@grafana/openapi 13.2.3 → 13.3.0

package/dist/apis/iam.grafana.app-v0alpha1.json

@@ -29,6 +29,43 @@
         }
       }
     },
+    "/authinfos/search": {
+      "post": {
+        "tags": ["Search"],
+        "description": "Search AuthInfo resources in a namespace.",
+        "operationId": "listAuthInfoSearchV0alpha1",
+        "parameters": [],
+        "requestBody": {
+          "description": "A SearchQuery describing what to match, sort and return.",
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SearchQuery"
+              },
+              "example": {
+                "kind": "SearchQuery",
+                "apiVersion": "search.grafana.app/v0alpha1",
+                "facetLimit": 0,
+                "limit": 10
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "description": "A SearchResults envelope.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SearchResults"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
     "/display": {
       "get": {
         "tags": ["Display"],
@@ -63,6 +100,154 @@
         }
       }
     },
+    "/externalgroupmappings/search": {
+      "post": {
+        "tags": ["Search"],
+        "description": "Search ExternalGroupMapping resources in a namespace.",
+        "operationId": "listExternalGroupMappingSearchV0alpha1",
+        "parameters": [],
+        "requestBody": {
+          "description": "A SearchQuery describing what to match, sort and return.",
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SearchQuery"
+              },
+              "example": {
+                "kind": "SearchQuery",
+                "apiVersion": "search.grafana.app/v0alpha1",
+                "facetLimit": 0,
+                "limit": 10
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "description": "A SearchResults envelope.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SearchResults"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/globalrolebindings/search": {
+      "post": {
+        "tags": ["Search"],
+        "description": "Search GlobalRoleBinding resources in a namespace.",
+        "operationId": "listGlobalRoleBindingSearchV0alpha1",
+        "parameters": [],
+        "requestBody": {
+          "description": "A SearchQuery describing what to match, sort and return.",
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SearchQuery"
+              },
+              "example": {
+                "kind": "SearchQuery",
+                "apiVersion": "search.grafana.app/v0alpha1",
+                "facetLimit": 0,
+                "limit": 10
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "description": "A SearchResults envelope.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SearchResults"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/rolebindings/search": {
+      "post": {
+        "tags": ["Search"],
+        "description": "Search RoleBinding resources in a namespace.",
+        "operationId": "listRoleBindingSearchV0alpha1",
+        "parameters": [],
+        "requestBody": {
+          "description": "A SearchQuery describing what to match, sort and return.",
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SearchQuery"
+              },
+              "example": {
+                "kind": "SearchQuery",
+                "apiVersion": "search.grafana.app/v0alpha1",
+                "facetLimit": 0,
+                "limit": 10
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "description": "A SearchResults envelope.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SearchResults"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/roles/search": {
+      "post": {
+        "tags": ["Search"],
+        "description": "Search Role resources in a namespace.",
+        "operationId": "listRoleSearchV0alpha1",
+        "parameters": [],
+        "requestBody": {
+          "description": "A SearchQuery describing what to match, sort and return.",
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SearchQuery"
+              },
+              "example": {
+                "kind": "SearchQuery",
+                "apiVersion": "search.grafana.app/v0alpha1",
+                "facetLimit": 0,
+                "limit": 10
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "description": "A SearchResults envelope.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SearchResults"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
     "/searchExternalGroupMappings": {
       "post": {
         "tags": ["Search"],
@@ -583,6 +768,43 @@
         }
       ]
     },
+    "/serviceaccounts/search": {
+      "post": {
+        "tags": ["Search"],
+        "description": "Search ServiceAccount resources in a namespace.",
+        "operationId": "listServiceAccountSearchV0alpha1",
+        "parameters": [],
+        "requestBody": {
+          "description": "A SearchQuery describing what to match, sort and return.",
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SearchQuery"
+              },
+              "example": {
+                "kind": "SearchQuery",
+                "apiVersion": "search.grafana.app/v0alpha1",
+                "facetLimit": 0,
+                "limit": 10
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "description": "A SearchResults envelope.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SearchResults"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
     "/serviceaccounts/{name}": {
       "get": {
         "tags": ["ServiceAccount"],
@@ -1075,11 +1297,48 @@
         }
       ]
     },
-    "/teams": {
+    "/teambindings/search": {
+      "post": {
+        "tags": ["Search"],
+        "description": "Search TeamBinding resources in a namespace.",
+        "operationId": "listTeamBindingSearchV0alpha1",
+        "parameters": [],
+        "requestBody": {
+          "description": "A SearchQuery describing what to match, sort and return.",
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SearchQuery"
+              },
+              "example": {
+                "kind": "SearchQuery",
+                "apiVersion": "search.grafana.app/v0alpha1",
+                "facetLimit": 0,
+                "limit": 10
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "description": "A SearchResults envelope.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SearchResults"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/teamlbacrules": {
       "get": {
-        "tags": ["Team"],
-        "description": "list objects of kind Team",
-        "operationId": "listTeam",
+        "tags": ["TeamLBACRule"],
+        "description": "list or watch objects of kind TeamLBACRule",
+        "operationId": "listTeamLBACRule",
         "parameters": [
           {
             "name": "continue",
@@ -1151,17 +1410,17 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/TeamList"
+                  "$ref": "#/components/schemas/TeamLBACRuleList"
                 }
               },
               "application/json;stream=watch": {
                 "schema": {
-                  "$ref": "#/components/schemas/TeamList"
+                  "$ref": "#/components/schemas/TeamLBACRuleList"
                 }
               },
               "application/yaml": {
                 "schema": {
-                  "$ref": "#/components/schemas/TeamList"
+                  "$ref": "#/components/schemas/TeamLBACRuleList"
                 }
               }
             }
@@ -1171,13 +1430,13 @@
         "x-kubernetes-group-version-kind": {
           "group": "iam.grafana.app",
           "version": "v0alpha1",
-          "kind": "Team"
+          "kind": "TeamLBACRule"
         }
       },
       "post": {
-        "tags": ["Team"],
