shallowMount, mount } from '@vue/test-utils';
+import { GlDropdownItem } from '@gitlab/ui';
+import { shallowMount } from '@vue/test-utils';
 import RollbackComponent from '~/environments/components/environment_rollback.vue';
 import eventHub from '~/environments/event_hub';
 
@@ -7,7 +7,7 @@ describe('Rollback Component', () => {
   const retryUrl = 'https://gitlab.com/retry';
 
   it('Should render Re-deploy label when isLastDeployment is true', () => {
-    const wrapper = mount(RollbackComponent, {
+    const wrapper = shallowMount(RollbackComponent, {
       propsData: {
         retryUrl,
         isLastDeployment: true,
@@ -15,11 +15,11 @@ describe('Rollback Component', () => {
       },
     });
 
-    expect(wrapper.element).toHaveSpriteIcon('repeat');
+    expect(wrapper.text()).toBe('Re-deploy to environment');
   });
 
   it('Should render Rollback label when isLastDeployment is false', () => {
-    const wrapper = mount(RollbackComponent, {
+    const wrapper = shallowMount(RollbackComponent, {
       propsData: {
         retryUrl,
         isLastDeployment: false,
@@ -27,7 +27,7 @@ describe('Rollback Component', () => {
       },
     });
 
-    expect(wrapper.element).toHaveSpriteIcon('redo');
+    expect(wrapper.text()).toBe('Rollback environment');
   });
 
   it('should emit a "rollback" event on button click', () => {
@@ -40,7 +40,7 @@ describe('Rollback Component', () => {
         },
       },
     });
-    const button = wrapper.find(GlButton);
+    const button = wrapper.find(GlDropdownItem);
 
     button.vm.$emit('click');
 
diff --git a/spec/frontend/environments/environment_terminal_button_spec.js b/spec/frontend/environments/environment_terminal_button_spec.js
index 2475785a927..ab9f370595f 100644
--- a/spec/frontend/environments/environment_terminal_button_spec.js
+++ b/spec/frontend/environments/environment_terminal_button_spec.js
@@ -1,12 +1,13 @@
-import { shallowMount } from '@vue/test-utils';
+import { mountExtended } from 'helpers/vue_test_utils_helper';
 import TerminalComponent from '~/environments/components/environment_terminal_button.vue';
+import { __ } from '~/locale';
 
-describe('Stop Component', () => {
+describe('Terminal Component', () => {
   let wrapper;
   const terminalPath = '/path';
 
   const mountWithProps = (props) => {
-    wrapper = shallowMount(TerminalComponent, {
+    wrapper = mountExtended(TerminalComponent, {
       propsData: props,
     });
   };
@@ -15,17 +16,9 @@ describe('Stop Component', () => {
     mountWithProps({ terminalPath });
   });
 
-  describe('computed', () => {
-    it('title', () => {
-      expect(wrapper.vm.title).toEqual('Terminal');
-    });
-  });
-
   it('should render a link to open a web terminal with the provided path', () => {
-    expect(wrapper.element.tagName).toBe('A');
-    expect(wrapper.attributes('title')).toBe('Terminal');
-    expect(wrapper.attributes('aria-label')).toBe('Terminal');
-    expect(wrapper.attributes('href')).toBe(terminalPath);
+    const link = wrapper.findByRole('menuitem', { name: __('Terminal') });
+    expect(link.attributes('href')).toBe(terminalPath);
   });
 
   it('should render a non-disabled button', () => {
diff --git a/spec/frontend/packages_and_registries/package_registry/components/list/__snapshots__/app_spec.js.snap b/spec/frontend/packages_and_registries/package_registry/components/list/__snapshots__/app_spec.js.snap
index 7c653028956..1b556be5873 100644
--- a/spec/frontend/packages_and_registries/package_registry/components/list/__snapshots__/app_spec.js.snap
+++ b/spec/frontend/packages_and_registries/package_registry/components/list/__snapshots__/app_spec.js.snap
@@ -1,10 +1,12 @@
 // Jest Snapshot v1, https://goo.gl/fbAQLP
 
-exports[`packages_list_app renders 1`] = `
+exports[`PackagesListApp renders 1`] = `
 <div>
   <package-title-stub
-    count="0"
+    count="2"
     helpurl="packageHelpUrl"
   />
+   
+  <package-search-stub />
 </div>
 `;
diff --git a/spec/frontend/packages_and_registries/package_registry/components/list/app_spec.js b/spec/frontend/packages_and_registries/package_registry/components/list/app_spec.js
index 0187f7e410f..3958cdf21bb 100644
--- a/spec/frontend/packages_and_registries/package_registry/components/list/app_spec.js
+++ b/spec/frontend/packages_and_registries/package_registry/components/list/app_spec.js
@@ -1,15 +1,40 @@
 import { GlEmptyState, GlSprintf, GlLink } from '@gitlab/ui';
+import { createLocalVue } from '@vue/test-utils';
+
+import VueApollo from 'vue-apollo';
 import { shallowMountExtended } from 'helpers/vue_test_utils_helper';
+import createMockApollo from 'helpers/mock_apollo_helper';
+import waitForPromises from 'helpers/wait_for_promises';
 import PackageListApp from '~/packages_and_registries/package_registry/components/list/app.vue';
 import PackageTitle from '~/packages_and_registries/package_registry/components/list/package_title.vue';
+import PackageSearch from '~/packages_and_registries/package_registry/components/list/package_search.vue';
 
-import * as packageUtils from '~/packages_and_registries/shared/utils';
+import {
+  PROJECT_RESOURCE_TYPE,
+  GROUP_RESOURCE_TYPE,
+  LIST_QUERY_DEBOUNCE_TIME,
+} from '~/packages_and_registries/package_registry/constants';
+
+import getPackagesQuery from '~/packages_and_registries/package_registry/graphql/queries/get_packages.query.graphql';
+
+import { packagesListQuery } from '../../mock_data';
 
 jest.mock('~/lib/utils/common_utils');
 jest.mock('~/flash');
 
-describe('packages_list_app', () => {
+const localVue = createLocalVue();
+
+describe('PackagesListApp', () => {
   let wrapper;
+  let apolloProvider;
+
+  const defaultProvide = {
+    packageHelpUrl: 'packageHelpUrl',
+    emptyListIllustration: 'emptyListIllustration',
+    emptyListHelpUrl: 'emptyListHelpUrl',
+    isGroupPage: true,
+    fullPath: 'gitlab-org',
+  };
 
   const PackageList = {
     name: 'package-list',
@@ -18,9 +43,21 @@ describe('packages_list_app', () => {
   const GlLoadingIcon = { name: 'gl-loading-icon', template: '<div>loading</div>' };
 
   const findPackageTitle = () => wrapper.findComponent(PackageTitle);
+  const findSearch = () => wrapper.findComponent(PackageSearch);
+
+  const mountComponent = ({
+    resolver = jest.fn().mockResolvedValue(packagesListQuery()),
+    provide = defaultProvide,
+  } = {}) => {
+    localVue.use(VueApollo);
+
+    const requestHandlers = [[getPackagesQuery, resolver]];
+    apolloProvider = createMockApollo(requestHandlers);
 
-  const mountComponent = () => {
     wrapper = shallowMountExtended(PackageListApp, {
+      localVue,
+      apolloProvider,
+      provide,
       stubs: {
         GlEmptyState,
         GlLoadingIcon,
@@ -28,30 +65,90 @@ describe('packages_list_app', () => {
         GlSprintf,
         GlLink,
       },
-      provide: {
-        packageHelpUrl: 'packageHelpUrl',
-        emptyListIllustration: 'emptyListIllustration',
-        emptyListHelpUrl: 'emptyListHelpUrl',
-      },
     });
   };
 
