Add latest changes from gitlab-org/gitlab@14-9-stable-eev14.9.0-rc42

6 files changed, 795 insertions, 286 deletions

diff --git a/qa/qa/specs/features/browser_ui/5_package/container_registry/container_registry_omnibus_spec.rb b/qa/qa/specs/features/browser_ui/5_package/container_registry/container_registry_omnibus_spec.rb
index e3c06242a9b..c833aa1a5b8 100644
--- a/qa/qa/specs/features/browser_ui/5_package/container_registry/container_registry_omnibus_spec.rb
+++ b/qa/qa/specs/features/browser_ui/5_package/container_registry/container_registry_omnibus_spec.rb
@@ -1,10 +1,8 @@
 # frozen_string_literal: true
 
 module QA
-  RSpec.describe 'Package', :orchestrated, only: { pipeline: :main } do
+  RSpec.describe 'Package', :orchestrated, :skip_live_env do
     describe 'Self-managed Container Registry' do
-      using RSpec::Parameterized::TableSyntax
-
       let(:project) do
         Resource::Project.fabricate_via_api! do |project|
           project.name = 'project-with-registry'
@@ -49,10 +47,63 @@ module QA
       end
 
       context "when tls is disabled" do
-        where(:authentication_token_type, :token_name) do
-          :personal_access_token | 'Personal Access Token'
-          :project_deploy_token  | 'Deploy Token'
-          :ci_job_token          | 'Job Token'
+        where do
+          {
+            'using docker:18.09.9 and a personal access token' => {
+              docker_client_version: 'docker:18.09.9',
+              authentication_token_type: :personal_access_token,
+              token_name: 'Personal Access Token',
+              testcase: 'https://gitlab.com/gitlab-org/gitlab/-/quality/test_cases/348499'
+            },
+            'using docker:18.09.9 and a project deploy token' => {
+              docker_client_version: 'docker:18.09.9',
+              authentication_token_type: :project_deploy_token,
+              token_name: 'Deploy Token',
+              testcase: 'https://gitlab.com/gitlab-org/gitlab/-/quality/test_cases/348852'
+            },
+            'using docker:18.09.9 and a ci job token' => {
+              docker_client_version: 'docker:18.09.9',
+              authentication_token_type: :ci_job_token,
+              token_name: 'Job Token',
+              testcase: 'https://gitlab.com/gitlab-org/gitlab/-/quality/test_cases/348765'
+            },
+            'using docker:19.03.12 and a personal access token' => {
+              docker_client_version: 'docker:19.03.12',
+              authentication_token_type: :personal_access_token,
+              token_name: 'Personal Access Token',
+              testcase: 'https://gitlab.com/gitlab-org/gitlab/-/quality/test_cases/348507'
+            },
+            'using docker:19.03.12 and a project deploy token' => {
+              docker_client_version: 'docker:19.03.12',
+              authentication_token_type: :project_deploy_token,
+              token_name: 'Deploy Token',
+              testcase: 'https://gitlab.com/gitlab-org/gitlab/-/quality/test_cases/348859'
+            },
+            'using docker:19.03.12 and a ci job token' => {
+              docker_client_version: 'docker:19.03.12',
+              authentication_token_type: :ci_job_token,
+              token_name: 'Job Token',
+              testcase: 'https://gitlab.com/gitlab-org/gitlab/-/quality/test_cases/348654'
+            },
+            'using docker:20.10 and a personal access token' => {
+              docker_client_version: 'docker:20.10',
+              authentication_token_type: :personal_access_token,
+              token_name: 'Personal Access Token',
+              testcase: 'https://gitlab.com/gitlab-org/gitlab/-/quality/test_cases/348754'
+            },
+            'using docker:20.10 and a project deploy token' => {
+              docker_client_version: 'docker:20.10',
+              authentication_token_type: :project_deploy_token,
+              token_name: 'Deploy Token',
+              testcase: 'https://gitlab.com/gitlab-org/gitlab/-/quality/test_cases/348856'
+            },
+            'using docker:20.10 and a ci job token' => {
+              docker_client_version: 'docker:20.10',
+              authentication_token_type: :ci_job_token,
+              token_name: 'Job Token',
+              testcase: 'https://gitlab.com/gitlab-org/gitlab/-/quality/test_cases/348766'
+            }
+          }
         end
 
         with_them do
@@ -78,57 +129,51 @@ module QA
             end
           end
 
-          where(:docker_client_version) do
-            %w[docker:18.09.9 docker:19.03.12 docker:20.10]
-          end
-
-          with_them do
-            it "pushes image and deletes tag", :registry do
-              Support::Retrier.retry_on_exception(max_attempts: 3, sleep_interval: 2) do
-                Resource::Repository::Commit.fabricate_via_api! do |commit|
-                  commit.project = project
-                  commit.commit_message = 'Add .gitlab-ci.yml'
-                  commit.add_files([{
-                                      file_path: '.gitlab-ci.yml',
-                                      content:
-                                          <<~YAML
-                                            build:
-                                              image: "#{docker_client_version}"
-                                              stage: build
-                                              services:
-                                              - name: "#{docker_client_version}-dind"
-                                                command: ["--insecure-registry=gitlab.test:5050"]                                
-                                              variables:
-                                                IMAGE_TAG: $CI_REGISTRY_IMAGE:$CI_COMMIT_REF_SLUG
-                                              script:
-                                                - docker login -u #{auth_user} -p #{auth_token} gitlab.test:5050
-                                                - docker build -t $IMAGE_TAG .