-        "description": "create a Team",
-        "operationId": "createTeam",
+        "tags": ["TeamLBACRule"],
+        "description": "create a TeamLBACRule",
+        "operationId": "createTeamLBACRule",
         "parameters": [
           {
             "name": "dryRun",
@@ -1211,12 +1470,12 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/Team"
+                "$ref": "#/components/schemas/TeamLBACRule"
               }
             },
             "application/yaml": {
               "schema": {
-                "$ref": "#/components/schemas/Team"
+                "$ref": "#/components/schemas/TeamLBACRule"
               }
             }
           },
@@ -1228,12 +1487,12 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/Team"
+                  "$ref": "#/components/schemas/TeamLBACRule"
                 }
               },
               "application/yaml": {
                 "schema": {
-                  "$ref": "#/components/schemas/Team"
+                  "$ref": "#/components/schemas/TeamLBACRule"
                 }
               }
             }
@@ -1243,12 +1502,12 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/Team"
+                  "$ref": "#/components/schemas/TeamLBACRule"
                 }
               },
               "application/yaml": {
                 "schema": {
-                  "$ref": "#/components/schemas/Team"
+                  "$ref": "#/components/schemas/TeamLBACRule"
                 }
               }
             }
@@ -1258,12 +1517,12 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/Team"
+                  "$ref": "#/components/schemas/TeamLBACRule"
                 }
               },
               "application/yaml": {
                 "schema": {
-                  "$ref": "#/components/schemas/Team"
+                  "$ref": "#/components/schemas/TeamLBACRule"
                 }
               }
             }
@@ -1273,7 +1532,7 @@
         "x-kubernetes-group-version-kind": {
           "group": "iam.grafana.app",
           "version": "v0alpha1",
-          "kind": "Team"
+          "kind": "TeamLBACRule"
         }
       },
       "parameters": [
@@ -1288,23 +1547,60 @@
         }
       ]
     },
-    "/teams/{name}": {
+    "/teamlbacrules/search": {
+      "post": {
+        "tags": ["Search"],
+        "description": "Search TeamLBACRule resources in a namespace.",
+        "operationId": "listTeamLBACRuleSearchV0alpha1",
+        "parameters": [],
+        "requestBody": {
+          "description": "A SearchQuery describing what to match, sort and return.",
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SearchQuery"
+              },
+              "example": {
+                "kind": "SearchQuery",
+                "apiVersion": "search.grafana.app/v0alpha1",
+                "facetLimit": 0,
+                "limit": 10
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "description": "A SearchResults envelope.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SearchResults"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/teamlbacrules/{name}": {
       "get": {
-        "tags": ["Team"],
-        "description": "read the specified Team",
-        "operationId": "getTeam",
+        "tags": ["TeamLBACRule"],
+        "description": "read the specified TeamLBACRule",
+        "operationId": "getTeamLBACRule",
         "responses": {
           "200": {
             "description": "OK",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/Team"
+                  "$ref": "#/components/schemas/TeamLBACRule"
                 }
               },
               "application/yaml": {
                 "schema": {
-                  "$ref": "#/components/schemas/Team"
+                  "$ref": "#/components/schemas/TeamLBACRule"
                 }
               }
             }
@@ -1314,13 +1610,13 @@
         "x-kubernetes-group-version-kind": {
           "group": "iam.grafana.app",
           "version": "v0alpha1",
-          "kind": "Team"
+          "kind": "TeamLBACRule"
         }
       },
       "put": {
-        "tags": ["Team"],
-        "description": "replace the specified Team",
-        "operationId": "replaceTeam",
+        "tags": ["TeamLBACRule"],
+        "description": "replace the specified TeamLBACRule",
+        "operationId": "replaceTeamLBACRule",
         "parameters": [
           {
             "name": "dryRun",
@@ -1354,12 +1650,12 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/Team"
+                "$ref": "#/components/schemas/TeamLBACRule"
               }
             },
             "application/yaml": {
               "schema": {
-                "$ref": "#/components/schemas/Team"
+                "$ref": "#/components/schemas/TeamLBACRule"
               }
             }
           },
@@ -1371,12 +1667,12 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/Team"
+                  "$ref": "#/components/schemas/TeamLBACRule"
                 }
               },
               "application/yaml": {
                 "schema": {
-                  "$ref": "#/components/schemas/Team"
+                  "$ref": "#/components/schemas/TeamLBACRule"
                 }
               }
             }
@@ -1386,12 +1682,12 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/Team"
+                  "$ref": "#/components/schemas/TeamLBACRule"
                 }
               },
               "application/yaml": {
                 "schema": {
-                  "$ref": "#/components/schemas/Team"
+                  "$ref": "#/components/schemas/TeamLBACRule"
                 }
               }
             }
@@ -1401,13 +1697,13 @@
         "x-kubernetes-group-version-kind": {
           "group": "iam.grafana.app",
           "version": "v0alpha1",
-          "kind": "Team"
+          "kind": "TeamLBACRule"
         }
       },
       "delete": {
-        "tags": ["Team"],
-        "description": "delete a Team",
-        "operationId": "deleteTeam",
+        "tags": ["TeamLBACRule"],
+        "description": "delete a TeamLBACRule",
+        "operationId": "deleteTeamLBACRule",
         "parameters": [
           {
             "name": "dryRun",
@@ -1491,13 +1787,13 @@
         "x-kubernetes-group-version-kind": {
           "group": "iam.grafana.app",
           "version": "v0alpha1",
-          "kind": "Team"
+          "kind": "TeamLBACRule"
         }
       },
       "patch": {
-        "tags": ["Team"],
-        "description": "partially update the specified Team",
-        "operationId": "updateTeam",
+        "tags": ["TeamLBACRule"],
+        "description": "partially update the specified TeamLBACRule",
+        "operationId": "updateTeamLBACRule",
         "parameters": [
           {
             "name": "dryRun",
@@ -1567,12 +1863,12 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/Team"
+                  "$ref": "#/components/schemas/TeamLBACRule"
                 }
               },
               "application/yaml": {
                 "schema": {
-                  "$ref": "#/components/schemas/Team"
+                  "$ref": "#/components/schemas/TeamLBACRule"
                 }
               }
             }
@@ -1582,12 +1878,12 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/Team"
+                  "$ref": "#/components/schemas/TeamLBACRule"
                 }
               },
               "application/yaml": {
                 "schema": {
-                  "$ref": "#/components/schemas/Team"
+                  "$ref": "#/components/schemas/TeamLBACRule"
                 }
               }
             }
@@ -1597,14 +1893,14 @@
         "x-kubernetes-group-version-kind": {
           "group": "iam.grafana.app",
           "version": "v0alpha1",