-  beforeEach(() => {
-    jest.spyOn(packageUtils, 'getQueryParams').mockReturnValue({});
-  });
-
   afterEach(() => {
     wrapper.destroy();
   });
 
-  it('renders', () => {
+  const waitForDebouncedApollo = () => {
+    jest.advanceTimersByTime(LIST_QUERY_DEBOUNCE_TIME);
+    return waitForPromises();
+  };
+
+  it('renders', async () => {
     mountComponent();
+
+    await waitForDebouncedApollo();
+
     expect(wrapper.element).toMatchSnapshot();
   });
 
-  it('has a package title', () => {
+  it('has a package title', async () => {
     mountComponent();
 
+    await waitForDebouncedApollo();
+
     expect(findPackageTitle().exists()).toBe(true);
+    expect(findPackageTitle().props('count')).toBe(2);
+  });
+
+  describe('search component', () => {
+    it('exists', () => {
+      mountComponent();
+
+      expect(findSearch().exists()).toBe(true);
+    });
+
+    it('on update triggers a new query with updated values', async () => {
+      const resolver = jest.fn().mockResolvedValue(packagesListQuery());
+      mountComponent({ resolver });
+
+      const payload = {
+        sort: 'VERSION_DESC',
+        filters: { packageName: 'foo', packageType: 'CONAN' },
+      };
+
+      findSearch().vm.$emit('update', payload);
+
+      await waitForDebouncedApollo();
+      jest.advanceTimersByTime(LIST_QUERY_DEBOUNCE_TIME);
+
+      expect(resolver).toHaveBeenCalledWith(
+        expect.objectContaining({
+          groupSort: payload.sort,
+          ...payload.filters,
+        }),
+      );
+    });
+  });
+
+  describe.each`
+    type                     | sortType
+    ${PROJECT_RESOURCE_TYPE} | ${'sort'}
+    ${GROUP_RESOURCE_TYPE}   | ${'groupSort'}
+  `('$type query', ({ type, sortType }) => {
+    let provide;
+    let resolver;
+
+    const isGroupPage = type === GROUP_RESOURCE_TYPE;
+
+    beforeEach(() => {
+      provide = { ...defaultProvide, isGroupPage };
+      resolver = jest.fn().mockResolvedValue(packagesListQuery(type));
+      mountComponent({ provide, resolver });
+      return waitForDebouncedApollo();
+    });
+
+    it('succeeds', () => {
+      expect(findPackageTitle().props('count')).toBe(2);
+    });
+
+    it('calls the resolver with the right parameters', () => {
+      expect(resolver).toHaveBeenCalledWith(
+        expect.objectContaining({ isGroupPage, [sortType]: '' }),
+      );
+    });
   });
 });
diff --git a/spec/frontend/packages_and_registries/package_registry/components/list/packages_search_spec.js b/spec/frontend/packages_and_registries/package_registry/components/list/packages_search_spec.js
index 42bc9fa3a9e..e65b2a6f320 100644
--- a/spec/frontend/packages_and_registries/package_registry/components/list/packages_search_spec.js
+++ b/spec/frontend/packages_and_registries/package_registry/components/list/packages_search_spec.js
@@ -1,113 +1,61 @@
-import { shallowMount, createLocalVue } from '@vue/test-utils';
-import Vuex from 'vuex';
+import { nextTick } from 'vue';
+import { shallowMountExtended } from 'helpers/vue_test_utils_helper';
 import { sortableFields } from '~/packages/list/utils';
 import component from '~/packages_and_registries/package_registry/components/list/package_search.vue';
 import PackageTypeToken from '~/packages_and_registries/package_registry/components/list/tokens/package_type_token.vue';
 import RegistrySearch from '~/vue_shared/components/registry/registry_search.vue';
 import UrlSync from '~/vue_shared/components/url_sync.vue';
+import { useMockLocationHelper } from 'helpers/mock_window_location_helper';
+import { getQueryParams, extractFilterAndSorting } from '~/packages_and_registries/shared/utils';
 
-const localVue = createLocalVue();
-localVue.use(Vuex);
+jest.mock('~/packages_and_registries/shared/utils');
+
+useMockLocationHelper();
 
 describe('Package Search', () => {
   let wrapper;
-  let store;
+
+  const defaultQueryParamsMock = {
+    filters: ['foo'],
+    sorting: { sort: 'desc' },
+  };
 
   const findRegistrySearch = () => wrapper.findComponent(RegistrySearch);
   const findUrlSync = () => wrapper.findComponent(UrlSync);
 
-  const createStore = (isGroupPage) => {
-    const state = {
-      config: {
-        isGroupPage,
-      },
-      sorting: {
-        orderBy: 'version',
-        sort: 'desc',
-      },
-      filter: [],
-    };
-    store = new Vuex.Store({
-      state,
-    });
-    store.dispatch = jest.fn();
-  };
-
   const mountComponent = (isGroupPage = false) => {
-    createStore(isGroupPage);
-
-    wrapper = shallowMount(component, {
-      localVue,
-      store,
+    wrapper = shallowMountExtended(component, {
+      provide() {
+        return {
+          isGroupPage,
+        };
+      },
       stubs: {
         UrlSync,
       },
     });
   };
 
+  beforeEach(() => {
+    extractFilterAndSorting.mockReturnValue(defaultQueryParamsMock);
+  });
+
   afterEach(() => {
     wrapper.destroy();
-    wrapper = null;
   });
 
-  it('has a registry search component', () => {
+  it('has a registry search component', async () => {
     mountComponent();
 
+    await nextTick();
+
     expect(findRegistrySearch().exists()).toBe(true);
-    expect(findRegistrySearch().props()).toMatchObject({
-      filter: store.state.filter,
-      sorting: store.state.sorting,
-      tokens: expect.arrayContaining([
-        expect.objectContaining({ token: PackageTypeToken, type: 'type', icon: 'package' }),
-      ]),
-      sortableFields: sortableFields(),
-    });
   });
 
-  it.each`
-    isGroupPage | page
-    ${false}    | ${'project'}
-    ${true}     | ${'group'}
-  `('in a $page page binds the right props', ({ isGroupPage }) => {
-    mountComponent(isGroupPage);
-
-    expect(findRegistrySearch().props()).toMatchObject({
-      filter: store.state.filter,
-      sorting: store.state.sorting,
-      tokens: expect.arrayContaining([
-        expect.objectContaining({ token: PackageTypeToken, type: 'type', icon: 'package' }),
-      ]),
-      sortableFields: sortableFields(isGroupPage),
-    });
-  });
-
-  it('on sorting:changed emits update event and calls vuex setSorting', () => {
-    const payload = { sort: 'foo' };
-
+  it('registry search is mounted after mount', async () => {
     mountComponent();
 
-    findRegistrySearch().vm.$emit('sorting:changed', payload);
-
-    expect(store.dispatch).toHaveBeenCalledWith('setSorting', payload);
-    expect(wrapper.emitted('update')).toEqual([[]]);
-  });
-
-  it('on filter:changed calls vuex setFilter', () => {
-    const payload = ['foo'];
-
-    mountComponent();
-
-    findRegistrySearch().vm.$emit('filter:changed', payload);
-
-    expect(store.dispatch).toHaveBeenCalledWith('setFilter', payload);
-  });
-
-  it('on filter:submit emits update event', () => {
-    mountComponent();
-
-    findRegistrySearch().vm.$emit('filter:submit');
-
-    expect(wrapper.emitted('update')).toEqual([[]]);
+    expect(findRegistrySearch().exists()).toBe(false);
   });
 
   it('has a UrlSync component', () => {
@@ -116,13 +64,102 @@ describe('Package Search', () => {
     expect(findUrlSync().exists()).toBe(true);
   });
 
