From 2edf97e22f7b885e5e0311f7a22abc1992fc68c2 Mon Sep 17 00:00:00 2001
From: GitLab Bot <gitlab-bot@gitlab.com>
Date: Wed, 8 Jan 2025 15:35:56 +0000
Subject: [PATCH] Add latest changes from gitlab-org/gitlab@master

---
 GITLAB_PAGES_VERSION                          |  2 +-
 app/assets/javascripts/api.js                 |  7 --
 app/assets/javascripts/api/packages_api.js    |  7 ++
 .../index/components/mlflow_usage_modal.vue   | 13 ++++
 .../dependency_proxy/app.vue                  |  9 ++-
 app/models/namespace.rb                       | 16 +----
 .../require_organization.yml                  |  9 ---
 ...vulnerability_user_mentions_project_id.yml |  5 +-
 ..._vulnerability_user_mentions_project_id.rb | 21 ++++++
 db/schema_migrations/20250107134154           |  1 +
 ...ported_models_and_hardware_requirements.md | 29 +++++---
 .../policies/pipeline_execution_policies.md   | 10 ++-
 .../vulnerability_management_policy.md        |  8 +--
 doc/user/gitlab_duo_chat/index.md             |  3 +
 spec/frontend/api/packages_api_spec.js        | 16 ++++-
 spec/frontend/api_spec.js                     | 13 ----
 .../components/mlflow_usage_modal_spec.js     | 48 +++++++++----
 spec/models/namespace_spec.rb                 | 68 -------------------
 18 files changed, 135 insertions(+), 150 deletions(-)
 delete mode 100644 config/feature_flags/gitlab_com_derisk/require_organization.yml
 create mode 100644 db/post_migrate/20250107134154_finalize_backfill_vulnerability_user_mentions_project_id.rb
 create mode 100644 db/schema_migrations/20250107134154

diff --git a/GITLAB_PAGES_VERSION b/GITLAB_PAGES_VERSION
index c8092123fd9..0439dd77735 100644
--- a/GITLAB_PAGES_VERSION
+++ b/GITLAB_PAGES_VERSION
@@ -1 +1 @@
-916824d9cf035ed16cbd91364188745bd1602771
+45d5c77a77939f051b23b2052bb171d6314bb8e5
diff --git a/app/assets/javascripts/api.js b/app/assets/javascripts/api.js
index 471cb4fd4fd..3db93a8ad59 100644
--- a/app/assets/javascripts/api.js
+++ b/app/assets/javascripts/api.js
@@ -99,7 +99,6 @@ const Api = {
   deployKeysPath: '/api/:version/deploy_keys',
   secureFilePath: '/api/:version/projects/:project_id/secure_files/:secure_file_id',
   secureFilesPath: '/api/:version/projects/:project_id/secure_files',
-  dependencyProxyPath: '/api/:version/groups/:id/dependency_proxy/cache',
   markdownPath: '/api/:version/markdown',
 
   group(groupId, callback = () => {}) {
@@ -1066,12 +1065,6 @@ const Api = {
     return result;
   },
 
-  deleteDependencyProxyCacheList(groupId, options = {}) {
-    const url = Api.buildUrl(this.dependencyProxyPath).replace(':id', groupId);
-
-    return axios.delete(url, { params: { ...options } });
-  },
-
   markdown(data = {}) {
     const url = Api.buildUrl(this.markdownPath);
 
diff --git a/app/assets/javascripts/api/packages_api.js b/app/assets/javascripts/api/packages_api.js
index 138843a910a..5094c574976 100644
--- a/app/assets/javascripts/api/packages_api.js
+++ b/app/assets/javascripts/api/packages_api.js
@@ -1,6 +1,7 @@
 import axios from '../lib/utils/axios_utils';
 import { buildApiUrl } from './api_utils';
 
+const DEPENDENCY_PROXY_CACHE_PATH = '/api/:version/groups/:id/dependency_proxy/cache';
 const PUBLISH_PACKAGE_PATH =
   '/api/:version/projects/:id/packages/generic/:package_name/:package_version/:file_name';
 