-                                                - docker push $IMAGE_TAG
-                                              tags:
-                                                - "runner-for-#{project.name}"
-                                          YAML
-                                  }])
-                end
+          it "pushes image and deletes tag", :registry, testcase: params[:testcase] do
+            Support::Retrier.retry_on_exception(max_attempts: 3, sleep_interval: 2) do
+              Resource::Repository::Commit.fabricate_via_api! do |commit|
+                commit.project = project
+                commit.commit_message = 'Add .gitlab-ci.yml'
+                commit.add_files([{
+                                    file_path: '.gitlab-ci.yml',
+                                    content:
+                                        <<~YAML
+                                          build:
+                                            image: "#{docker_client_version}"
+                                            stage: build
+                                            services:
+                                            - name: "#{docker_client_version}-dind"
+                                              command: ["--insecure-registry=gitlab.test:5050"]
+                                            variables:
+                                              IMAGE_TAG: $CI_REGISTRY_IMAGE:$CI_COMMIT_REF_SLUG
+                                            script:
+                                              - docker login -u #{auth_user} -p #{auth_token} gitlab.test:5050
+                                              - docker build -t $IMAGE_TAG .
+                                              - docker push $IMAGE_TAG
+                                            tags:
+                                              - "runner-for-#{project.name}"
+                                        YAML
+                                }])
               end
+            end
 
-              Flow::Pipeline.visit_latest_pipeline
+            Flow::Pipeline.visit_latest_pipeline
 
-              Page::Project::Pipeline::Show.perform do |pipeline|
-                pipeline.click_job('build')
-              end
+            Page::Project::Pipeline::Show.perform do |pipeline|
+              pipeline.click_job('build')
+            end
 
-              Page::Project::Job::Show.perform do |job|
-                expect(job).to be_successful(timeout: 800)
-              end
+            Page::Project::Job::Show.perform do |job|
+              expect(job).to be_successful(timeout: 800)
+            end
 
-              Page::Project::Menu.perform(&:go_to_container_registry)
+            Page::Project::Menu.perform(&:go_to_container_registry)
 
-              Page::Project::Registry::Show.perform do |registry|
-                expect(registry).to have_registry_repository(project.path_with_namespace)
+            Page::Project::Registry::Show.perform do |registry|
+              expect(registry).to have_registry_repository(project.path_with_namespace)
 
-                registry.click_on_image(project.path_with_namespace)
-                expect(registry).to have_tag('master')
-              end
+              registry.click_on_image(project.path_with_namespace)
+              expect(registry).to have_tag('master')
             end
           end
         end
@@ -156,7 +201,7 @@ module QA
                                               apk add --no-cache openssl
                                               true | openssl s_client -showcerts -connect gitlab.test:5050 > /usr/local/share/ca-certificates/gitlab.test.crt
                                               update-ca-certificates
-                                              dockerd-entrypoint.sh || exit                                
+                                              dockerd-entrypoint.sh || exit
                                           variables:
                                             IMAGE_TAG: $CI_REGISTRY_IMAGE:$CI_COMMIT_REF_SLUG
                                           script:
diff --git a/qa/qa/specs/features/browser_ui/5_package/package_registry/maven/maven_group_level_spec.rb b/qa/qa/specs/features/browser_ui/5_package/package_registry/maven/maven_group_level_spec.rb
new file mode 100644
index 00000000000..9ef5b8c84fa
--- /dev/null
+++ b/qa/qa/specs/features/browser_ui/5_package/package_registry/maven/maven_group_level_spec.rb
@@ -0,0 +1,314 @@
+# frozen_string_literal: true
+
+module QA
+  RSpec.describe 'Package', :orchestrated, :packages, :object_storage do
+    describe 'Maven group level endpoint' do
+      include Runtime::Fixtures
+      include_context 'packages registry qa scenario'
+
+      let(:group_id) { 'com.gitlab.qa' }
+      let(:artifact_id) { "maven-#{SecureRandom.hex(8)}" }
+      let(:package_name) { "#{group_id}/#{artifact_id}".tr('.', '/') }
+      let(:package_version) { '1.3.7' }
+      let(:package_type) { 'maven' }
+
+      context 'via maven' do
+        where do
+          {
+            'using a personal access token' => {
+              authentication_token_type: :personal_access_token,
+              maven_header_name: 'Private-Token',
+              testcase: 'https://gitlab.com/gitlab-org/gitlab/-/quality/test_cases/347582'
+            },
+            'using a project deploy token' => {
+              authentication_token_type: :project_deploy_token,
+              maven_header_name: 'Deploy-Token',
+              testcase: 'https://gitlab.com/gitlab-org/gitlab/-/quality/test_cases/347585'
+            },
+            'using a ci job token' => {
+              authentication_token_type: :ci_job_token,
+              maven_header_name: 'Job-Token',
+              testcase: 'https://gitlab.com/gitlab-org/gitlab/-/quality/test_cases/347579'
+            }
+          }
+        end
+
+        with_them do
+          let(:token) do
+            case authentication_token_type
+            when :personal_access_token
+              personal_access_token
+            when :ci_job_token
+              '${env.CI_JOB_TOKEN}'
+            when :project_deploy_token
+              project_deploy_token.token
+            end
+          end
+
+          it 'pushes and pulls a maven package', testcase: params[:testcase] do
+            Support::Retrier.retry_on_exception(max_attempts: 3, sleep_interval: 2) do
+              Resource::Repository::Commit.fabricate_via_api! do |commit|
+                maven_upload_package_yaml = ERB.new(read_fixture('package_managers/maven', 'maven_upload_package.yaml.erb')).result(binding)
+                package_pom_xml = ERB.new(read_fixture('package_managers/maven', 'package_pom.xml.erb')).result(binding)
+                settings_xml = ERB.new(read_fixture('package_managers/maven', 'settings.xml.erb')).result(binding)
+
+                commit.project = package_project
+                commit.commit_message = 'Add files'
+                commit.add_files([
+                  {
+                    file_path: '.gitlab-ci.yml',
+                    content: maven_upload_package_yaml
+                  },
+                  {
+                    file_path: 'pom.xml',
+                    content: package_pom_xml
+                  },
+                  {
+                    file_path: 'settings.xml',
+                    content: settings_xml
+                  }
+                ])
+              end
+            end
+
+            package_project.visit!