-  it('on query:changed calls updateQuery from UrlSync', () => {
+  it.each`
+    isGroupPage | page
+    ${false}    | ${'project'}
+    ${true}     | ${'group'}
+  `('in a $page page binds the right props', async ({ isGroupPage }) => {
+    mountComponent(isGroupPage);
+
+    await nextTick();
+
+    expect(findRegistrySearch().props()).toMatchObject({
+      tokens: expect.arrayContaining([
+        expect.objectContaining({ token: PackageTypeToken, type: 'type', icon: 'package' }),
+      ]),
+      sortableFields: sortableFields(isGroupPage),
+    });
+  });
+
+  it('on sorting:changed emits update event and update internal sort', async () => {
+    const payload = { sort: 'foo' };
+
+    mountComponent();
+
+    await nextTick();
+
+    findRegistrySearch().vm.$emit('sorting:changed', payload);
+
+    await nextTick();
+
+    expect(findRegistrySearch().props('sorting')).toEqual({ sort: 'foo', orderBy: 'name' });
+
+    // there is always a first call on mounted that emits up default values
+    expect(wrapper.emitted('update')[1]).toEqual([
+      {
+        filters: {
+          packageName: '',
+          packageType: undefined,
+        },
+        sort: 'NAME_FOO',
+      },
+    ]);
+  });
+
+  it('on filter:changed updates the filters', async () => {
+    const payload = ['foo'];
+
+    mountComponent();
+
+    await nextTick();
+
+    findRegistrySearch().vm.$emit('filter:changed', payload);
+
+    await nextTick();
+
+    expect(findRegistrySearch().props('filter')).toEqual(['foo']);
+  });
+
+  it('on filter:submit emits update event', async () => {
+    mountComponent();
+
+    await nextTick();
+
+    findRegistrySearch().vm.$emit('filter:submit');
+
+    expect(wrapper.emitted('update')[1]).toEqual([
+      {
+        filters: {
+          packageName: '',
+          packageType: undefined,
+        },
+        sort: 'NAME_DESC',
+      },
+    ]);
+  });
+
+  it('on query:changed calls updateQuery from UrlSync', async () => {
     jest.spyOn(UrlSync.methods, 'updateQuery').mockImplementation(() => {});
 
     mountComponent();
 
+    await nextTick();
+
     findRegistrySearch().vm.$emit('query:changed');
 
     expect(UrlSync.methods.updateQuery).toHaveBeenCalled();
   });
+
+  it('sets the component sorting and filtering based on the querystring', async () => {
+    mountComponent();
+
+    await nextTick();
+
+    expect(getQueryParams).toHaveBeenCalled();
+
+    expect(findRegistrySearch().props()).toMatchObject({
+      filter: defaultQueryParamsMock.filters,
+      sorting: defaultQueryParamsMock.sorting,
+    });
+  });
 });
diff --git a/spec/frontend/packages_and_registries/package_registry/mock_data.js b/spec/frontend/packages_and_registries/package_registry/mock_data.js
index 9438a2d2d72..8b1ac377531 100644
--- a/spec/frontend/packages_and_registries/package_registry/mock_data.js
+++ b/spec/frontend/packages_and_registries/package_registry/mock_data.js
@@ -249,3 +249,27 @@ export const packageDestroyFileMutationError = () => ({
     },
   ],
 });
+
+export const packagesListQuery = (type = 'group') => ({
+  data: {
+    [type]: {
+      packages: {
+        count: 2,
+        nodes: [
+          {
+            __typename: 'Package',
+            id: 'gid://gitlab/Packages::Package/247',
+            name: 'version_test1',
+          },
+          {
+            __typename: 'Package',
+            id: 'gid://gitlab/Packages::Package/246',
+            name: 'version_test1',
+          },
+        ],
+        __typename: 'PackageConnection',
+      },
+      __typename: 'Group',
+    },
+  },
+});
diff --git a/spec/graphql/resolvers/issues_resolver_spec.rb b/spec/graphql/resolvers/issues_resolver_spec.rb
index 3a7c778da62..9897e697009 100644
--- a/spec/graphql/resolvers/issues_resolver_spec.rb
+++ b/spec/graphql/resolvers/issues_resolver_spec.rb
@@ -26,7 +26,14 @@ RSpec.describe Resolvers::IssuesResolver do
     expect(described_class).to have_nullable_graphql_type(Types::IssueType.connection_type)
   end
 
+  shared_context 'filtering for confidential issues' do
+    let_it_be(:confidential_issue1) { create(:issue, project: project, confidential: true) }
+    let_it_be(:confidential_issue2) { create(:issue, project: other_project, confidential: true) }
+  end
+
   context "with a project" do
+    let(:obj) { project }
+
     before_all do
       project.add_developer(current_user)
       project.add_reporter(reporter)
@@ -222,6 +229,42 @@ RSpec.describe Resolvers::IssuesResolver do
         end
       end
 
+      context 'confidential issues' do
+        include_context 'filtering for confidential issues'
+
+        context "when user is allowed to view confidential issues" do
+          it 'returns all viewable issues by default' do
+            expect(resolve_issues).to contain_exactly(issue1, issue2, confidential_issue1)
+          end
+
+          it 'returns only the non-confidential issues for the project when filter is set to false' do
+            expect(resolve_issues({ confidential: false })).to contain_exactly(issue1, issue2)
+          end
+
+          it "returns only the confidential issues for the project when filter is set to true" do
+            expect(resolve_issues({ confidential: true })).to contain_exactly(confidential_issue1)
+          end
+        end
+
+        context "when user is not allowed to see confidential issues" do
+          before do
+            project.add_guest(current_user)
+          end
+
+          it 'returns all viewable issues by default' do
+            expect(resolve_issues).to contain_exactly(issue1, issue2)
+          end
+
+          it 'does not return the confidential issues when filter is set to false' do
+            expect(resolve_issues({ confidential: false })).to contain_exactly(issue1, issue2)
+          end
+
+          it 'does not return the confidential issues when filter is set to true' do
+            expect(resolve_issues({ confidential: true })).to be_empty
+          end
+        end
+      end
+
       context 'when searching issues' do
         it 'returns correct issues' do
           expect(resolve_issues(search: 'foo')).to contain_exactly(issue2)
@@ -519,32 +562,72 @@ RSpec.describe Resolvers::IssuesResolver do
   end
 
   context "with a group" do
+    let(:obj) { group }
+
     before do
       group.add_developer(current_user)
     end
 
     describe '#resolve' do
       it 'finds all group issues' do
-        result = resolve(described_class, obj: group, ctx: { current_user: current_user })
-
-        expect(result).to contain_exactly(issue1, issue2, issue3)
+        expect(resolve_issues).to contain_exactly(issue1, issue2, issue3)
       end
 
       it 'returns issues without the specified issue_type' do
-        result = resolve(described_class, obj: group, ctx: { current_user: current_user }, args: { not: { types: ['issue'] } })
+        expect(resolve_issues({ not: { types: ['issue'] } })).to contain_exactly(issue1)
+      end
 