@@ -24,3 +25,9 @@ export function publishPackage(
     ...axiosOptions,
   });
 }
+
+export function deleteDependencyProxyCacheList(groupId, options = {}) {
+  const url = buildApiUrl(DEPENDENCY_PROXY_CACHE_PATH).replace(':id', groupId);
+
+  return axios.delete(url, { params: { ...options } });
+}
diff --git a/app/assets/javascripts/ml/experiment_tracking/routes/experiments/index/components/mlflow_usage_modal.vue b/app/assets/javascripts/ml/experiment_tracking/routes/experiments/index/components/mlflow_usage_modal.vue
index 512d7f38b15..42caae74571 100644
--- a/app/assets/javascripts/ml/experiment_tracking/routes/experiments/index/components/mlflow_usage_modal.vue
+++ b/app/assets/javascripts/ml/experiment_tracking/routes/experiments/index/components/mlflow_usage_modal.vue
@@ -1,6 +1,7 @@
 <script>
 import { GlLink, GlModal, GlSprintf } from '@gitlab/ui';
 import { s__ } from '~/locale';
+import ClipboardButton from '~/vue_shared/components/clipboard_button.vue';
 import { CREATE_EXPERIMENT_HELP_PATH, MLFLOW_USAGE_MODAL_ID } from '../constants';
 
 export default {
@@ -8,6 +9,7 @@ export default {
     GlModal,
     GlSprintf,
     GlLink,
+    ClipboardButton,
   },
   inject: ['mlflowTrackingUrl'],
   computed: {
@@ -29,6 +31,11 @@ export default {
       };
     },
   },
+  methods: {
+    copyInstructions() {
+      navigator.clipboard.writeText(this.instruction.cmd);
+    },
+  },
   MLFLOW_USAGE_MODAL_ID,
   CREATE_EXPERIMENT_HELP_PATH,
 };
@@ -51,6 +58,12 @@ export default {
         data-testid="preview-code"
       >
         <code class="gl-grow">{{ instruction.cmd }}</code>
+        <clipboard-button
+          category="tertiary"
+          :text="instruction.cmd"
+          :title="__('Copy to clipboard')"
+          @click="copyInstructions"
+        />
       </pre>
     </div>
 
diff --git a/app/assets/javascripts/packages_and_registries/dependency_proxy/app.vue b/app/assets/javascripts/packages_and_registries/dependency_proxy/app.vue
index 2e403347b9b..481c2d7ab59 100644
--- a/app/assets/javascripts/packages_and_registries/dependency_proxy/app.vue
+++ b/app/assets/javascripts/packages_and_registries/dependency_proxy/app.vue
@@ -13,13 +13,12 @@ import {
   GlTooltipDirective,
 } from '@gitlab/ui';
 import { __, s__, n__, sprintf } from '~/locale';
-import Api from '~/api';
+import { deleteDependencyProxyCacheList } from '~/api/packages_api';
 import ClipboardButton from '~/vue_shared/components/clipboard_button.vue';
 import TitleArea from '~/vue_shared/components/registry/title_area.vue';
 import ManifestsList from '~/packages_and_registries/dependency_proxy/components/manifests_list.vue';
 import { GRAPHQL_PAGE_SIZE } from '~/packages_and_registries/dependency_proxy/constants';
 import { getPageParams } from '~/packages_and_registries/dependency_proxy/utils';
-import { extractPageInfo } from '~/packages_and_registries/shared/utils';
 
 import getDependencyProxyDetailsQuery from '~/packages_and_registries/dependency_proxy/graphql/queries/get_dependency_proxy_details.query.graphql';
 
@@ -87,8 +86,8 @@ export default {
       return this.group.dependencyProxyManifests?.pageInfo;
     },
     pageParams() {
-      const pageInfo = extractPageInfo(this.$route.query);
-      return getPageParams(pageInfo);
+      const { before, after } = this.$route.query;
+      return getPageParams({ before, after });
     },
     manifests() {
       return this.group.dependencyProxyManifests?.nodes ?? [];
@@ -136,7 +135,7 @@ export default {
     },
     async submit() {
       try {
-        await Api.deleteDependencyProxyCacheList(this.groupId);
+        await deleteDependencyProxyCacheList(this.groupId);
 
         this.deleteCacheAlertMessage = this.$options.i18n.deleteCacheAlertMessageSuccess;
         this.showDeleteCacheAlert = true;
diff --git a/app/models/namespace.rb b/app/models/namespace.rb
index 7651c99d8b4..1889a7cc858 100644
--- a/app/models/namespace.rb
+++ b/app/models/namespace.rb
@@ -120,7 +120,7 @@ class Namespace < ApplicationRecord
   has_many :bot_users, through: :bot_user_details, source: :user
 
