**Added**
- iamidentitymapping for team role to team RoleBinding and ClusterRoleBinding
- ImageReplication Operator and informative CRDs
- Opttional removal of docker credentials on env destroy
- Lens support in jupyter-user-apps
- TeamSpace CRD and Operator
- UserSpace CRD and Operator
- Added support for Path prefix to Orbit frameowork's IAM roles
**Changed**
- FIX: overprovisioning fixed to support gpu
- FIX: force support pods (istio-system,knative-serving, etc.) to run on ENV nodes
- FIX: remove system:masters group from team -runner role mappings
- FIX: alb-ingress-controller deployment in isolated env
- FIX: fsx csi driver changes and helm chart cache refresh in the orbit-controller
- FIX: podsettings call typos
- FIX: added suppprt for sql parameters in magics (ddl and create_external_table --- database.py)
- FIX: added suppprt for parameters in magics (run_notebooks and schedule_notebooks --- orbit.py)
- FIX: Example-6-Schedule-Notebook, removed git:// reference
- FIX: ecr repo filter logic used to delete existing env repos
- FIX: make sure Laekformation regression tests do not run in -iso envs
- REFACTOR: orbit-controller operators, webhooks, and controllers
- FIX: mpi-operator not version locked, `latest` fails to start
- FIX: Fixed the way we generate self signed certs
- FIX: Regression tests for athena notebook needs parameterized env_name in users.population_by_age table
- FIX: regression tests for DataBrew needed parameterized names
- FIX: fix podsettings filter when copying into user namespace
- FIX: imagereplication-pod-webhook patching when no changes occur
- FIX: Removed the istio-system PDB before destroying istio-system resources, causing dead-lock
**Removed**
- REMOVED: changes to team-script-launcher...filesystem is now always used
- REMOVED: orbit profile support (use podsettings)
- REMOVED: sagemaker on eks tests for isolated envs