-        expect(result).to contain_exactly(issue1)
+      context "confidential issues" do
+        include_context 'filtering for confidential issues'
+
+        context "when user is allowed to view confidential issues" do
+          it 'returns all viewable issues by default' do
+            expect(resolve_issues).to contain_exactly(issue1, issue2, issue3, confidential_issue1, confidential_issue2)
+          end
+
+          context 'filtering for confidential issues' do
+            it 'returns only the non-confidential issues for the group when filter is set to false' do
+              expect(resolve_issues({ confidential: false })).to contain_exactly(issue1, issue2, issue3)
+            end
+
+            it "returns only the confidential issues for the group when filter is set to true" do
+              expect(resolve_issues({ confidential: true })).to contain_exactly(confidential_issue1, confidential_issue2)
+            end
+          end
+        end
+
+        context "when user is not allowed to see confidential issues" do
+          before do
+            group.add_guest(current_user)
+          end
+
+          it 'returns all viewable issues by default' do
+            expect(resolve_issues).to contain_exactly(issue1, issue2, issue3)
+          end
+
+          context 'filtering for confidential issues' do
+            it 'does not return the confidential issues when filter is set to false' do
+              expect(resolve_issues({ confidential: false })).to contain_exactly(issue1, issue2, issue3)
+            end
+
+            it 'does not return the confidential issues when filter is set to true' do
+              expect(resolve_issues({ confidential: true })).to be_empty
+            end
+          end
+        end
       end
     end
   end
 
   context "when passing a non existent, batch loaded project" do
-    let(:project) do
+    let!(:project) do
       BatchLoader::GraphQL.for("non-existent-path").batch do |_fake_paths, loader, _|
         loader.call("non-existent-path", nil)
       end
     end
 
+    let(:obj) { project }
+
     it "returns nil without breaking" do
       expect(resolve_issues(iids: ["don't", "break"])).to be_empty
     end
@@ -565,6 +648,6 @@ RSpec.describe Resolvers::IssuesResolver do
   end
 
   def resolve_issues(args = {}, context = { current_user: current_user })
-    resolve(described_class, obj: project, args: args, ctx: context)
+    resolve(described_class, obj: obj, args: args, ctx: context)
   end
 end
diff --git a/spec/helpers/packages_helper_spec.rb b/spec/helpers/packages_helper_spec.rb
index 06c6cccd488..2af572850da 100644
--- a/spec/helpers/packages_helper_spec.rb
+++ b/spec/helpers/packages_helper_spec.rb
@@ -260,4 +260,34 @@ RSpec.describe PackagesHelper do
       end
     end
   end
+
+  describe '#packages_list_data' do
+    let_it_be(:resource) { project }
+    let_it_be(:type) { 'project' }
+
+    let(:expected_result) do
+      {
+        resource_id: resource.id,
+        full_path: resource.full_path,
+        page_type: type
+      }
+    end
+
+    subject(:result) { helper.packages_list_data(type, resource) }
+
+    context 'at a project level' do
+      it 'populates presenter data' do
+        expect(result).to match(hash_including(expected_result))
+      end
+    end
+
+    context 'at a group level' do
+      let_it_be(:resource) { create(:group) }
+      let_it_be(:type) { 'group' }
+
+      it 'populates presenter data' do
+        expect(result).to match(hash_including(expected_result))
+      end
+    end
+  end
 end
diff --git a/spec/lib/gitlab/ci/pipeline/seed/build_spec.rb b/spec/lib/gitlab/ci/pipeline/seed/build_spec.rb
index 0c28515b574..3aa6b2e3c05 100644
--- a/spec/lib/gitlab/ci/pipeline/seed/build_spec.rb
+++ b/spec/lib/gitlab/ci/pipeline/seed/build_spec.rb
@@ -440,17 +440,30 @@ RSpec.describe Gitlab::Ci::Pipeline::Seed::Build do
         context 'when the environment name is invalid' do
           let(:attributes) { { name: 'deploy', ref: 'master', environment: '!!!' } }
 
-          it_behaves_like 'non-deployment job'
-          it_behaves_like 'ensures environment inexistence'
+          it 'fails the job with a failure reason and does not create an environment' do
+            expect(subject).to be_failed
+            expect(subject).to be_environment_creation_failure
+            expect(subject.metadata.expanded_environment_name).to be_nil
+            expect(Environment.exists?(name: expected_environment_name)).to eq(false)
+          end
 
-          it 'tracks an exception' do
-            expect(Gitlab::ErrorTracking).to receive(:track_exception)
-              .with(an_instance_of(described_class::EnvironmentCreationFailure),
-                    project_id: project.id,
-                    reason: %q{Name can contain only letters, digits, '-', '_', '/', '$', '{', '}', '.', and spaces, but it cannot start or end with '/'})
-              .once
+          context 'when surface_environment_creation_failure feature flag is disabled' do
+            before do
+              stub_feature_flags(surface_environment_creation_failure: false)
+            end
 
-            subject
+            it_behaves_like 'non-deployment job'
+            it_behaves_like 'ensures environment inexistence'
+
+            it 'tracks an exception' do
+              expect(Gitlab::ErrorTracking).to receive(:track_exception)
+                .with(an_instance_of(described_class::EnvironmentCreationFailure),
+                      project_id: project.id,
+                      reason: %q{Name can contain only letters, digits, '-', '_', '/', '$', '{', '}', '.', and spaces, but it cannot start or end with '/'})
+                .once
+
+              subject
+            end
           end
         end
       end
diff --git a/spec/lib/gitlab/database/load_balancing/load_balancer_spec.rb b/spec/lib/gitlab/database/load_balancing/load_balancer_spec.rb
index 4784f4270b2..fb17ba0e121 100644
--- a/spec/lib/gitlab/database/load_balancing/load_balancer_spec.rb
+++ b/spec/lib/gitlab/database/load_balancing/load_balancer_spec.rb
@@ -274,6 +274,14 @@ RSpec.describe Gitlab::Database::LoadBalancing::LoadBalancer, :request_store do
 
       expect { lb.retry_with_backoff { raise } }.to raise_error(RuntimeError)
     end
+
+    it 'skips retries when only the primary is used' do
+      allow(lb).to receive(:primary_only?).and_return(true)
+
+      expect(lb).not_to receive(:sleep)
+
+      expect { lb.retry_with_backoff { raise } }.to raise_error(RuntimeError)
+    end
   end
 
   describe '#connection_error?' do
@@ -283,6 +291,12 @@ RSpec.describe Gitlab::Database::LoadBalancing::LoadBalancer, :request_store do
       expect(lb.connection_error?(error)).to eq(true)
     end
 
+    it 'returns false for a missing database error' do
+      error = ActiveRecord::NoDatabaseError.new
+
+      expect(lb.connection_error?(error)).to eq(false)
+    end
+
     it 'returns true for a wrapped connection error' do
       wrapped = wrapped_exception(ActiveRecord::StatementInvalid, ActiveRecord::ConnectionNotEstablished)
 
diff --git a/spec/lib/gitlab/usage_data_counters/ci_template_unique_counter_spec.rb b/spec/lib/gitlab/usage_data_counters/ci_template_unique_counter_spec.rb
index 4996b0a0089..222198a58ac 100644
--- a/spec/lib/gitlab/usage_data_counters/ci_template_unique_counter_spec.rb
+++ b/spec/lib/gitlab/usage_data_counters/ci_template_unique_counter_spec.rb
@@ -6,97 +6,62 @@ RSpec.describe Gitlab::UsageDataCounters::CiTemplateUniqueCounter do
   describe '.track_unique_project_event' do
     using RSpec::Parameterized::TableSyntax
 