   validates :owner, presence: true, if: ->(n) { n.owner_required? }
-  validates :organization, presence: true, if: :require_organization?
+  validates :organization, presence: true
   validates :name,
     presence: true,
     length: { maximum: 255 }
@@ -161,13 +161,7 @@ class Namespace < ApplicationRecord
   validate :nesting_level_allowed, unless: -> { project_namespace? }
   validate :changing_shared_runners_enabled_is_allowed, unless: -> { project_namespace? }
   validate :changing_allow_descendants_override_disabled_shared_runners_is_allowed, unless: -> { project_namespace? }
-  validate :parent_organization_match, if: :require_organization?
-
-  attribute :organization_id, :integer, default: -> do
-    return if Feature.enabled?(:require_organization, Feature.current_request)
-
-    Organizations::Organization::DEFAULT_ORGANIZATION_ID
-  end
+  validate :parent_organization_match
 
   delegate :name, to: :owner, allow_nil: true, prefix: true
   delegate :avatar_url, to: :owner, allow_nil: true
@@ -772,12 +766,6 @@ class Namespace < ApplicationRecord
 
   private
 
-  def require_organization?
-    return false unless Feature.enabled?(:require_organization, Feature.current_request)
-
-    Gitlab::SafeRequestStore.fetch(:require_organization) { true } # rubocop:disable Style/RedundantFetchBlock -- This fetch has a different interface
-  end
-
   def parent_organization_match
     return unless parent
     return if parent.organization_id == organization_id
diff --git a/config/feature_flags/gitlab_com_derisk/require_organization.yml b/config/feature_flags/gitlab_com_derisk/require_organization.yml
deleted file mode 100644
index 5c28edea197..00000000000
--- a/config/feature_flags/gitlab_com_derisk/require_organization.yml
+++ /dev/null
@@ -1,9 +0,0 @@
----
-name: require_organization
-feature_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/411832
-introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/155732
-rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/470839
-milestone: '17.3'
-group: group::tenant scale
-type: gitlab_com_derisk
-default_enabled: false
diff --git a/db/docs/batched_background_migrations/backfill_vulnerability_user_mentions_project_id.yml b/db/docs/batched_background_migrations/backfill_vulnerability_user_mentions_project_id.yml
index 029326d4472..7e10ca30dd1 100644
--- a/db/docs/batched_background_migrations/backfill_vulnerability_user_mentions_project_id.yml
+++ b/db/docs/batched_background_migrations/backfill_vulnerability_user_mentions_project_id.yml
@@ -1,8 +1,9 @@
 ---
 migration_job_name: BackfillVulnerabilityUserMentionsProjectId
-description: Backfills sharding key `vulnerability_user_mentions.project_id` from `vulnerabilities`.
+description: Backfills sharding key `vulnerability_user_mentions.project_id` from
+  `vulnerabilities`.
 feature_category: vulnerability_management
 introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/155289
 milestone: '17.1'
 queued_migration_version: 20240604150537
-finalized_by: # version of the migration that finalized this BBM
+finalized_by: '20250107134154'
diff --git a/db/post_migrate/20250107134154_finalize_backfill_vulnerability_user_mentions_project_id.rb b/db/post_migrate/20250107134154_finalize_backfill_vulnerability_user_mentions_project_id.rb
new file mode 100644
index 00000000000..a7afe1366e9
--- /dev/null
+++ b/db/post_migrate/20250107134154_finalize_backfill_vulnerability_user_mentions_project_id.rb
@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+class FinalizeBackfillVulnerabilityUserMentionsProjectId < Gitlab::Database::Migration[2.2]
+  milestone '17.8'
+
+  disable_ddl_transaction!
+
+  restrict_gitlab_migration gitlab_schema: :gitlab_main_cell
+
+  def up
+    ensure_batched_background_migration_is_finished(
+      job_class_name: 'BackfillVulnerabilityUserMentionsProjectId',
+      table_name: :vulnerability_user_mentions,
+      column_name: :id,
+      job_arguments: [:project_id, :vulnerabilities, :project_id, :vulnerability_id],
+      finalize: true
+    )
+  end
+
+  def down; end
+end
diff --git a/db/schema_migrations/20250107134154 b/db/schema_migrations/20250107134154
new file mode 100644
index 00000000000..2296d59d374
--- /dev/null
+++ b/db/schema_migrations/20250107134154
@@ -0,0 +1 @@
+0507db026727f961fe8bd98aa189c97ae717bef47c9e1bb07a669ba468be1c56
\ No newline at end of file
diff --git a/doc/administration/self_hosted_models/supported_models_and_hardware_requirements.md b/doc/administration/self_hosted_models/supported_models_and_hardware_requirements.md
index 223105d7513..1fb3bcba3a7 100644
--- a/doc/administration/self_hosted_models/supported_models_and_hardware_requirements.md
+++ b/doc/administration/self_hosted_models/supported_models_and_hardware_requirements.md
@@ -51,16 +51,29 @@ The following models are under evaluation, and support is limited:
 