+
+            Flow::Pipeline.visit_latest_pipeline
+
+            Page::Project::Pipeline::Show.perform do |pipeline|
+              pipeline.click_job('deploy')
+            end
+
+            Page::Project::Job::Show.perform do |job|
+              expect(job).to be_successful(timeout: 800)
+            end
+
+            Page::Project::Menu.perform(&:click_packages_link)
+
+            Page::Project::Packages::Index.perform do |index|
+              expect(index).to have_package(package_name)
+
+              index.click_package(package_name)
+            end
+
+            Page::Project::Packages::Show.perform do |show|
+              expect(show).to have_package_info(package_name, package_version)
+            end
+
+            Support::Retrier.retry_on_exception(max_attempts: 3, sleep_interval: 2) do
+              Resource::Repository::Commit.fabricate_via_api! do |commit|
+                maven_install_package_yaml = ERB.new(read_fixture('package_managers/maven', 'maven_install_package.yaml.erb')).result(binding)
+                client_pom_xml = ERB.new(read_fixture('package_managers/maven', 'client_pom.xml.erb')).result(binding)
+                settings_xml = ERB.new(read_fixture('package_managers/maven', 'settings.xml.erb')).result(binding)
+
+                commit.project = client_project
+                commit.commit_message = 'Add files'
+                commit.add_files([
+                  {
+                    file_path: '.gitlab-ci.yml',
+                    content: maven_install_package_yaml
+                  },
+                  {
+                    file_path: 'pom.xml',
+                    content: client_pom_xml
+                  },
+                  {
+                    file_path: 'settings.xml',
+                    content: settings_xml
+                  }
+                ])
+              end
+            end
+
+            client_project.visit!
+
+            Flow::Pipeline.visit_latest_pipeline
+
+            Page::Project::Pipeline::Show.perform do |pipeline|
+              pipeline.click_job('install')
+            end
+
+            Page::Project::Job::Show.perform do |job|
+              expect(job).to be_successful(timeout: 800)
+            end
+          end
+        end
+      end
+
+      context 'duplication setting' do
+        before do
+          package_project.group.visit!
+
+          Page::Group::Menu.perform(&:go_to_package_settings)
+        end
+
+        context 'when disabled' do
+          where do
+            {
+              'using a personal access token' => {
+                authentication_token_type: :personal_access_token,
+                maven_header_name: 'Private-Token',
+                testcase: 'https://gitlab.com/gitlab-org/gitlab/-/quality/test_cases/347581'
+              },
+              'using a project deploy token' => {
+                authentication_token_type: :project_deploy_token,
+                maven_header_name: 'Deploy-Token',
+                testcase: 'https://gitlab.com/gitlab-org/gitlab/-/quality/test_cases/347584'
+              },
+              'using a ci job token' => {
+                authentication_token_type: :ci_job_token,
+                maven_header_name: 'Job-Token',
+                testcase: 'https://gitlab.com/gitlab-org/gitlab/-/quality/test_cases/347578'
+              }
+            }
+          end
+
+          with_them do
+            let(:token) do
+              case authentication_token_type
+              when :personal_access_token
+                personal_access_token
+              when :ci_job_token
+                '${env.CI_JOB_TOKEN}'
+              when :project_deploy_token
+                project_deploy_token.token
+              end
+            end
+
+            before do
+              Page::Group::Settings::PackageRegistries.perform(&:set_allow_duplicates_disabled)
+            end
+
+            it 'prevents users from publishing group level Maven packages duplicates', testcase: params[:testcase] do
+              create_duplicated_package
+
+              push_duplicated_package
+
+              client_project.visit!