-    where(:template, :config_source, :expected_event) do
-      # Implicit Auto DevOps usage
-      'Auto-DevOps.gitlab-ci.yml'                     | :auto_devops_source | 'p_ci_templates_implicit_auto_devops'
-      'Jobs/Build.gitlab-ci.yml'                      | :auto_devops_source | 'p_ci_templates_implicit_auto_devops_build'
-      'Jobs/Deploy.gitlab-ci.yml'                     | :auto_devops_source | 'p_ci_templates_implicit_auto_devops_deploy'
-      'Security/SAST.gitlab-ci.yml'                   | :auto_devops_source | 'p_ci_templates_implicit_security_sast'
-      'Security/Secret-Detection.gitlab-ci.yml'       | :auto_devops_source | 'p_ci_templates_implicit_security_secret_detection'
-      # Explicit include:template usage
-      '5-Minute-Production-App.gitlab-ci.yml'         | :repository_source  | 'p_ci_templates_5_min_production_app'
-      'Auto-DevOps.gitlab-ci.yml'                     | :repository_source  | 'p_ci_templates_auto_devops'
-      'AWS/CF-Provision-and-Deploy-EC2.gitlab-ci.yml' | :repository_source  | 'p_ci_templates_aws_cf_deploy_ec2'
-      'AWS/Deploy-ECS.gitlab-ci.yml'                  | :repository_source  | 'p_ci_templates_aws_deploy_ecs'
-      'Jobs/Build.gitlab-ci.yml'                      | :repository_source  | 'p_ci_templates_auto_devops_build'
-      'Jobs/Deploy.gitlab-ci.yml'                     | :repository_source  | 'p_ci_templates_auto_devops_deploy'
-      'Jobs/Deploy.latest.gitlab-ci.yml'              | :repository_source  | 'p_ci_templates_auto_devops_deploy_latest'
-      'Security/SAST.gitlab-ci.yml'                   | :repository_source  | 'p_ci_templates_security_sast'
-      'Security/Secret-Detection.gitlab-ci.yml'       | :repository_source  | 'p_ci_templates_security_secret_detection'
-      'Terraform/Base.latest.gitlab-ci.yml'           | :repository_source  | 'p_ci_templates_terraform_base_latest'
-    end
+    let(:project_id) { 1 }
 
-    with_them do
-      it_behaves_like 'tracking unique hll events' do
-        subject(:request) { described_class.track_unique_project_event(project_id: project_id, template: template, config_source: config_source) }
+    shared_examples 'tracks template' do
+      it "has an event defined for template" do
+        expect do
+          described_class.track_unique_project_event(
+            project_id: project_id,
+            template: template_path,
+            config_source: config_source
+          )
+        end.not_to raise_error
+      end
 
-        let(:project_id) { 1 }
-        let(:target_id) { expected_event }
-        let(:expected_type) { instance_of(Integer) }
+      it "tracks template" do
+        expanded_template_name = described_class.expand_template_name(template_path)
+        expected_template_event_name = described_class.ci_template_event_name(expanded_template_name, config_source)
+        expect(Gitlab::UsageDataCounters::HLLRedisCounter).to(receive(:track_event)).with(expected_template_event_name, values: project_id)
+
+        described_class.track_unique_project_event(project_id: project_id, template: template_path, config_source: config_source)
       end
     end
 
-    context 'known_events coverage tests' do
-      let(:project_id) { 1 }
+    context 'with explicit includes' do
       let(:config_source) { :repository_source }
 
-      # These tests help guard against missing "explicit" events in known_events/ci_templates.yml
-      context 'explicit include:template events' do
-        described_class::TEMPLATE_TO_EVENT.keys.each do |template|
-          it "does not raise error for #{template}" do
-            expect do
-              described_class.track_unique_project_event(project_id: project_id, template: template, config_source: config_source)
-            end.not_to raise_error
+      (described_class.ci_templates - ['Verify/Browser-Performance.latest.gitlab-ci.yml', 'Verify/Browser-Performance.gitlab-ci.yml']).each do |template|
+        context "for #{template}" do
+          let(:template_path) { template }
+
+          include_examples 'tracks template'
+        end
+      end
+    end
+
+    context 'with implicit includes' do
+      let(:config_source) { :auto_devops_source }
+
+      [
+        ['', ['Auto-DevOps.gitlab-ci.yml']],
+        ['Jobs', described_class.ci_templates('lib/gitlab/ci/templates/Jobs')],
+        ['Security', described_class.ci_templates('lib/gitlab/ci/templates/Security')]
+      ].each do |directory, templates|
+        templates.each do |template|
+          context "for #{template}" do
+            let(:template_path) { File.join(directory, template) }
+
+            include_examples 'tracks template'
           end
         end
       end
-
-      # This test is to help guard against missing "implicit" events in known_events/ci_templates.yml
-      it 'does not raise error for any template in an implicit Auto DevOps pipeline' do
-        project = create(:project, :auto_devops)
-        pipeline = double(project: project)
-        command = double
-        result = Gitlab::Ci::YamlProcessor.new(
-          Gitlab::Ci::Pipeline::Chain::Config::Content::AutoDevops.new(pipeline, command).content,
-          project: project,
-          user: double,
-          sha: 'd310cc759caaa20cd05a9e0983d6017896d9c34c'
-        ).execute
-
-        config_source = :auto_devops_source
-
-        result.included_templates.each do |template|
-          expect do
-            described_class.track_unique_project_event(project_id: project.id, template: template, config_source: config_source)
-          end.not_to raise_error
-        end
-      end
     end
 
-    context 'templates outside of TEMPLATE_TO_EVENT' do
-      let(:project_id) { 1 }
-      let(:config_source) { :repository_source }
-
-      described_class.ci_templates.each do |template|
-        next if described_class::TEMPLATE_TO_EVENT.key?(template)
-
-        it "has an event defined for #{template}" do
-          expect do
-            described_class.track_unique_project_event(
-              project_id: project_id,
-              template: template,
-              config_source: config_source
-            )
-          end.not_to raise_error
-        end
-
-        it "tracks #{template}" do
-          expected_template_event_name = described_class.ci_template_event_name(template, :repository_source)
-          expect(Gitlab::UsageDataCounters::HLLRedisCounter).to(receive(:track_event)).with(expected_template_event_name, values: project_id)
-
-          described_class.track_unique_project_event(project_id: project_id, template: template, config_source: config_source)
-        end
-      end
+    it 'expands short template names' do
+      expect do
+        described_class.track_unique_project_event(project_id: 1, template: 'Dependency-Scanning.gitlab-ci.yml', config_source: :repository_source)
+      end.not_to raise_error
     end
   end
 end
diff --git a/spec/models/upload_spec.rb b/spec/models/upload_spec.rb
index 6bac5e31435..0ac684cd04c 100644
--- a/spec/models/upload_spec.rb
+++ b/spec/models/upload_spec.rb
@@ -242,4 +242,28 @@ RSpec.describe Upload do
 
     it { expect(subject.uploader_context).to match(a_hash_including(secret: 'secret', identifier: 'file.txt')) }
   end
+
+  describe '#update_project_statistics' do
+    let_it_be(:project) { create(:project) }
+
+    subject do
+      create(:upload, model: project)
+    end
+
+    it 'updates project statistics when upload is added' do
+      expect(ProjectCacheWorker).to receive(:perform_async)
+        .with(project.id, [], [:uploads_size])
+
+      subject.save!
+    end
+
+    it 'updates project statistics when upload is removed' do
+      subject.save!
+
+      expect(ProjectCacheWorker).to receive(:perform_async)
+        .with(project.id, [], [:uploads_size])
+
+      subject.destroy!
+    end
+  end
 end
diff --git a/spec/presenters/commit_status_presenter_spec.rb b/spec/presenters/commit_status_presenter_spec.rb
index 4b2441d656e..f0bf1b860e4 100644
--- a/spec/presenters/commit_status_presenter_spec.rb
+++ b/spec/presenters/commit_status_presenter_spec.rb
@@ -15,6 +15,25 @@ RSpec.describe CommitStatusPresenter do
     expect(described_class.superclass).to eq(Gitlab::View::Presenter::Delegated)
   end
 