-          "kind": "Team"
+          "kind": "TeamLBACRule"
         }
       },
       "parameters": [
         {
           "name": "name",
           "in": "path",
-          "description": "name of the Team",
+          "description": "name of the TeamLBACRule",
           "required": true,
           "schema": {
             "type": "string",
@@ -1622,18 +1918,18 @@
         }
       ]
     },
-    "/teams/{name}/addmember": {
-      "post": {
-        "tags": ["Team"],
-        "description": "connect POST requests to addmember of Team",
-        "operationId": "createTeamAddmember",
+    "/teamlbacrules/{name}/for-subject": {
+      "get": {
+        "tags": ["TeamLBACRule"],
+        "description": "connect GET requests to for-subject of TeamLBACRule",
+        "operationId": "getTeamLBACRuleFor-Subject",
         "responses": {
           "200": {
             "description": "OK",
             "content": {
               "*/*": {
                 "schema": {
-                  "$ref": "#/components/schemas/github.com~1grafana~1grafana~1pkg~1apis~1iam~1v0alpha1.TeamMemberList"
+                  "type": "string"
                 }
               }
             }
@@ -1643,14 +1939,14 @@
         "x-kubernetes-group-version-kind": {
           "group": "iam.grafana.app",
           "version": "v0alpha1",
-          "kind": "TeamMemberList"
+          "kind": "GetTeamLBACRulesForSubjectRouteResponse"
         }
       },
       "parameters": [
         {
           "name": "name",
           "in": "path",
-          "description": "name of the TeamMemberList",
+          "description": "name of the GetTeamLBACRulesForSubjectRouteResponse",
           "required": true,
           "schema": {
             "type": "string",
@@ -1659,50 +1955,18 @@
         }
       ]
     },
-    "/teams/{name}/groups": {
+    "/teamlbacrules/{name}/for-subject/{path}": {
       "get": {
-        "tags": ["Team"],
-        "description": "connect GET requests to groups of Team",
-        "operationId": "getTeamGroups",
-        "parameters": [
-          {
-            "name": "limit",
-            "in": "query",
-            "description": "number of results to return",
-            "schema": {
-              "type": "integer",
-              "format": "int64"
-            },
-            "example": 30
-          },
-          {
-            "name": "page",
-            "in": "query",
-            "description": "page number (starting from 1)",
-            "schema": {
-              "type": "integer",
-              "format": "int64"
-            },
-            "example": 1
-          },
-          {
-            "name": "offset",
-            "in": "query",
-            "description": "number of results to skip",
-            "schema": {
-              "type": "integer",
-              "format": "int64"
-            },
-            "example": 0
-          }
-        ],
+        "tags": ["TeamLBACRule"],
+        "description": "connect GET requests to for-subject of TeamLBACRule",
+        "operationId": "getTeamLBACRuleFor-SubjectWithPath",
         "responses": {
           "200": {
             "description": "OK",
             "content": {
               "*/*": {
                 "schema": {
-                  "$ref": "#/components/schemas/GetTeamGroupsResponse"
+                  "type": "string"
                 }
               }
             }
@@ -1712,83 +1976,24 @@
         "x-kubernetes-group-version-kind": {
           "group": "iam.grafana.app",
           "version": "v0alpha1",
-          "kind": "GetTeamGroupsResponse"
+          "kind": "GetTeamLBACRulesForSubjectRouteResponse"
         }
       },
       "parameters": [
         {
           "name": "name",
           "in": "path",
-          "description": "name of the GetTeamGroupsResponse",
+          "description": "name of the GetTeamLBACRulesForSubjectRouteResponse",
           "required": true,
           "schema": {
             "type": "string",
             "uniqueItems": true
           }
-        }
-      ]
-    },
-    "/teams/{name}/members": {
-      "get": {
-        "tags": ["Team"],
-        "description": "connect GET requests to members of Team",
-        "operationId": "getTeamMembers",
-        "parameters": [
-          {
-            "name": "limit",
-            "in": "query",
-            "description": "number of results to return",
-            "schema": {
-              "type": "integer",
-              "format": "int64"
-            },
-            "example": 30
-          },
-          {
-            "name": "page",
-            "in": "query",
-            "description": "page number (starting from 1)",
-            "schema": {
-              "type": "integer",
-              "format": "int64"
-            },
-            "example": 1
-          },
-          {
-            "name": "offset",
-            "in": "query",
-            "description": "number of results to skip",
-            "schema": {
-              "type": "integer",
-              "format": "int64"
-            },
-            "example": 0
-          }
-        ],
-        "responses": {
-          "200": {
-            "description": "OK",
-            "content": {
-              "*/*": {
-                "schema": {
-                  "$ref": "#/components/schemas/github.com~1grafana~1grafana~1pkg~1apis~1iam~1v0alpha1.TeamMemberList"
-                }
-              }
-            }
-          }
         },
-        "x-kubernetes-action": "connect",
-        "x-kubernetes-group-version-kind": {
-          "group": "iam.grafana.app",
-          "version": "v0alpha1",
-          "kind": "TeamMemberList"
-        }
-      },
-      "parameters": [
         {
-          "name": "name",
+          "name": "path",
           "in": "path",
-          "description": "name of the TeamMemberList",
+          "description": "path to the resource",
           "required": true,
           "schema": {
             "type": "string",
@@ -1797,48 +2002,36 @@
         }
       ]
     },
-    "/teams/{name}/removemember": {
-      "post": {
-        "tags": ["Team"],
-        "description": "connect POST requests to removemember of Team",
-        "operationId": "createTeamRemovemember",
+    "/teamlbacusage": {
+      "get": {
+        "tags": ["TeamLBACRule"],
+        "description": "Service-only aggregate counts of stored TeamLBAC rules",
+        "parameters": [],
         "responses": {
           "200": {
-            "description": "OK",
             "content": {
-              "*/*": {
+              "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/github.com~1grafana~1grafana~1pkg~1apis~1iam~1v0alpha1.TeamMemberList"
+                  "type": "object",
+                  "required": ["counts"],
+                  "properties": {
+                    "counts": {
+                      "type": "object",
+                      "additionalProperties": {}
+                    }
+                  }
                 }
               }
             }
           }
-        },
-        "x-kubernetes-action": "connect",
-        "x-kubernetes-group-version-kind": {
-          "group": "iam.grafana.app",
-          "version": "v0alpha1",
-          "kind": "TeamMemberList"
-        }
-      },
-      "parameters": [
-        {
-          "name": "name",
-          "in": "path",
-          "description": "name of the TeamMemberList",
-          "required": true,
-          "schema": {
-            "type": "string",
-            "uniqueItems": true
-          }
         }
-      ]
+      }
     },
-    "/users": {
+    "/teams": {
       "get": {
-        "tags": ["User"],
-        "description": "list or watch objects of kind User",