+
+              show_latest_deploy_job
+
+              Page::Project::Job::Show.perform do |job|
+                expect(job).not_to be_successful(timeout: 800)
+              end
+            end
+          end
+        end
+
+        context 'when enabled' do
+          where do
+            {
+              'using a personal access token' => {
+                authentication_token_type: :personal_access_token,
+                maven_header_name: 'Private-Token',
+                testcase: 'https://gitlab.com/gitlab-org/gitlab/-/quality/test_cases/347580'
+              },
+              'using a project deploy token' => {
+                authentication_token_type: :project_deploy_token,
+                maven_header_name: 'Deploy-Token',
+                testcase: 'https://gitlab.com/gitlab-org/gitlab/-/quality/test_cases/347583'
+              },
+              'using a ci job token' => {
+                authentication_token_type: :ci_job_token,
+                maven_header_name: 'Job-Token',
+                testcase: 'https://gitlab.com/gitlab-org/gitlab/-/quality/test_cases/347577'
+              }
+            }
+          end
+
+          with_them do
+            let(:token) do
+              case authentication_token_type
+              when :personal_access_token
+                personal_access_token
+              when :ci_job_token
+                '${env.CI_JOB_TOKEN}'
+              when :project_deploy_token
+                project_deploy_token.token
+              end
+            end
+
+            before do
+              Page::Group::Settings::PackageRegistries.perform(&:set_allow_duplicates_enabled)
+            end
+
+            it 'allows users to publish group level Maven packages duplicates', testcase: params[:testcase] do
+              create_duplicated_package
+
+              push_duplicated_package
+
+              show_latest_deploy_job
+
+              Page::Project::Job::Show.perform do |job|
+                expect(job).to be_successful(timeout: 800)
+              end
+            end
+          end
+        end
+
+        def create_duplicated_package
+          settings_xml_with_pat = ERB.new(read_fixture('package_managers/maven', 'settings_with_pat.xml.erb')).result(binding)
+          package_pom_xml = ERB.new(read_fixture('package_managers/maven', 'package_pom.xml.erb')).result(binding)
+
+          with_fixtures([
+              {
+                file_path: 'pom.xml',
+                content: package_pom_xml
+              },
+              {
+                file_path: 'settings.xml',
+                content: settings_xml_with_pat
+              }
+            ]) do |dir|
+            Service::DockerRun::Maven.new(dir).publish!
+          end
+
+          package_project.visit!
+
+          Page::Project::Menu.perform(&:click_packages_link)
+
+          Page::Project::Packages::Index.perform do |index|
+            expect(index).to have_package(package_name)
+          end
+        end
+
+        def push_duplicated_package
+          Support::Retrier.retry_on_exception(max_attempts: 3, sleep_interval: 2) do
+            Resource::Repository::Commit.fabricate_via_api! do |commit|
+              maven_upload_package_yaml = ERB.new(read_fixture('package_managers/maven', 'maven_upload_package.yaml.erb')).result(binding)
+              package_pom_xml = ERB.new(read_fixture('package_managers/maven', 'package_pom.xml.erb')).result(binding)
+              settings_xml = ERB.new(read_fixture('package_managers/maven', 'settings.xml.erb')).result(binding)
+
+              commit.project = client_project
+              commit.commit_message = 'Add .gitlab-ci.yml'
+              commit.add_files([
+                                {
+                                  file_path: '.gitlab-ci.yml',
+                                  content: maven_upload_package_yaml
+                                },
+                                {
+                                  file_path: 'pom.xml',
+                                  content: package_pom_xml
+                                },
+                                {
+                                  file_path: 'settings.xml',
+                                  content: settings_xml
+                                }
+              ])
+            end
+          end
+        end
+
+        def show_latest_deploy_job
+          client_project.visit!
+
+          Flow::Pipeline.visit_latest_pipeline
+
+          Page::Project::Pipeline::Show.perform do |pipeline|
+            pipeline.click_job('deploy')
+          end
+        end
+      end
+    end
+  end
+end
diff --git a/qa/qa/specs/features/browser_ui/5_package/package_registry/maven/maven_project_level_spec.rb b/qa/qa/specs/features/browser_ui/5_package/package_registry/maven/maven_project_level_spec.rb
new file mode 100644
index 00000000000..d79f65764d4
--- /dev/null
+++ b/qa/qa/specs/features/browser_ui/5_package/package_registry/maven/maven_project_level_spec.rb
@@ -0,0 +1,219 @@
+# frozen_string_literal: true
+
+module QA
+  RSpec.describe 'Package', :orchestrated, :packages, :object_storage do
+    describe 'Maven project level endpoint' do
+      let(:group_id) { 'com.gitlab.qa' }
+      let(:artifact_id) { "maven-#{SecureRandom.hex(8)}" }
+      let(:package_name) { "#{group_id}/#{artifact_id}".tr('.', '/') }
+      let(:package_version) { '1.3.7' }
+      let(:package_type) { 'maven' }
+      let(:personal_access_token) { Runtime::Env.personal_access_token }
+
+      let(:package_project) do
+        Resource::Project.fabricate_via_api! do |project|
+          project.name = "#{package_type}_package_project"
+          project.initialize_with_readme = true