+  describe '#callout_failure_message' do
+    subject { presenter.callout_failure_message }
+
+    context 'when troubleshooting doc is available' do
+      let(:failure_reason) { :environment_creation_failure }
+
+      before do
+        build.failure_reason = failure_reason
+      end
+
+      it 'appends the troubleshooting link' do
+        doc = described_class::TROUBLESHOOTING_DOC[failure_reason]
+
+        expect(subject).to eq("#{described_class.callout_failure_messages[failure_reason]} " \
+                              "<a href=\"#{presenter.help_page_path(doc[:path], anchor: doc[:anchor])}\">How do I fix it?</a>")
+      end
+    end
+  end
+
   describe 'covers all failure reasons' do
     let(:message) { presenter.callout_failure_message }
 
diff --git a/spec/requests/api/graphql/group/issues_spec.rb b/spec/requests/api/graphql/group/issues_spec.rb
new file mode 100644
index 00000000000..332bf242e9c
--- /dev/null
+++ b/spec/requests/api/graphql/group/issues_spec.rb
@@ -0,0 +1,123 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe 'getting an issue list for a group' do
+  include GraphqlHelpers
+
+  let_it_be(:current_user) { create(:user) }
+  let_it_be(:group1) { create(:group) }
+  let_it_be(:group2) { create(:group) }
+  let_it_be(:project1) { create(:project, :public, group: group1) }
+  let_it_be(:project2) { create(:project, :private, group: group1) }
+  let_it_be(:project3) { create(:project, :public, group: group2) }
+  let_it_be(:issue1) { create(:issue, project: project1) }
+  let_it_be(:issue2) { create(:issue, project: project2) }
+  let_it_be(:issue3) { create(:issue, project: project3) }
+
+  let(:issue1_gid) { issue1.to_global_id.to_s }
+  let(:issue2_gid) { issue2.to_global_id.to_s }
+  let(:issues_data) { graphql_data['group']['issues']['edges'] }
+  let(:issue_filter_params) { {} }
+
+  let(:fields) do
+    <<~QUERY
+    edges {
+      node {
+        #{all_graphql_fields_for('issues'.classify)}
+      }
+    }
+    QUERY
+  end
+
+  let(:query) do
+    graphql_query_for(
+      'group',
+      { 'fullPath' => group1.full_path },
+      query_graphql_field('issues', issue_filter_params, fields)
+    )
+  end
+
+  it_behaves_like 'a working graphql query' do
+    before do
+      post_graphql(query, current_user: current_user)
+    end
+  end
+
+  context 'when there is a confidential issue' do
+    let_it_be(:confidential_issue1) { create(:issue, :confidential, project: project1) }
+    let_it_be(:confidential_issue2) { create(:issue, :confidential, project: project2) }
+    let_it_be(:confidential_issue3) { create(:issue, :confidential, project: project3) }
+
+    let(:confidential_issue1_gid) { confidential_issue1.to_global_id.to_s }
+    let(:confidential_issue2_gid) { confidential_issue2.to_global_id.to_s }
+
+    context 'when the user cannot see confidential issues' do
+      before do
+        group1.add_guest(current_user)
+      end
+
+      it 'returns issues without confidential issues for the group' do
+        post_graphql(query, current_user: current_user)
+
+        expect(issues_ids).to contain_exactly(issue1_gid, issue2_gid)
+      end
+
+      context 'filtering for confidential issues' do
+        let(:issue_filter_params) { { confidential: true } }
+
+        it 'returns no issues' do
+          post_graphql(query, current_user: current_user)
+
+          expect(issues_ids).to be_empty
+        end
+      end
+
+      context 'filtering for non-confidential issues' do
+        let(:issue_filter_params) { { confidential: false } }
+
+        it 'returns correctly filtered issues' do
+          post_graphql(query, current_user: current_user)
+
+          expect(issues_ids).to contain_exactly(issue1_gid, issue2_gid)
+        end
+      end
+    end
+
+    context 'when the user can see confidential issues' do
+      before do
+        group1.add_developer(current_user)
+      end
+
+      it 'returns issues with confidential issues for the group' do
+        post_graphql(query, current_user: current_user)
+
+        expect(issues_ids).to contain_exactly(issue1_gid, issue2_gid, confidential_issue1_gid, confidential_issue2_gid)
+      end
+
+      context 'filtering for confidential issues' do
+        let(:issue_filter_params) { { confidential: true } }
+
+        it 'returns correctly filtered issues' do
+          post_graphql(query, current_user: current_user)
+
+          expect(issues_ids).to contain_exactly(confidential_issue1_gid, confidential_issue2_gid)
+        end
+      end
+
+      context 'filtering for non-confidential issues' do
+        let(:issue_filter_params) { { confidential: false } }
+
+        it 'returns correctly filtered issues' do
+          post_graphql(query, current_user: current_user)
+
+          expect(issues_ids).to contain_exactly(issue1_gid, issue2_gid)
+        end
+      end
+    end
+  end
+
+  def issues_ids
+    graphql_dig_at(issues_data, :node, :id)
+  end
+end
diff --git a/spec/requests/api/graphql/project/issues_spec.rb b/spec/requests/api/graphql/project/issues_spec.rb
index 0ac6d0fbc56..a62ce12a3b0 100644
--- a/spec/requests/api/graphql/project/issues_spec.rb
+++ b/spec/requests/api/graphql/project/issues_spec.rb
@@ -11,6 +11,8 @@ RSpec.describe 'getting an issue list for a project' do
   let_it_be(:issue_b, reload: true) { create(:issue, :with_alert, project: project) }
   let_it_be(:issues, reload: true) { [issue_a, issue_b] }
 
+  let(:issue_a_gid) { issue_a.to_global_id.to_s }
+  let(:issue_b_gid) { issue_b.to_global_id.to_s }
   let(:issues_data) { graphql_data['project']['issues']['edges'] }
   let(:issue_filter_params) { {} }
 
@@ -66,9 +68,6 @@ RSpec.describe 'getting an issue list for a project' do
 
     let_it_be(:upvote_award) { create(:award_emoji, :upvote, user: current_user, awardable: issue_a) }
 
-    let(:issue_a_gid) { issue_a.to_global_id.to_s }
-    let(:issue_b_gid) { issue_b.to_global_id.to_s }
-
     where(:value, :gids) do
       'thumbsup'   | lazy { [issue_a_gid] }
       'ANY'        | lazy { [issue_a_gid] }
@@ -84,7 +83,7 @@ RSpec.describe 'getting an issue list for a project' do
       it 'returns correctly filtered issues' do
         post_graphql(query, current_user: current_user)
 
-        expect(graphql_dig_at(issues_data, :node, :id)).to eq(gids)
+        expect(issues_ids).to eq(gids)
       end
     end
   end
@@ -149,6 +148,8 @@ RSpec.describe 'getting an issue list for a project' do
       create(:issue, :confidential, project: project)
     end
 