 <!-- vale gitlab_base.Spelling = YES -->
 
-## Hardware Requirements
+## Hardware requirements
 
-For optimal performance, the following hardware specifications are recommended as baselines for hosting these models. Hosting requirements may vary depending model to model, so we recommend checking model vendor documentation as well:
+The following hardware specifications are the minimum requirements for running self-hosted models on-premise. Requirements vary significantly based on the model size and intended usage:
 
-- **CPU**: Minimum 8 cores (16 threads recommended).
-- **RAM**: At least 32 GB (64 GB or more recommended for larger models).
-- **GPU**:
-  - **Minimum**: 2x NVIDIA A100 or equivalent for optimal inference performance.
-  - **Note**: For running Mixtral 8x22B and Mixtral 8x22B-it, it is recommended to use 8x NVIDIA A100 GPUs.
-- **Storage**: SSD with sufficient space for model weights and data.
+### Base system requirements
+
+- **CPU**:
+  - Minimum: 8 cores (16 threads)
+  - Recommended: 16+ cores for production environments
+- **RAM**:
+  - Minimum: 32 GB
+  - Recommended: 64 GB for most models
+- **Storage**:
+  - SSD with sufficient space for model weights and data.
+
+### GPU requirements by model size
+
+| Model size | Recommended GPU configuration | Minimum VRAM required |
+|------------|------------------------------|---------------------|
+| 7B models<br>(for example, Mistral 7B) | 1x NVIDIA A100 (40GB) | 24 GB |
+| 22B models<br>(for example, Codestral 22B) | 2x NVIDIA A100 (80GB) | 90 GB |
+| Mixtral 8x7B | 2x NVIDIA A100 (80GB) | 100 GB |
+| Mixtral 8x22B | 8x NVIDIA A100 (80GB) | 300 GB |
 
 ### AI Gateway Hardware Requirements
 
diff --git a/doc/user/application_security/policies/pipeline_execution_policies.md b/doc/user/application_security/policies/pipeline_execution_policies.md
index c703ae78170..971e825646a 100644
--- a/doc/user/application_security/policies/pipeline_execution_policies.md
+++ b/doc/user/application_security/policies/pipeline_execution_policies.md
@@ -207,9 +207,11 @@ the only jobs that run are the pipeline execution policy jobs.
 
 ### `override_project_ci`
 
+> - Updated handling of workflow rules [introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/175088) in GitLab 17.8 [with a flag](../../../administration/feature_flags.md) named `policies_always_override_project_ci`. Disabled by default.
+
 This strategy replaces the project's existing CI/CD configuration with a new one defined by the pipeline execution policy. This strategy is ideal when the entire pipeline needs to be standardized or replaced, like when you want to enforce organization-wide CI/CD standards or compliance requirements in a highly regulated industry. To override the pipeline configuration, define the CI/CD jobs and do not use `include:project`.
 
-The strategy takes precedence over other policies using the `inject_ci` strategy. If any policy with `override_project_ci` applies, the project CI configuration will be ignored. Other security policy configurations will not be overridden.
+The strategy takes precedence over other policies that use the `inject_ci` strategy. If a policy with `override_project_ci` applies, the project CI/CD configuration is ignored. However, other security policy configurations are not overridden.
 