-        "operationId": "listUser",
+        "tags": ["Team"],
+        "description": "list objects of kind Team",
+        "operationId": "listTeam",
         "parameters": [
           {
             "name": "continue",
@@ -1910,17 +2103,17 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/UserList"
+                  "$ref": "#/components/schemas/TeamList"
                 }
               },
               "application/json;stream=watch": {
                 "schema": {
-                  "$ref": "#/components/schemas/UserList"
+                  "$ref": "#/components/schemas/TeamList"
                 }
               },
               "application/yaml": {
                 "schema": {
-                  "$ref": "#/components/schemas/UserList"
+                  "$ref": "#/components/schemas/TeamList"
                 }
               }
             }
@@ -1930,13 +2123,13 @@
         "x-kubernetes-group-version-kind": {
           "group": "iam.grafana.app",
           "version": "v0alpha1",
-          "kind": "User"
+          "kind": "Team"
         }
       },
       "post": {
-        "tags": ["User"],
-        "description": "create an User",
-        "operationId": "createUser",
+        "tags": ["Team"],
+        "description": "create a Team",
+        "operationId": "createTeam",
         "parameters": [
           {
             "name": "dryRun",
@@ -1970,12 +2163,12 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/User"
+                "$ref": "#/components/schemas/Team"
               }
             },
             "application/yaml": {
               "schema": {
-                "$ref": "#/components/schemas/User"
+                "$ref": "#/components/schemas/Team"
               }
             }
           },
@@ -1987,12 +2180,12 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/User"
+                  "$ref": "#/components/schemas/Team"
                 }
               },
               "application/yaml": {
                 "schema": {
-                  "$ref": "#/components/schemas/User"
+                  "$ref": "#/components/schemas/Team"
                 }
               }
             }
@@ -2002,12 +2195,12 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/User"
+                  "$ref": "#/components/schemas/Team"
                 }
               },
               "application/yaml": {
                 "schema": {
-                  "$ref": "#/components/schemas/User"
+                  "$ref": "#/components/schemas/Team"
                 }
               }
             }
@@ -2017,12 +2210,12 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/User"
+                  "$ref": "#/components/schemas/Team"
                 }
               },
               "application/yaml": {
                 "schema": {
-                  "$ref": "#/components/schemas/User"
+                  "$ref": "#/components/schemas/Team"
                 }
               }
             }
@@ -2032,7 +2225,7 @@
         "x-kubernetes-group-version-kind": {
           "group": "iam.grafana.app",
           "version": "v0alpha1",
-          "kind": "User"
+          "kind": "Team"
         }
       },
       "parameters": [
@@ -2047,23 +2240,60 @@
         }
       ]
     },
-    "/users/{name}": {
+    "/teams/search": {
+      "post": {
+        "tags": ["Search"],
+        "description": "Search Team resources in a namespace.",
+        "operationId": "listTeamSearchV0alpha1",
+        "parameters": [],
+        "requestBody": {
+          "description": "A SearchQuery describing what to match, sort and return.",
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SearchQuery"
+              },
+              "example": {
+                "kind": "SearchQuery",
+                "apiVersion": "search.grafana.app/v0alpha1",
+                "facetLimit": 0,
+                "limit": 10
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "description": "A SearchResults envelope.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SearchResults"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/teams/{name}": {
       "get": {
-        "tags": ["User"],
-        "description": "read the specified User",
-        "operationId": "getUser",
+        "tags": ["Team"],
+        "description": "read the specified Team",
+        "operationId": "getTeam",
         "responses": {
           "200": {
             "description": "OK",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/User"
+                  "$ref": "#/components/schemas/Team"
                 }
               },
               "application/yaml": {
                 "schema": {
-                  "$ref": "#/components/schemas/User"
+                  "$ref": "#/components/schemas/Team"
                 }
               }
             }
@@ -2073,13 +2303,13 @@
         "x-kubernetes-group-version-kind": {
           "group": "iam.grafana.app",
           "version": "v0alpha1",
-          "kind": "User"
+          "kind": "Team"
         }
       },
       "put": {
-        "tags": ["User"],
-        "description": "replace the specified User",
-        "operationId": "replaceUser",
+        "tags": ["Team"],
+        "description": "replace the specified Team",
+        "operationId": "replaceTeam",
         "parameters": [
           {
             "name": "dryRun",
@@ -2113,12 +2343,12 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/User"
+                "$ref": "#/components/schemas/Team"
               }
             },
             "application/yaml": {
               "schema": {
-                "$ref": "#/components/schemas/User"
+                "$ref": "#/components/schemas/Team"
               }
             }
           },
@@ -2130,12 +2360,12 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/User"
+                  "$ref": "#/components/schemas/Team"
                 }
               },
               "application/yaml": {
                 "schema": {
-                  "$ref": "#/components/schemas/User"
+                  "$ref": "#/components/schemas/Team"
                 }
               }
             }
@@ -2145,12 +2375,12 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/User"
+                  "$ref": "#/components/schemas/Team"
                 }
               },
               "application/yaml": {
                 "schema": {
-                  "$ref": "#/components/schemas/User"
+                  "$ref": "#/components/schemas/Team"
                 }
               }
             }
@@ -2160,13 +2390,13 @@
         "x-kubernetes-group-version-kind": {
           "group": "iam.grafana.app",
           "version": "v0alpha1",
-          "kind": "User"
+          "kind": "Team"
         }
       },
       "delete": {
-        "tags": ["User"],
-        "description": "delete an User",
-        "operationId": "deleteUser",
+        "tags": ["Team"],
+        "description": "delete a Team",
+        "operationId": "deleteTeam",
         "parameters": [
           {
             "name": "dryRun",
@@ -2250,13 +2480,13 @@
         "x-kubernetes-group-version-kind": {
           "group": "iam.grafana.app",
           "version": "v0alpha1",
-          "kind": "User"
+          "kind": "Team"
         }
       },
       "patch": {
-        "tags": ["User"],
-        "description": "partially update the specified User",
-        "operationId": "updateUser",
+        "tags": ["Team"],
+        "description": "partially update the specified Team",
+        "operationId": "updateTeam",
         "parameters": [
           {
             "name": "dryRun",
@@ -2326,12 +2556,12 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/User"