+    let(:confidential_issue_gid) { confidential_issue.to_global_id.to_s }
+
     context 'when the user cannot see confidential issues' do
       it 'returns issues without confidential issues' do
         post_graphql(query, current_user: current_user)
@@ -159,12 +160,34 @@ RSpec.describe 'getting an issue list for a project' do
           expect(issue.dig('node', 'confidential')).to eq(false)
         end
       end
+
+      context 'filtering for confidential issues' do
+        let(:issue_filter_params) { { confidential: true } }
+
+        it 'returns no issues' do
+          post_graphql(query, current_user: current_user)
+
+          expect(issues_data.size).to eq(0)
+        end
+      end
+
+      context 'filtering for non-confidential issues' do
+        let(:issue_filter_params) { { confidential: false } }
+
+        it 'returns correctly filtered issues' do
+          post_graphql(query, current_user: current_user)
+
+          expect(issues_ids).to contain_exactly(issue_a_gid, issue_b_gid)
+        end
+      end
     end
 
     context 'when the user can see confidential issues' do
-      it 'returns issues with confidential issues' do
+      before do
         project.add_developer(current_user)
+      end
 
+      it 'returns issues with confidential issues' do
         post_graphql(query, current_user: current_user)
 
         expect(issues_data.size).to eq(3)
@@ -175,6 +198,26 @@ RSpec.describe 'getting an issue list for a project' do
 
         expect(confidentials).to eq([true, false, false])
       end
+
+      context 'filtering for confidential issues' do
+        let(:issue_filter_params) { { confidential: true } }
+
+        it 'returns correctly filtered issues' do
+          post_graphql(query, current_user: current_user)
+
+          expect(issues_ids).to contain_exactly(confidential_issue_gid)
+        end
+      end
+
+      context 'filtering for non-confidential issues' do
+        let(:issue_filter_params) { { confidential: false } }
+
+        it 'returns correctly filtered issues' do
+          post_graphql(query, current_user: current_user)
+
+          expect(issues_ids).to contain_exactly(issue_a_gid, issue_b_gid)
+        end
+      end
     end
   end
 
@@ -526,4 +569,8 @@ RSpec.describe 'getting an issue list for a project' do
       include_examples 'N+1 query check'
     end
   end
+
+  def issues_ids
+    graphql_dig_at(issues_data, :node, :id)
+  end
 end
diff --git a/spec/services/groups/transfer_service_spec.rb b/spec/services/groups/transfer_service_spec.rb
index e7928c9c2d5..bcd9573ebeb 100644
--- a/spec/services/groups/transfer_service_spec.rb
+++ b/spec/services/groups/transfer_service_spec.rb
@@ -3,6 +3,19 @@
 require 'spec_helper'
 
 RSpec.describe Groups::TransferService do
+  shared_examples 'project namespace path is in sync with project path' do
+    it 'keeps project and project namespace attributes in sync' do
+      projects_with_project_namespace.each do |project|
+        project.reload
+
+        expect(project.full_path).to eq("#{group_full_path}/#{project.path}")
+        expect(project.project_namespace.full_path).to eq(project.full_path)
+        expect(project.project_namespace.parent).to eq(project.namespace)
+        expect(project.project_namespace.visibility_level).to eq(project.visibility_level)
+      end
+    end
+  end
+
   let_it_be(:user) { create(:user) }
   let_it_be(:new_parent_group) { create(:group, :public) }
 
@@ -169,6 +182,18 @@ RSpec.describe Groups::TransferService do
             expect(project.full_path).to eq("#{group.path}/#{project.path}")
           end
         end
+
+        context 'when projects have project namespaces' do
+          let_it_be(:project1) { create(:project, :private, namespace: group) }
+          let_it_be(:project_namespace1) { create(:project_namespace, project: project1) }
+          let_it_be(:project2) { create(:project, :private, namespace: group) }
+          let_it_be(:project_namespace2) { create(:project_namespace, project: project2) }
+
+          it_behaves_like 'project namespace path is in sync with project path' do
+            let(:group_full_path) { "#{group.path}" }
+            let(:projects_with_project_namespace) { [project1, project2] }
+          end
+        end
       end
     end
 
@@ -222,10 +247,10 @@ RSpec.describe Groups::TransferService do
 
       context 'when the parent group has a project with the same path' do
         let_it_be_with_reload(:group) { create(:group, :public, :nested, path: 'foo') }
+        let_it_be(:membership) { create(:group_member, :owner, group: new_parent_group, user: user) }
+        let_it_be(:project) { create(:project, path: 'foo', namespace: new_parent_group) }
 
         before do
-          create(:group_member, :owner, group: new_parent_group, user: user)
-          create(:project, path: 'foo', namespace: new_parent_group)
           group.update_attribute(:path, 'foo')
         end
 
@@ -237,6 +262,19 @@ RSpec.describe Groups::TransferService do
           transfer_service.execute(new_parent_group)
           expect(transfer_service.error).to eq('Transfer failed: Validation failed: Group URL has already been taken')
         end
+
+        context 'when projects have project namespaces' do
+          let!(:project_namespace) { create(:project_namespace, project: project) }
+
+          before do
+            transfer_service.execute(new_parent_group)
+          end
+
+          it_behaves_like 'project namespace path is in sync with project path' do
+            let(:group_full_path) { "#{new_parent_group.full_path}" }
+            let(:projects_with_project_namespace) { [project] }
+          end
+        end
       end
 
       context 'when the group is allowed to be transferred' do
@@ -407,6 +445,8 @@ RSpec.describe Groups::TransferService do
       context 'when transferring a group with project descendants' do
         let!(:project1) { create(:project, :repository, :private, namespace: group) }
         let!(:project2) { create(:project, :repository, :internal, namespace: group) }
+        let!(:project_namespace1) { create(:project_namespace, project: project1) }
+        let!(:project_namespace2) { create(:project_namespace, project: project2) }
 
         before do
           TestEnv.clean_test_path
@@ -432,18 +472,30 @@ RSpec.describe Groups::TransferService do
             expect(project1.private?).to be_truthy
             expect(project2.internal?).to be_truthy
           end
+
+          it_behaves_like 'project namespace path is in sync with project path' do
+            let(:group_full_path) { "#{new_parent_group.path}/#{group.path}" }
+            let(:projects_with_project_namespace) { [project1, project2] }
+          end
         end
 
         context 'when the new parent has a lower visibility than the projects' do
           let!(:project1) { create(:project, :repository, :public, namespace: group) }
           let!(:project2) { create(:project, :repository, :public, namespace: group) }
-          let(:new_parent_group) { create(:group, :private) }
+          let!(:new_parent_group) { create(:group, :private) }
+          let!(:project_namespace1) { create(:project_namespace, project: project1) }
+          let!(:project_namespace2) { create(:project_namespace, project: project2) }
 
           it 'updates projects visibility to match the new parent' do
             group.projects.each do |project|
               expect(project.private?).to be_truthy
             end
           end
+
+          it_behaves_like 'project namespace path is in sync with project path' do
+            let(:group_full_path) { "#{new_parent_group.path}/#{group.path}" }
+            let(:projects_with_project_namespace) { [project1, project2] }
+          end
         end
       end
 