 Alternatively, you can merge the project's CI/CD configuration with the project's `.gitlab-ci.yml` instead of overriding it. To merge the configuration, use `include:project`. This strategy allows users to include the project CI/CD configuration in the pipeline execution policy configuration, enabling the users to customize the policy jobs. For example, they can combine the policy and project CI/CD configuration into one YAML file to override the `before_script` configuration or define required variables, such as `CS_IMAGE`, to define the required path to the container to scan. Here's a [short demo](https://youtu.be/W8tubneJ1X8) of this behavior.
 The following diagram illustrates how variables defined at the project and policy levels are selected in the resulting pipeline:
@@ -309,8 +311,10 @@ When a pipeline execution policy uses workflow rules that prevent policy jobs fr
 project's original CI/CD configuration remains in effect instead of being overridden. You can
 conditionally apply pipeline execution policies to control when the policy impacts the project's
 CI/CD configuration. For example, if you set a workflow rule `if: $CI_PIPELINE_SOURCE ==
-"merge_request_event"`, the project's CI configuration is only overridden when the pipeline source
-is a merge request event.
+"merge_request_event"`, the project's CI/CD configuration is only overridden when the pipeline source
+is a merge request event. However, if the feature flag `policies_always_override_project_ci` is enabled,
+the workflow rules in the pipeline execution policy also override the project's original CI/CD configuration.
+As a result, if workflow rules cause the pipeline execution policy to be filtered out, no pipeline is created.
 
 ### Include a project's CI/CD configuration in the pipeline execution policy configuration
 
diff --git a/doc/user/application_security/policies/vulnerability_management_policy.md b/doc/user/application_security/policies/vulnerability_management_policy.md
index 0c246d2d5b1..d10bc519345 100644
--- a/doc/user/application_security/policies/vulnerability_management_policy.md
+++ b/doc/user/application_security/policies/vulnerability_management_policy.md
@@ -8,9 +8,10 @@ info: To determine the technical writer assigned to the Stage/Group associated w
 
 DETAILS:
 **Tier:** Ultimate
-**Offering:** GitLab.com, Self-managed, GitLab Dedicated
+**Offering:** GitLab.com, GitLab Self-managed, GitLab Dedicated
 
-> - [Introduced](https://gitlab.com/groups/gitlab-org/-/epics/5708) in GitLab 17.7 [with a flag](../../../administration/feature_flags.md) named `vulnerability_management_policy_type`. Enabled by default.
+> - [Introduced](https://gitlab.com/groups/gitlab-org/-/epics/5708) support for enforcing policies on projects in GitLab 17.7 [with a flag](../../../administration/feature_flags.md) named `vulnerability_management_policy_type`. Enabled by default.
+> - [Introduced](https://gitlab.com/groups/gitlab-org/-/epics/15697) support for enforcing policies on groups in GitLab 17.8 for the group-level [with a flag](../../../administration/feature_flags.md) named `vulnerability_management_policy_type_group`. Enabled by default.
 
 FLAG:
 The availability of this feature is controlled by a feature flag.
@@ -43,9 +44,6 @@ detected are marked **Resolved**.
 
 - You can assign a maximum of five rules to each policy.
 - You can assign a maximum of five vulnerability management policies to each security policy project.
-- You can only enforce a vulnerability management policy on a project. Support for enforcing a
-vulnerability management policy on a group is proposed in
-[epic 15697](https://gitlab.com/groups/gitlab-org/-/epics/15697).
 
 ## Create a vulnerability management policy
 
diff --git a/doc/user/gitlab_duo_chat/index.md b/doc/user/gitlab_duo_chat/index.md
index 50ed8d09ffe..8f552d7a98d 100644
--- a/doc/user/gitlab_duo_chat/index.md
+++ b/doc/user/gitlab_duo_chat/index.md
@@ -62,6 +62,9 @@ In addition, in the IDEs, when you use any of the slash commands,
 like `/explain`, `/refactor`, `/fix`, or `/tests,` Duo Chat has access to the
 code you selected.
 
+NOTE:
+[Repository X-Ray](../project/repository/code_suggestions/repository_xray.md) automatically enriches code generation requests for [GitLab Duo Code Suggestions](../project/repository/code_suggestions/index.md). If your project has access to Code Suggestions, then the `/refactor`, `/fix`, and `/tests` slash commands also have access to the latest Repository X-Ray report, and include that report as context for Duo.
+
 Duo Chat always has access to:
 