+                  "$ref": "#/components/schemas/Team"
                 }
               },
               "application/yaml": {
                 "schema": {
-                  "$ref": "#/components/schemas/User"
+                  "$ref": "#/components/schemas/Team"
                 }
               }
             }
@@ -2341,12 +2571,12 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/User"
+                  "$ref": "#/components/schemas/Team"
                 }
               },
               "application/yaml": {
                 "schema": {
-                  "$ref": "#/components/schemas/User"
+                  "$ref": "#/components/schemas/Team"
                 }
               }
             }
@@ -2356,14 +2586,14 @@
         "x-kubernetes-group-version-kind": {
           "group": "iam.grafana.app",
           "version": "v0alpha1",
-          "kind": "User"
+          "kind": "Team"
         }
       },
       "parameters": [
         {
           "name": "name",
           "in": "path",
-          "description": "name of the User",
+          "description": "name of the Team",
           "required": true,
           "schema": {
             "type": "string",
@@ -2381,252 +2611,1048 @@
         }
       ]
     },
-    "/users/{name}/status": {
-      "get": {
-        "tags": ["User"],
-        "description": "read status of the specified User",
-        "operationId": "getUserStatus",
+    "/teams/{name}/addmember": {
+      "post": {
+        "tags": ["Team"],
+        "description": "connect POST requests to addmember of Team",
+        "operationId": "createTeamAddmember",
         "responses": {
           "200": {
             "description": "OK",
             "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/User"
-                }
-              },
-              "application/yaml": {
+              "*/*": {
                 "schema": {
-                  "$ref": "#/components/schemas/User"
+                  "$ref": "#/components/schemas/github.com~1grafana~1grafana~1pkg~1apis~1iam~1v0alpha1.TeamMemberList"
                 }
               }
             }
           }
         },
-        "x-kubernetes-action": "get",
+        "x-kubernetes-action": "connect",
         "x-kubernetes-group-version-kind": {
           "group": "iam.grafana.app",
           "version": "v0alpha1",
-          "kind": "User"
+          "kind": "TeamMemberList"
         }
       },
-      "put": {
-        "tags": ["User"],
-        "description": "replace status of the specified User",
-        "operationId": "replaceUserStatus",
+      "parameters": [
+        {
+          "name": "name",
+          "in": "path",
+          "description": "name of the TeamMemberList",
+          "required": true,
+          "schema": {
+            "type": "string",
+            "uniqueItems": true
+          }
+        }
+      ]
+    },
+    "/teams/{name}/groups": {
+      "get": {
+        "tags": ["Team"],
+        "description": "connect GET requests to groups of Team",
+        "operationId": "getTeamGroups",
         "parameters": [
           {
-            "name": "dryRun",
+            "name": "limit",
             "in": "query",
-            "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed",
+            "description": "number of results to return",
             "schema": {
-              "type": "string",
-              "uniqueItems": true
-            }
+              "type": "integer",
+              "format": "int64"
+            },
+            "example": 30
           },
           {
-            "name": "fieldManager",
+            "name": "page",
             "in": "query",
-            "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.",
+            "description": "page number (starting from 1)",
             "schema": {
-              "type": "string",
-              "uniqueItems": true
-            }
+              "type": "integer",
+              "format": "int64"
+            },
+            "example": 1
           },
           {
-            "name": "fieldValidation",
+            "name": "offset",
             "in": "query",
-            "description": "fieldValidation instructs the server on how to handle objects in the request (POST/PUT/PATCH) containing unknown or duplicate fields. Valid values are: - Ignore: This will ignore any unknown fields that are silently dropped from the object, and will ignore all but the last duplicate field that the decoder encounters. This is the default behavior prior to v1.23. - Warn: This will send a warning via the standard warning response header for each unknown field that is dropped from the object, and for each duplicate field that is encountered. The request will still succeed if there are no other errors, and will only persist the last of any duplicate fields. This is the default in v1.23+ - Strict: This will fail the request with a BadRequest error if any unknown fields would be dropped from the object, or if any duplicate fields are present. The error returned from the server will contain all unknown and duplicate fields encountered.",
+            "description": "number of results to skip",
             "schema": {
-              "type": "string",
-              "uniqueItems": true
-            }
+              "type": "integer",
+              "format": "int64"
+            },
+            "example": 0
           }
         ],
-        "requestBody": {
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/User"
-              }
-            },
-            "application/yaml": {
-              "schema": {
-                "$ref": "#/components/schemas/User"
-              }
-            }
-          },
-          "required": true
-        },
         "responses": {
           "200": {
             "description": "OK",
             "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/User"
-                }
-              },
-              "application/yaml": {
-                "schema": {
-                  "$ref": "#/components/schemas/User"
-                }
-              }
-            }
-          },
-          "201": {
-            "description": "Created",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/User"
-                }
-              },
-              "application/yaml": {
+              "*/*": {
                 "schema": {
-                  "$ref": "#/components/schemas/User"
+                  "$ref": "#/components/schemas/GetTeamGroupsResponse"
                 }
               }
             }
           }
         },
-        "x-kubernetes-action": "put",
+        "x-kubernetes-action": "connect",
         "x-kubernetes-group-version-kind": {
           "group": "iam.grafana.app",
           "version": "v0alpha1",
-          "kind": "User"
+          "kind": "GetTeamGroupsResponse"
         }
       },
-      "patch": {
-        "tags": ["User"],
-        "description": "partially update status of the specified User",
-        "operationId": "updateUserStatus",
+      "parameters": [
+        {
+          "name": "name",
+          "in": "path",
+          "description": "name of the GetTeamGroupsResponse",
+          "required": true,
+          "schema": {
+            "type": "string",
+            "uniqueItems": true
+          }
+        }
+      ]
+    },
+    "/teams/{name}/members": {
+      "get": {
+        "tags": ["Team"],
+        "description": "connect GET requests to members of Team",
+        "operationId": "getTeamMembers",
         "parameters": [
           {
-            "name": "dryRun",
-            "in": "query",
-            "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed",
-            "schema": {
-              "type": "string",
-              "uniqueItems": true