@@ -452,6 +504,8 @@ RSpec.describe Groups::TransferService do
         let!(:project2) { create(:project, :repository, :internal, namespace: group) }
         let!(:subgroup1) { create(:group, :private, parent: group) }
         let!(:subgroup2) { create(:group, :internal, parent: group) }
+        let!(:project_namespace1) { create(:project_namespace, project: project1) }
+        let!(:project_namespace2) { create(:project_namespace, project: project2) }
 
         before do
           TestEnv.clean_test_path
@@ -480,6 +534,11 @@ RSpec.describe Groups::TransferService do
           expect(project1.redirect_routes.count).to eq(1)
           expect(project2.redirect_routes.count).to eq(1)
         end
+
+        it_behaves_like 'project namespace path is in sync with project path' do
+          let(:group_full_path) { "#{new_parent_group.path}/#{group.path}" }
+          let(:projects_with_project_namespace) { [project1, project2] }
+        end
       end
 
       context 'when transferring a group with nested groups and projects' do
diff --git a/spec/services/projects/transfer_service_spec.rb b/spec/services/projects/transfer_service_spec.rb
index 5a52f4fad6f..d0cb3d08317 100644
--- a/spec/services/projects/transfer_service_spec.rb
+++ b/spec/services/projects/transfer_service_spec.rb
@@ -64,6 +64,33 @@ RSpec.describe Projects::TransferService do
       expect(transfer_result).to be_truthy
       expect(project.namespace).to eq(group)
     end
+
+    context 'when project has an associated project namespace' do
+      let!(:project_namespace) { create(:project_namespace, project: project) }
+
+      it 'keeps project namespace in sync with project' do
+        transfer_result = execute_transfer
+
+        expect(transfer_result).to be_truthy
+
+        project_namespace_in_sync(group)
+      end
+
+      context 'when project is transferred to a deeper nested group' do
+        let(:parent_group) { create(:group) }
+        let(:sub_group) { create(:group, parent: parent_group) }
+        let(:sub_sub_group) { create(:group, parent: sub_group) }
+        let(:group) { sub_sub_group }
+
+        it 'keeps project namespace in sync with project' do
+          transfer_result = execute_transfer
+
+          expect(transfer_result).to be_truthy
+
+          project_namespace_in_sync(sub_sub_group)
+        end
+      end
+    end
   end
 
   context 'when transfer succeeds' do
@@ -243,6 +270,16 @@ RSpec.describe Projects::TransferService do
         expect(unrelated_pending_build.namespace_traversal_ids).to eq(other_project.namespace.traversal_ids)
       end
     end
+
+    context 'when project has an associated project namespace' do
+      let!(:project_namespace) { create(:project_namespace, project: project) }
+
+      it 'keeps project namespace in sync with project' do
+        attempt_project_transfer
+
+        project_namespace_in_sync(user.namespace)
+      end
+    end
   end
 
   context 'namespace -> no namespace' do
@@ -255,6 +292,18 @@ RSpec.describe Projects::TransferService do
       expect(project.namespace).to eq(user.namespace)
       expect(project.errors.messages[:new_namespace].first).to eq 'Please select a new namespace for your project.'
     end
+
+    context 'when project has an associated project namespace' do
+      let!(:project_namespace) { create(:project_namespace, project: project) }
+
+      it 'keeps project namespace in sync with project' do
+        transfer_result = execute_transfer
+
+        expect(transfer_result).to be false
+
+        project_namespace_in_sync(user.namespace)
+      end
+    end
   end
 
   context 'disallow transferring of project with tags' do
@@ -655,4 +704,13 @@ RSpec.describe Projects::TransferService do
   def rugged_config
     rugged_repo(project.repository).config
   end
+
+  def project_namespace_in_sync(group)
+    project.reload
+    expect(project.namespace).to eq(group)
+    expect(project.project_namespace.visibility_level).to eq(project.visibility_level)
+    expect(project.project_namespace.path).to eq(project.path)
+    expect(project.project_namespace.parent).to eq(project.namespace)
+    expect(project.project_namespace.traversal_ids).to eq([*project.namespace.traversal_ids, project.project_namespace.id])
+  end
 end
diff --git a/spec/spec_helper.rb b/spec/spec_helper.rb
index aa791d1d2e7..c8664598691 100644
--- a/spec/spec_helper.rb
+++ b/spec/spec_helper.rb
@@ -315,6 +315,10 @@ RSpec.configure do |config|
       # For more information check https://gitlab.com/gitlab-org/gitlab/-/issues/339348
       stub_feature_flags(new_header_search: false)
 
+      # Disable the override flag in order to enable the feature by default.
+      # See https://docs.gitlab.com/ee/development/feature_flags/#selectively-disable-by-actor
+      stub_feature_flags(surface_environment_creation_failure_override: false)
+
       allow(Gitlab::GitalyClient).to receive(:can_use_disk?).and_return(enable_rugged)
     else
       unstub_all_feature_flags
diff --git a/spec/tooling/quality/test_level_spec.rb b/spec/tooling/quality/test_level_spec.rb
index 89abe337347..0623a67a60e 100644
--- a/spec/tooling/quality/test_level_spec.rb
+++ b/spec/tooling/quality/test_level_spec.rb
@@ -63,7 +63,14 @@ RSpec.describe Quality::TestLevel do
     context 'with a prefix' do
       it 'returns a pattern' do
         expect(described_class.new('ee/').pattern(:system))
-          .to eq("ee/spec/{features}{,/**/}*_spec.rb")
+          .to eq("{ee/}spec/{features}{,/**/}*_spec.rb")
+      end
+    end
+
+    context 'with several prefixes' do
+      it 'returns a pattern' do
+        expect(described_class.new(['', 'ee/', 'jh/']).pattern(:system))
+          .to eq("{,ee/,jh/}spec/{features}{,/**/}*_spec.rb")
       end
     end
 
@@ -138,7 +145,14 @@ RSpec.describe Quality::TestLevel do
     context 'with a prefix' do
       it 'returns a regexp' do
         expect(described_class.new('ee/').regexp(:system))
-          .to eq(%r{ee/spec/(features)})
+          .to eq(%r{(ee/)spec/(features)})
+      end
+    end
+
+    context 'with several prefixes' do
+      it 'returns a regexp' do
+        expect(described_class.new(['', 'ee/', 'jh/']).regexp(:system))
+          .to eq(%r{(|ee/|jh/)spec/(features)})
       end
     end
 
diff --git a/tooling/quality/test_level.rb b/tooling/quality/test_level.rb
index ad9de067375..83cbe7a1f19 100644
--- a/tooling/quality/test_level.rb
+++ b/tooling/quality/test_level.rb
@@ -60,20 +60,20 @@ module Quality
       system: ['features']
     }.freeze
 
-    attr_reader :prefix
+    attr_reader :prefixes
 
-    def initialize(prefix = nil)
-      @prefix = prefix
+    def initialize(prefixes = nil)
+      @prefixes = Array(prefixes)
       @patterns = {}
       @regexps = {}
     end
 
     def pattern(level)
-      @patterns[level] ||= "#{prefix}spec/#{folders_pattern(level)}{,/**/}*#{suffix(level)}"
+      @patterns[level] ||= "#{prefixes_for_pattern}spec/#{folders_pattern(level)}{,/**/}*#{suffix(level)}"
     end
 
     def regexp(level)
-      @regexps[level] ||= Regexp.new("#{prefix}spec/#{folders_regex(level)}").freeze
+      @regexps[level] ||= Regexp.new("#{prefixes_for_regex}spec/#{folders_regex(level)}").freeze
     end
 
     def level_for(file_path)
@@ -102,6 +102,20 @@ module Quality
 
     private
 
+    def prefixes_for_pattern
+      return '' if prefixes.empty?
+
+      "{#{prefixes.join(',')}}"
+    end
+
+    def prefixes_for_regex
+      return '' if prefixes.empty?
+
+      regex_prefix = prefixes.map(&Regexp.method(:escape)).join('|')
+
+      "(#{regex_prefix})"
+    end
+
     def suffix(level)
       case level
       when :frontend_fixture