 - GitLab documentation.
diff --git a/spec/frontend/api/packages_api_spec.js b/spec/frontend/api/packages_api_spec.js
index 37c4b926ec2..67fb360b5c3 100644
--- a/spec/frontend/api/packages_api_spec.js
+++ b/spec/frontend/api/packages_api_spec.js
@@ -1,7 +1,7 @@
 import MockAdapter from 'axios-mock-adapter';
-import { publishPackage } from '~/api/packages_api';
+import { deleteDependencyProxyCacheList, publishPackage } from '~/api/packages_api';
 import axios from '~/lib/utils/axios_utils';
-import { HTTP_STATUS_OK } from '~/lib/utils/http_status';
+import { HTTP_STATUS_ACCEPTED, HTTP_STATUS_OK } from '~/lib/utils/http_status';
 
 describe('Api', () => {
   const dummyApiVersion = 'v3000';
@@ -51,4 +51,16 @@ describe('Api', () => {
       });
     });
   });
+
+  describe('deleteDependencyProxyCacheList', () => {
+    it('schedules the cache list for deletion', async () => {
+      const groupId = 1;
+      const expectedUrl = `${dummyUrlRoot}/api/${dummyApiVersion}/groups/${groupId}/dependency_proxy/cache`;
+
+      mock.onDelete(expectedUrl).reply(HTTP_STATUS_ACCEPTED);
+      const { status } = await deleteDependencyProxyCacheList(groupId, {});
+
+      expect(status).toBe(HTTP_STATUS_ACCEPTED);
+    });
+  });
 });
diff --git a/spec/frontend/api_spec.js b/spec/frontend/api_spec.js
index 0ee79b393ac..efe2d84354a 100644
--- a/spec/frontend/api_spec.js
+++ b/spec/frontend/api_spec.js
@@ -2,7 +2,6 @@ import MockAdapter from 'axios-mock-adapter';
 import Api, { DEFAULT_PER_PAGE } from '~/api';
 import axios from '~/lib/utils/axios_utils';
 import {
-  HTTP_STATUS_ACCEPTED,
   HTTP_STATUS_CREATED,
   HTTP_STATUS_INTERNAL_SERVER_ERROR,
   HTTP_STATUS_NO_CONTENT,
@@ -1670,18 +1669,6 @@ describe('Api', () => {
     });
   });
 
-  describe('dependency proxy cache', () => {
-    it('schedules the cache list for deletion', async () => {
-      const groupId = 1;
-      const expectedUrl = `${dummyUrlRoot}/api/${dummyApiVersion}/groups/${groupId}/dependency_proxy/cache`;
-
-      mock.onDelete(expectedUrl).reply(HTTP_STATUS_ACCEPTED);
-      const { status } = await Api.deleteDependencyProxyCacheList(groupId, {});
-
-      expect(status).toBe(HTTP_STATUS_ACCEPTED);
-    });
-  });
-
   describe('Feature Flag User List', () => {
     let expectedUrl;
     let projectId;
diff --git a/spec/frontend/ml/experiment_tracking/routes/experiments/index/components/mlflow_usage_modal_spec.js b/spec/frontend/ml/experiment_tracking/routes/experiments/index/components/mlflow_usage_modal_spec.js
index 3c5cedeb818..abeb60f0cfa 100644
--- a/spec/frontend/ml/experiment_tracking/routes/experiments/index/components/mlflow_usage_modal_spec.js
+++ b/spec/frontend/ml/experiment_tracking/routes/experiments/index/components/mlflow_usage_modal_spec.js
@@ -2,8 +2,20 @@ import { shallowMount } from '@vue/test-utils';
 import { GlModal } from '@gitlab/ui';
 import MlflowUsageModal from '~/ml/experiment_tracking/routes/experiments/index/components/mlflow_usage_modal.vue';
 import { MLFLOW_USAGE_MODAL_ID } from '~/ml/experiment_tracking/routes/experiments/index/constants';
+import ClipboardButton from '~/vue_shared/components/clipboard_button.vue';
 
 let wrapper;
+
+const command = `import os
+from mlflow import MlflowClient
+
+os.environ["MLFLOW_TRACKING_URI"] = "path/to/mlflow"
+os.environ["MLFLOW_TRACKING_TOKEN"] = <your_gitlab_token>
+
+client = MlflowClient()
+
+client.create_experiment(name="<your_experiment_name>", tags={'key': 'value'})`;
+
 const createWrapper = () => {
   wrapper = shallowMount(MlflowUsageModal, {
     provide: { mlflowTrackingUrl: 'path/to/mlflow' },
@@ -11,6 +23,8 @@ const createWrapper = () => {
 };
 
 const findModal = () => wrapper.findComponent(GlModal);
+const findCmd = () => findModal().find('code');
+const findCopyButton = () => findModal().findComponent(ClipboardButton);
 
 describe('ml/experiment_tracking/routes/experiments/index/components/mlflow_usage_modal.vue', () => {
   beforeEach(() => {
@@ -24,18 +38,26 @@ describe('ml/experiment_tracking/routes/experiments/index/components/mlflow_usag
     });
   });
 