+          project.visibility = :private
+        end
+      end
+
+      let(:package) do
+        Resource::Package.init do |package|
+          package.name = package_name
+          package.project = package_project
+        end
+      end
+
+      let(:runner) do
+        Resource::Runner.fabricate! do |runner|
+          runner.name = "qa-runner-#{Time.now.to_i}"
+          runner.tags = ["runner-for-#{package_project.name}"]
+          runner.executor = :docker
+          runner.project = package_project
+        end
+      end
+
+      let(:gitlab_address_with_port) do
+        uri = URI.parse(Runtime::Scenario.gitlab_address)
+        "#{uri.scheme}://#{uri.host}:#{uri.port}"
+      end
+
+      let(:project_deploy_token) do
+        Resource::ProjectDeployToken.fabricate_via_api! do |deploy_token|
+          deploy_token.name = 'package-deploy-token'
+          deploy_token.project = package_project
+          deploy_token.scopes = %w[
+            read_repository
+            read_package_registry
+            write_package_registry
+          ]
+        end
+      end
+
+      let(:gitlab_ci_file) do
+        {
+          file_path: '.gitlab-ci.yml',
+          content:
+              <<~YAML
+                deploy-and-install:
+                  image: maven:3.6-jdk-11
+                  script:
+                    - 'mvn deploy -s settings.xml'
+                    - 'mvn install -s settings.xml'
+                  only:
+                    - "#{package_project.default_branch}"
+                  tags:
+                    - "runner-for-#{package_project.name}"
+              YAML
+        }
+      end
+
+      let(:pom_file) do
+        {
+          file_path: 'pom.xml',
+          content: <<~XML
+            <project>
+              <groupId>#{group_id}</groupId>
+              <artifactId>#{artifact_id}</artifactId>
+              <version>#{package_version}</version>
+              <modelVersion>4.0.0</modelVersion>
+              <repositories>
+                <repository>
+                  <id>#{package_project.name}</id>
+                  <url>#{gitlab_address_with_port}/api/v4/projects/#{package_project.id}/-/packages/maven</url>
+                </repository>
+              </repositories>
+              <distributionManagement>
+                <repository>
+                  <id>#{package_project.name}</id>
+                  <url>#{gitlab_address_with_port}/api/v4/projects/#{package_project.id}/packages/maven</url>
+                </repository>
+                <snapshotRepository>
+                  <id>#{package_project.name}</id>
+                  <url>#{gitlab_address_with_port}/api/v4/projects/#{package_project.id}/packages/maven</url>
+                </snapshotRepository>
+              </distributionManagement>
+            </project>
+          XML
+        }
+      end
+
+      before do
+        Flow::Login.sign_in_unless_signed_in
+        runner
+      end
+
+      after do
+        runner.remove_via_api!
+        package.remove_via_api!
+        package_project.remove_via_api!
+      end
+
+      where do
+        {
+          'using a personal access token' => {
+            authentication_token_type: :personal_access_token,
+            maven_header_name: 'Private-Token',
+            testcase: 'https://gitlab.com/gitlab-org/gitlab/-/quality/test_cases/354347'
+          },
+          'using a project deploy token' => {
+            authentication_token_type: :project_deploy_token,
+            maven_header_name: 'Deploy-Token',
+            testcase: 'https://gitlab.com/gitlab-org/gitlab/-/quality/test_cases/354348'
+          },
+          'using a ci job token' => {
+            authentication_token_type: :ci_job_token,
+            maven_header_name: 'Job-Token',
+            testcase: 'https://gitlab.com/gitlab-org/gitlab/-/quality/test_cases/354349'
+          }
+        }
+      end
+
+      with_them do
+        let(:token) do
+          case authentication_token_type
+          when :personal_access_token
+            personal_access_token
+          when :ci_job_token
+            '${env.CI_JOB_TOKEN}'
+          when :project_deploy_token
+            project_deploy_token.token
+          end
+        end
+
+        let(:settings_xml) do
+          {
+            file_path: 'settings.xml',
+            content: <<~XML
+              <settings xmlns="http://maven.apache.org/SETTINGS/1.1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+              xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.1.0 http://maven.apache.org/xsd/settings-1.1.0.xsd">
+                <servers>
+                  <server>
+                    <id>#{package_project.name}</id>
+                    <configuration>
+                      <httpHeaders>
+                        <property>
+                          <name>#{maven_header_name}</name>
+                          <value>#{token}</value>
+                        </property>
+                      </httpHeaders>
+                    </configuration>
+                  </server>
+                </servers>
+              </settings>
+            XML
+          }
+        end
+
+        it 'pushes and pulls a maven package via maven', testcase: params[:testcase] do
+          Support::Retrier.retry_on_exception(max_attempts: 3, sleep_interval: 2) do
+            Resource::Repository::Commit.fabricate_via_api! do |commit|
+              commit.project = package_project
+              commit.commit_message = 'Add .gitlab-ci.yml'
+              commit.add_files([
+                gitlab_ci_file,
+                pom_file,
+                settings_xml
+              ])
+            end
+          end
+
+          package_project.visit!