-            }
-          },
-          {
-            "name": "fieldManager",
+            "name": "limit",
             "in": "query",
-            "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).",
+            "description": "number of results to return",
             "schema": {
-              "type": "string",
-              "uniqueItems": true
-            }
+              "type": "integer",
+              "format": "int64"
+            },
+            "example": 30
           },
           {
-            "name": "fieldValidation",
+            "name": "page",
             "in": "query",
-            "description": "fieldValidation instructs the server on how to handle objects in the request (POST/PUT/PATCH) containing unknown or duplicate fields. Valid values are: - Ignore: This will ignore any unknown fields that are silently dropped from the object, and will ignore all but the last duplicate field that the decoder encounters. This is the default behavior prior to v1.23. - Warn: This will send a warning via the standard warning response header for each unknown field that is dropped from the object, and for each duplicate field that is encountered. The request will still succeed if there are no other errors, and will only persist the last of any duplicate fields. This is the default in v1.23+ - Strict: This will fail the request with a BadRequest error if any unknown fields would be dropped from the object, or if any duplicate fields are present. The error returned from the server will contain all unknown and duplicate fields encountered.",
+            "description": "page number (starting from 1)",
             "schema": {
-              "type": "string",
-              "uniqueItems": true
-            }
+              "type": "integer",
+              "format": "int64"
+            },
+            "example": 1
           },
           {
-            "name": "force",
+            "name": "offset",
             "in": "query",
-            "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.",
+            "description": "number of results to skip",
             "schema": {
-              "type": "boolean",
-              "uniqueItems": true
-            }
+              "type": "integer",
+              "format": "int64"
+            },
+            "example": 0
           }
         ],
-        "requestBody": {
-          "content": {
-            "application/apply-patch+yaml": {
-              "schema": {
-                "$ref": "#/components/schemas/Patch"
-              }
-            },
-            "application/json-patch+json": {
-              "schema": {
-                "$ref": "#/components/schemas/Patch"
-              }
-            },
-            "application/merge-patch+json": {
-              "schema": {
-                "$ref": "#/components/schemas/Patch"
-              }
-            },
-            "application/strategic-merge-patch+json": {
-              "schema": {
-                "$ref": "#/components/schemas/Patch"
-              }
-            }
-          },
-          "required": true
-        },
         "responses": {
           "200": {
             "description": "OK",
             "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/User"
-                }
-              },
-              "application/yaml": {
-                "schema": {
-                  "$ref": "#/components/schemas/User"
-                }
-              }
-            }
-          },
-          "201": {
-            "description": "Created",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/User"
-                }
-              },
-              "application/yaml": {
+              "*/*": {
                 "schema": {
-                  "$ref": "#/components/schemas/User"
+                  "$ref": "#/components/schemas/github.com~1grafana~1grafana~1pkg~1apis~1iam~1v0alpha1.TeamMemberList"
                 }
               }
             }
           }
         },
-        "x-kubernetes-action": "patch",
+        "x-kubernetes-action": "connect",
         "x-kubernetes-group-version-kind": {
           "group": "iam.grafana.app",
           "version": "v0alpha1",
-          "kind": "User"
+          "kind": "TeamMemberList"
         }
       },
       "parameters": [
         {
           "name": "name",
           "in": "path",
-          "description": "name of the User",
+          "description": "name of the TeamMemberList",
           "required": true,
           "schema": {
             "type": "string",
             "uniqueItems": true
           }
-        },
-        {
-          "name": "pretty",
-          "in": "query",
-          "description": "If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget).",
-          "schema": {
-            "type": "string",
-            "uniqueItems": true
-          }
         }
       ]
     },
-    "/users/{name}/teams": {
-      "get": {
+    "/teams/{name}/removemember": {
+      "post": {
+        "tags": ["Team"],
+        "description": "connect POST requests to removemember of Team",
+        "operationId": "createTeamRemovemember",
+        "responses": {
+          "200": {
+            "description": "OK",
+            "content": {
+              "*/*": {
+                "schema": {
+                  "$ref": "#/components/schemas/github.com~1grafana~1grafana~1pkg~1apis~1iam~1v0alpha1.TeamMemberList"
+                }
+              }
+            }
+          }
+        },
+        "x-kubernetes-action": "connect",
+        "x-kubernetes-group-version-kind": {
+          "group": "iam.grafana.app",
+          "version": "v0alpha1",
+          "kind": "TeamMemberList"
+        }
+      },
+      "parameters": [
+        {
+          "name": "name",
+          "in": "path",
+          "description": "name of the TeamMemberList",
+          "required": true,
+          "schema": {
+            "type": "string",
+            "uniqueItems": true
+          }
+        }
+      ]
+    },
+    "/users": {
+      "get": {
+        "tags": ["User"],
+        "description": "list or watch objects of kind User",
+        "operationId": "listUser",
+        "parameters": [
+          {
+            "name": "continue",
+            "in": "query",
+            "description": "The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the \"next key\".\n\nThis field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications.",
+            "schema": {
+              "type": "string",
+              "uniqueItems": true
+            }
+          },
+          {
+            "name": "fieldSelector",
+            "in": "query",
+            "description": "A selector to restrict the list of returned objects by their fields. Defaults to everything.",
+            "schema": {
+              "type": "string",
+              "uniqueItems": true
+            }
+          },
+          {
+            "name": "labelSelector",
+            "in": "query",
+            "description": "A selector to restrict the list of returned objects by their labels. Defaults to everything.",
+            "schema": {
+              "type": "string",
+              "uniqueItems": true
+            }
+          },
+          {
+            "name": "limit",
+            "in": "query",
+            "description": "limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true.\n\nThe server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned.",
+            "schema": {
+              "type": "integer",
+              "uniqueItems": true
+            }
+          },
+          {
+            "name": "resourceVersion",
+            "in": "query",
+            "description": "resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details.\n\nDefaults to unset",