-  it('renders the text', () => {
-    const text = findModal().text();
-    const expectedLines = [
-      'Creating experiments using the MLflow client:',
-      // 'Creating an experiment',
-      'import os',
-      'from mlflow import MlflowClient',
-      'os.environ["MLFLOW_TRACKING_URI"] = "path/to/mlflow"',
-      'os.environ["MLFLOW_TRACKING_TOKEN"] = <your_gitlab_token>',
-      'client = MlflowClient()',
-      "client.create_experiment(name=\"<your_experiment_name>\", tags={'key': 'value'})",
-    ];
-    expectedLines.forEach((line) => expect(text).toContain(line));
+  it('renders the intro text', () => {
+    expect(wrapper.text()).toMatch('Creating experiments using the MLflow client:');
+  });
+
+  it('renders the cmd', () => {
+    expect(findCmd().text()).toBe(command);
+  });
+
+  describe('copy button', () => {
+    it('renders the button correctly', () => {
+      expect(findCopyButton().props('text')).toBe(command);
+      expect(findCopyButton().props('title')).toBe('Copy to clipboard');
+    });
+
+    it('copies the code to the clipboard on click', async () => {
+      const copySpy = jest.spyOn(navigator.clipboard, 'writeText');
+
+      await findCopyButton().vm.$emit('click');
+
+      expect(copySpy).toHaveBeenCalledWith(command);
+    });
   });
 });
diff --git a/spec/models/namespace_spec.rb b/spec/models/namespace_spec.rb
index 793457dfb07..2af271d6459 100644
--- a/spec/models/namespace_spec.rb
+++ b/spec/models/namespace_spec.rb
@@ -284,54 +284,6 @@ RSpec.describe Namespace, feature_category: :groups_and_projects do
     end
   end
 
-  describe 'default values' do
-    context 'organzation_id' do
-      context 'when FF require_organization is enabled' do
-        context 'and organization is set' do
-          let(:created_namespace) { build(:group) }
-
-          it 'is valid' do
-            expect(created_namespace).to be_valid
-          end
-        end
-
-        context 'and organization is not set' do
-          let(:created_namespace) { build(:group) }
-
-          before do
-            created_namespace.organization_id = nil
-          end
-
-          it 'is invalid' do
-            expect(created_namespace).to be_invalid
-          end
-        end
-      end
-
-      context 'when FF require_organization is disabled' do
-        before do
-          stub_feature_flags(require_organization: false)
-        end
-
-        context 'and database has a default value' do
-          before do
-            described_class.connection.execute("ALTER TABLE namespaces ALTER COLUMN organization_id SET DEFAULT 100")
-            described_class.reset_column_information
-          end
-
-          after do
-            described_class.connection.execute("ALTER TABLE namespaces ALTER COLUMN organization_id SET DEFAULT 1")
-            described_class.reset_column_information
-          end
-
-          it 'uses value from model' do
-            expect(described_class.new.organization_id).to eq(Organizations::Organization::DEFAULT_ORGANIZATION_ID)
-          end
-        end
-      end
-    end
-  end
-
   describe "ReferencePatternValidation" do
     subject { described_class.reference_pattern }
 
@@ -803,26 +755,6 @@ RSpec.describe Namespace, feature_category: :groups_and_projects do
     it { is_expected.to include_module(Namespaces::Traversal::LinearScopes) }
   end
 
-  context 'when feature flag require_organization is disabled', :request_store do
-    before do
-      stub_feature_flags(require_organization: false)
-    end
-
-    it 'does not require organization' do
-      namespace.organization = nil
-
-      expect(namespace.valid?).to eq(true)
-    end
-  end
-
-  context 'when feature flag require_organization is enabled', :request_store do
-    it 'does require organization' do
-      namespace.organization = nil
-
-      expect(namespace.valid?).to eq(false)
-    end
-  end
-
   describe '#traversal_ids' do
     let(:namespace) { build(:group) }