+
+          Flow::Pipeline.visit_latest_pipeline
+
+          Page::Project::Pipeline::Show.perform do |pipeline|
+            pipeline.click_job('deploy')
+          end
+
+          Page::Project::Job::Show.perform do |job|
+            expect(job).to be_successful(timeout: 800)
+
+            job.click_element(:pipeline_path)
+          end
+
+          Page::Project::Pipeline::Show.perform do |pipeline|
+            pipeline.click_job('install')
+          end
+
+          Page::Project::Job::Show.perform do |job|
+            expect(job).to be_successful(timeout: 800)
+          end
+
+          Page::Project::Menu.perform(&:click_packages_link)
+
+          Page::Project::Packages::Index.perform do |index|
+            expect(index).to have_package(package_name)
+
+            index.click_package(package_name)
+          end
+
+          Page::Project::Packages::Show.perform do |show|
+            expect(show).to have_package_info(package_name, package_version)
+          end
+        end
+      end
+    end
+  end
+end
diff --git a/qa/qa/specs/features/browser_ui/5_package/package_registry/maven_repository_spec.rb b/qa/qa/specs/features/browser_ui/5_package/package_registry/maven_repository_spec.rb
deleted file mode 100644
index b4ebb9dd475..00000000000
--- a/qa/qa/specs/features/browser_ui/5_package/package_registry/maven_repository_spec.rb
+++ /dev/null
@@ -1,233 +0,0 @@
-# frozen_string_literal: true
-
-module QA
-  RSpec.describe 'Package', :orchestrated, :packages, :object_storage do
-    describe 'Maven Repository' do
-      using RSpec::Parameterized::TableSyntax
-      include Runtime::Fixtures
-      include_context 'packages registry qa scenario'
-
-      let(:group_id) { 'com.gitlab.qa' }
-      let(:artifact_id) { "maven-#{SecureRandom.hex(8)}" }
-      let(:package_name) { "#{group_id}/#{artifact_id}".tr('.', '/') }
-      let(:package_version) { '1.3.7' }
-      let(:package_type) { 'maven' }
-
-      where(:authentication_token_type, :maven_header_name) do
-        :personal_access_token | 'Private-Token'
-        :ci_job_token          | 'Job-Token'
-        :project_deploy_token  | 'Deploy-Token'
-      end
-
-      with_them do
-        let(:token) do
-          case authentication_token_type
-          when :personal_access_token
-            personal_access_token
-          when :ci_job_token
-            '${env.CI_JOB_TOKEN}'
-          when :project_deploy_token
-            project_deploy_token.token
-          end
-        end
-
-        it "pushes and pulls a maven package via maven using #{params[:authentication_token_type]}" do
-          Support::Retrier.retry_on_exception(max_attempts: 3, sleep_interval: 2) do
-            Resource::Repository::Commit.fabricate_via_api! do |commit|
-              maven_upload_package_yaml = ERB.new(read_fixture('package_managers/maven', 'maven_upload_package.yaml.erb')).result(binding)
-              package_pom_xml = ERB.new(read_fixture('package_managers/maven', 'package_pom.xml.erb')).result(binding)
-              settings_xml = ERB.new(read_fixture('package_managers/maven', 'settings.xml.erb')).result(binding)
-
-              commit.project = package_project
-              commit.commit_message = 'Add files'
-              commit.add_files([
-                {
-                  file_path: '.gitlab-ci.yml',
-                  content: maven_upload_package_yaml
-                },
-                {
-                  file_path: 'pom.xml',
-                  content: package_pom_xml
-                },
-                {
-                  file_path: 'settings.xml',
-                  content: settings_xml
-                }
-              ])
-            end
-          end
-
-          package_project.visit!
-
-          Flow::Pipeline.visit_latest_pipeline
-
-          Page::Project::Pipeline::Show.perform do |pipeline|
-            pipeline.click_job('deploy')
-          end
-
-          Page::Project::Job::Show.perform do |job|
-            expect(job).to be_successful(timeout: 800)
-          end
-
-          Page::Project::Menu.perform(&:click_packages_link)
-
-          Page::Project::Packages::Index.perform do |index|
-            expect(index).to have_package(package_name)
-
-            index.click_package(package_name)
-          end
-
-          Page::Project::Packages::Show.perform do |show|
-            expect(show).to have_package_info(package_name, package_version)
-          end
-
-          Support::Retrier.retry_on_exception(max_attempts: 3, sleep_interval: 2) do
-            Resource::Repository::Commit.fabricate_via_api! do |commit|
-              maven_install_package_yaml = ERB.new(read_fixture('package_managers/maven', 'maven_install_package.yaml.erb')).result(binding)
-              client_pom_xml = ERB.new(read_fixture('package_managers/maven', 'client_pom.xml.erb')).result(binding)
-              settings_xml = ERB.new(read_fixture('package_managers/maven', 'settings.xml.erb')).result(binding)
-
-              commit.project = client_project
-              commit.commit_message = 'Add files'
-              commit.add_files([
-                {
-                  file_path: '.gitlab-ci.yml',
-                  content: maven_install_package_yaml
-                },
-                {
-                  file_path: 'pom.xml',
-                  content: client_pom_xml
-                },
-                {
-                  file_path: 'settings.xml',
-                  content: settings_xml
-                }
-              ])
-            end
-          end
-
-          client_project.visit!