+            "schema": {
+              "type": "string",
+              "uniqueItems": true
+            }
+          },
+          {
+            "name": "timeoutSeconds",
+            "in": "query",
+            "description": "Timeout for the list/watch call. This limits the duration of the call, regardless of any activity or inactivity.",
+            "schema": {
+              "type": "integer",
+              "uniqueItems": true
+            }
+          },
+          {
+            "name": "watch",
+            "in": "query",
+            "description": "Watch for changes to the described resources and return them as a stream of add, update, and remove notifications. Specify resourceVersion.",
+            "schema": {
+              "type": "boolean",
+              "uniqueItems": true
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "OK",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/UserList"
+                }
+              },
+              "application/json;stream=watch": {
+                "schema": {
+                  "$ref": "#/components/schemas/UserList"
+                }
+              },
+              "application/yaml": {
+                "schema": {
+                  "$ref": "#/components/schemas/UserList"
+                }
+              }
+            }
+          }
+        },
+        "x-kubernetes-action": "list",
+        "x-kubernetes-group-version-kind": {
+          "group": "iam.grafana.app",
+          "version": "v0alpha1",
+          "kind": "User"
+        }
+      },
+      "post": {
+        "tags": ["User"],
+        "description": "create an User",
+        "operationId": "createUser",
+        "parameters": [
+          {
+            "name": "dryRun",
+            "in": "query",
+            "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed",
+            "schema": {
+              "type": "string",
+              "uniqueItems": true
+            }
+          },
+          {
+            "name": "fieldManager",
+            "in": "query",
+            "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.",
+            "schema": {
+              "type": "string",
+              "uniqueItems": true
+            }
+          },
+          {
+            "name": "fieldValidation",
+            "in": "query",
+            "description": "fieldValidation instructs the server on how to handle objects in the request (POST/PUT/PATCH) containing unknown or duplicate fields. Valid values are: - Ignore: This will ignore any unknown fields that are silently dropped from the object, and will ignore all but the last duplicate field that the decoder encounters. This is the default behavior prior to v1.23. - Warn: This will send a warning via the standard warning response header for each unknown field that is dropped from the object, and for each duplicate field that is encountered. The request will still succeed if there are no other errors, and will only persist the last of any duplicate fields. This is the default in v1.23+ - Strict: This will fail the request with a BadRequest error if any unknown fields would be dropped from the object, or if any duplicate fields are present. The error returned from the server will contain all unknown and duplicate fields encountered.",
+            "schema": {
+              "type": "string",
+              "uniqueItems": true
+            }
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/User"
+              }
+            },
+            "application/yaml": {
+              "schema": {
+                "$ref": "#/components/schemas/User"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "description": "OK",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              },
+              "application/yaml": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              }
+            }
+          },
+          "201": {
+            "description": "Created",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              },
+              "application/yaml": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              }
+            }
+          },
+          "202": {
+            "description": "Accepted",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              },
+              "application/yaml": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              }
+            }
+          }
+        },
+        "x-kubernetes-action": "post",
+        "x-kubernetes-group-version-kind": {
+          "group": "iam.grafana.app",
+          "version": "v0alpha1",
+          "kind": "User"
+        }
+      },
+      "parameters": [
+        {
+          "name": "pretty",
+          "in": "query",
+          "description": "If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget).",
+          "schema": {
+            "type": "string",
+            "uniqueItems": true
+          }
+        }
+      ]
+    },
+    "/users/search": {
+      "post": {
+        "tags": ["Search"],
+        "description": "Search User resources in a namespace.",
+        "operationId": "listUserSearchV0alpha1",
+        "parameters": [],
+        "requestBody": {
+          "description": "A SearchQuery describing what to match, sort and return.",
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/SearchQuery"
+              },
+              "example": {
+                "kind": "SearchQuery",
+                "apiVersion": "search.grafana.app/v0alpha1",
+                "facetLimit": 0,
+                "limit": 10
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "description": "A SearchResults envelope.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SearchResults"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/users/{name}": {
+      "get": {
+        "tags": ["User"],
+        "description": "read the specified User",
+        "operationId": "getUser",
+        "responses": {
+          "200": {
+            "description": "OK",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              },
+              "application/yaml": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              }
+            }
+          }
+        },
+        "x-kubernetes-action": "get",
+        "x-kubernetes-group-version-kind": {
+          "group": "iam.grafana.app",
+          "version": "v0alpha1",
+          "kind": "User"
+        }
+      },
+      "put": {
+        "tags": ["User"],
+        "description": "replace the specified User",
+        "operationId": "replaceUser",
+        "parameters": [
+          {
+            "name": "dryRun",
+            "in": "query",
+            "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed",
+            "schema": {
+              "type": "string",
+              "uniqueItems": true
+            }
+          },
+          {
+            "name": "fieldManager",
+            "in": "query",
+            "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.",
+            "schema": {
+              "type": "string",
+              "uniqueItems": true
+            }
+          },
+          {
+            "name": "fieldValidation",
+            "in": "query",
+            "description": "fieldValidation instructs the server on how to handle objects in the request (POST/PUT/PATCH) containing unknown or duplicate fields. Valid values are: - Ignore: This will ignore any unknown fields that are silently dropped from the object, and will ignore all but the last duplicate field that the decoder encounters. This is the default behavior prior to v1.23. - Warn: This will send a warning via the standard warning response header for each unknown field that is dropped from the object, and for each duplicate field that is encountered. The request will still succeed if there are no other errors, and will only persist the last of any duplicate fields. This is the default in v1.23+ - Strict: This will fail the request with a BadRequest error if any unknown fields would be dropped from the object, or if any duplicate fields are present. The error returned from the server will contain all unknown and duplicate fields encountered.",