-
-          Flow::Pipeline.visit_latest_pipeline
-
-          Page::Project::Pipeline::Show.perform do |pipeline|
-            pipeline.click_job('install')
-          end
-
-          Page::Project::Job::Show.perform do |job|
-            expect(job).to be_successful(timeout: 800)
-          end
-        end
-
-        context 'duplication setting' do
-          before do
-            package_project.group.visit!
-
-            Page::Group::Menu.perform(&:go_to_package_settings)
-          end
-
-          context 'when disabled' do
-            before do
-              Page::Group::Settings::PackageRegistries.perform(&:set_allow_duplicates_disabled)
-            end
-
-            it "prevents users from publishing group level Maven packages duplicates using #{params[:authentication_token_type]}" do
-              create_duplicated_package
-
-              push_duplicated_package
-
-              client_project.visit!
-
-              show_latest_deploy_job
-
-              Page::Project::Job::Show.perform do |job|
-                expect(job).not_to be_successful(timeout: 800)
-              end
-            end
-          end
-
-          context 'when enabled' do
-            before do
-              Page::Group::Settings::PackageRegistries.perform(&:set_allow_duplicates_enabled)
-            end
-
-            it "allows users to publish group level Maven packages duplicates using #{params[:authentication_token_type]}" do
-              create_duplicated_package
-
-              push_duplicated_package
-
-              show_latest_deploy_job
-
-              Page::Project::Job::Show.perform do |job|
-                expect(job).to be_successful(timeout: 800)
-              end
-            end
-          end
-
-          def create_duplicated_package
-            settings_xml_with_pat = ERB.new(read_fixture('package_managers/maven', 'settings_with_pat.xml.erb')).result(binding)
-            package_pom_xml = ERB.new(read_fixture('package_managers/maven', 'package_pom.xml.erb')).result(binding)
-
-            with_fixtures([
-                {
-                  file_path: 'pom.xml',
-                  content: package_pom_xml
-                },
-                {
-                  file_path: 'settings.xml',
-                  content: settings_xml_with_pat
-                }
-              ]) do |dir|
-              Service::DockerRun::Maven.new(dir).publish!
-            end
-
-            package_project.visit!
-
-            Page::Project::Menu.perform(&:click_packages_link)
-
-            Page::Project::Packages::Index.perform do |index|
-              expect(index).to have_package(package_name)
-            end
-          end
-
-          def push_duplicated_package
-            Support::Retrier.retry_on_exception(max_attempts: 3, sleep_interval: 2) do
-              Resource::Repository::Commit.fabricate_via_api! do |commit|
-                maven_upload_package_yaml = ERB.new(read_fixture('package_managers/maven', 'maven_upload_package.yaml.erb')).result(binding)
-                package_pom_xml = ERB.new(read_fixture('package_managers/maven', 'package_pom.xml.erb')).result(binding)
-                settings_xml = ERB.new(read_fixture('package_managers/maven', 'settings.xml.erb')).result(binding)
-
-                commit.project = client_project
-                commit.commit_message = 'Add .gitlab-ci.yml'
-                commit.add_files([
-                                  {
-                                    file_path: '.gitlab-ci.yml',
-                                    content: maven_upload_package_yaml
-                                  },
-                                  {
-                                    file_path: 'pom.xml',
-                                    content: package_pom_xml
-                                  },
-                                  {
-                                    file_path: 'settings.xml',
-                                    content: settings_xml
-                                  }
-                ])
-              end
-            end
-          end
-
-          def show_latest_deploy_job
-            client_project.visit!
-
-            Flow::Pipeline.visit_latest_pipeline
-
-            Page::Project::Pipeline::Show.perform do |pipeline|
-              pipeline.click_job('deploy')
-            end
-          end
-        end
-      end
-    end
-  end
-end
diff --git a/qa/qa/specs/features/browser_ui/5_package/package_registry/nuget_repository_spec.rb b/qa/qa/specs/features/browser_ui/5_package/package_registry/nuget/nuget_group_level_spec.rb
index 24f83bc19fb..b0a6555a16b 100644
--- a/qa/qa/specs/features/browser_ui/5_package/package_registry/nuget_repository_spec.rb
+++ b/qa/qa/specs/features/browser_ui/5_package/package_registry/nuget/nuget_group_level_spec.rb
@@ -2,7 +2,7 @@
 
 module QA
   RSpec.describe 'Package', :orchestrated, :packages, :object_storage do
-    describe 'NuGet Repository' do
+    describe 'NuGet group level endpoint' do
       using RSpec::Parameterized::TableSyntax
       include Runtime::Fixtures
 
diff --git a/qa/qa/specs/features/browser_ui/5_package/package_registry/nuget/nuget_project_level_spec.rb b/qa/qa/specs/features/browser_ui/5_package/package_registry/nuget/nuget_project_level_spec.rb
new file mode 100644
index 00000000000..4cac055634e
--- /dev/null
+++ b/qa/qa/specs/features/browser_ui/5_package/package_registry/nuget/nuget_project_level_spec.rb
@@ -0,0 +1,164 @@
+# frozen_string_literal: true
+
+module QA
+  RSpec.describe 'Package', :orchestrated, :packages, :object_storage do
+    describe 'NuGet project level endpoint' do
+      let(:project) do
+        Resource::Project.fabricate_via_api! do |project|
+          project.name = 'nuget-package-project'
+          project.template_name = 'dotnetcore'
+          project.visibility = :private
+        end
+      end
+
+      let(:personal_access_token) do
+        unless Page::Main::Menu.perform(&:signed_in?)
+          Flow::Login.sign_in
+        end
+
+        Resource::PersonalAccessToken.fabricate!
+      end
+
+      let(:project_deploy_token) do
+        Resource::ProjectDeployToken.fabricate_via_api! do |deploy_token|
+          deploy_token.name = 'package-deploy-token'
+          deploy_token.project = project
+          deploy_token.scopes = %w[
+            read_repository
+            read_package_registry
+            write_package_registry
+          ]
+        end
+      end
+
+      let(:package) do
+        Resource::Package.init do |package|
+          package.name = "dotnetcore-#{SecureRandom.hex(8)}"
+          package.project = project
+        end
+      end
+
+      let!(:runner) do
+        Resource::Runner.fabricate! do |runner|
+          runner.name = "qa-runner-#{Time.now.to_i}"
+          runner.tags = ["runner-for-#{project.name}"]
+          runner.executor = :docker
+          runner.project = project
+        end
+      end
+
+      after do
+        runner.remove_via_api!
+        package.remove_via_api!
+        project.remove_via_api!
+      end
+
+      where do
+        {
+          'using a personal access token' => {
+            authentication_token_type: :personal_access_token,
+            maven_header_name: 'Private-Token',
+            testcase: 'https://gitlab.com/gitlab-org/gitlab/-/quality/test_cases/354351'
+          },
+          'using a project deploy token' => {
+            authentication_token_type: :project_deploy_token,
+            maven_header_name: 'Deploy-Token',
+            testcase: 'https://gitlab.com/gitlab-org/gitlab/-/quality/test_cases/354352'
+          },
+          'using a ci job token' => {
+            authentication_token_type: :ci_job_token,
+            maven_header_name: 'Job-Token',
+            testcase: 'https://gitlab.com/gitlab-org/gitlab/-/quality/test_cases/354353'
+          }
+        }
+      end
+
+      with_them do
+        let(:auth_token_password) do
+          case authentication_token_type
+          when :personal_access_token
+            "\"#{personal_access_token.token}\""
+          when :ci_job_token
+            '${CI_JOB_TOKEN}'
+          when :project_deploy_token
+            "\"#{project_deploy_token.token}\""
+          end
+        end
+
+        let(:auth_token_username) do
+          case authentication_token_type
+          when :personal_access_token
+            "\"#{personal_access_token.user.username}\""
+          when :ci_job_token
+            'gitlab-ci-token'
+          when :project_deploy_token
+            "\"#{project_deploy_token.username}\""
+          end
+        end
+
+        it 'publishes a nuget package and installs', testcase: params[:testcase] do
+          Flow::Login.sign_in
+
+          Support::Retrier.retry_on_exception(max_attempts: 3, sleep_interval: 2) do
+            Resource::Repository::Commit.fabricate_via_api! do |commit|
+              commit.project = project
+              commit.commit_message = 'Add files'
+              commit.update_files(
+                [
+                    {
+                        file_path: '.gitlab-ci.yml',
+                        content: <<~YAML
+                          deploy-and-install:
+                            image: mcr.microsoft.com/dotnet/sdk:5.0
+                            script:
+                              - dotnet restore -p:Configuration=Release
+                              - dotnet build -c Release
+                              - dotnet pack -c Release -p:PackageID=#{package.name}
+                              - dotnet nuget add source "$CI_SERVER_URL/api/v4/projects/$CI_PROJECT_ID/packages/nuget/index.json" --name gitlab --username #{auth_token_username} --password #{auth_token_password} --store-password-in-clear-text
+                              - dotnet nuget push "bin/Release/*.nupkg" --source gitlab
+                              - "dotnet add dotnetcore.csproj package #{package.name} --version 1.0.0"
+                            rules:
+                              - if: '$CI_COMMIT_BRANCH == "#{project.default_branch}"'
+                            tags:
+                              - "runner-for-#{project.name}"
+                        YAML
+                    },
+                    {
+                      file_path: 'dotnetcore.csproj',
+                      content: <<~EOF
+                          <Project Sdk="Microsoft.NET.Sdk">
+  
+                            <PropertyGroup>
+                              <OutputType>Exe</OutputType>
+                              <TargetFramework>net5.0</TargetFramework>
+                            </PropertyGroup>
+  
+                          </Project>
+                      EOF
+                  }
+                ]
+              )
+            end
+          end
+
+          project.visit!
+          Flow::Pipeline.visit_latest_pipeline
+
+          Page::Project::Pipeline::Show.perform do |pipeline|
+            pipeline.click_job('deploy-and-install')
+          end
+
+          Page::Project::Job::Show.perform do |job|
+            expect(job).to be_successful(timeout: 800)
+          end
+
+          Page::Project::Menu.perform(&:click_packages_link)
+
+          Page::Project::Packages::Index.perform do |index|
+            expect(index).to have_package(package.name)
+          end
+        end
+      end
+    end
+  end
+end