+            "schema": {
+              "type": "string",
+              "uniqueItems": true
+            }
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/User"
+              }
+            },
+            "application/yaml": {
+              "schema": {
+                "$ref": "#/components/schemas/User"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "description": "OK",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              },
+              "application/yaml": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              }
+            }
+          },
+          "201": {
+            "description": "Created",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              },
+              "application/yaml": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              }
+            }
+          }
+        },
+        "x-kubernetes-action": "put",
+        "x-kubernetes-group-version-kind": {
+          "group": "iam.grafana.app",
+          "version": "v0alpha1",
+          "kind": "User"
+        }
+      },
+      "delete": {
+        "tags": ["User"],
+        "description": "delete an User",
+        "operationId": "deleteUser",
+        "parameters": [
+          {
+            "name": "dryRun",
+            "in": "query",
+            "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed",
+            "schema": {
+              "type": "string",
+              "uniqueItems": true
+            }
+          },
+          {
+            "name": "gracePeriodSeconds",
+            "in": "query",
+            "description": "The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.",
+            "schema": {
+              "type": "integer",
+              "uniqueItems": true
+            }
+          },
+          {
+            "name": "ignoreStoreReadErrorWithClusterBreakingPotential",
+            "in": "query",
+            "description": "if set to true, it will trigger an unsafe deletion of the resource in case the normal deletion flow fails with a corrupt object error. A resource is considered corrupt if it can not be retrieved from the underlying storage successfully because of a) its data can not be transformed e.g. decryption failure, or b) it fails to decode into an object. NOTE: unsafe deletion ignores finalizer constraints, skips precondition checks, and removes the object from the storage. WARNING: This may potentially break the cluster if the workload associated with the resource being unsafe-deleted relies on normal deletion flow. Use only if you REALLY know what you are doing. The default value is false, and the user must opt in to enable it",
+            "schema": {
+              "type": "boolean",
+              "uniqueItems": true
+            }
+          },
+          {
+            "name": "orphanDependents",
+            "in": "query",
+            "description": "Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the \"orphan\" finalizer will be added to/removed from the object's finalizers list. Either this field or PropagationPolicy may be set, but not both.",
+            "schema": {
+              "type": "boolean",
+              "uniqueItems": true
+            }
+          },
+          {
+            "name": "propagationPolicy",
+            "in": "query",
+            "description": "Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: 'Orphan' - orphan the dependents; 'Background' - allow the garbage collector to delete the dependents in the background; 'Foreground' - a cascading policy that deletes all dependents in the foreground.",
+            "schema": {
+              "type": "string",
+              "uniqueItems": true
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "OK",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Status"
+                }
+              },
+              "application/yaml": {
+                "schema": {
+                  "$ref": "#/components/schemas/Status"
+                }
+              }
+            }
+          },
+          "202": {
+            "description": "Accepted",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Status"
+                }
+              },
+              "application/yaml": {
+                "schema": {
+                  "$ref": "#/components/schemas/Status"
+                }
+              }
+            }
+          }
+        },
+        "x-kubernetes-action": "delete",
+        "x-kubernetes-group-version-kind": {
+          "group": "iam.grafana.app",
+          "version": "v0alpha1",
+          "kind": "User"
+        }
+      },
+      "patch": {
+        "tags": ["User"],
+        "description": "partially update the specified User",
+        "operationId": "updateUser",
+        "parameters": [
+          {
+            "name": "dryRun",
+            "in": "query",
+            "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed",
+            "schema": {
+              "type": "string",
+              "uniqueItems": true
+            }
+          },
+          {
+            "name": "fieldManager",
+            "in": "query",
+            "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).",
+            "schema": {
+              "type": "string",
+              "uniqueItems": true
+            }
+          },
+          {
+            "name": "fieldValidation",
+            "in": "query",
+            "description": "fieldValidation instructs the server on how to handle objects in the request (POST/PUT/PATCH) containing unknown or duplicate fields. Valid values are: - Ignore: This will ignore any unknown fields that are silently dropped from the object, and will ignore all but the last duplicate field that the decoder encounters. This is the default behavior prior to v1.23. - Warn: This will send a warning via the standard warning response header for each unknown field that is dropped from the object, and for each duplicate field that is encountered. The request will still succeed if there are no other errors, and will only persist the last of any duplicate fields. This is the default in v1.23+ - Strict: This will fail the request with a BadRequest error if any unknown fields would be dropped from the object, or if any duplicate fields are present. The error returned from the server will contain all unknown and duplicate fields encountered.",
+            "schema": {
+              "type": "string",
+              "uniqueItems": true
+            }
+          },
+          {
+            "name": "force",
+            "in": "query",
+            "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.",
+            "schema": {
+              "type": "boolean",
+              "uniqueItems": true
+            }
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/apply-patch+yaml": {
+              "schema": {
+                "$ref": "#/components/schemas/Patch"
+              }
+            },
+            "application/json-patch+json": {
+              "schema": {
+                "$ref": "#/components/schemas/Patch"
+              }
+            },
+            "application/merge-patch+json": {
+              "schema": {
+                "$ref": "#/components/schemas/Patch"
+              }
+            },
+            "application/strategic-merge-patch+json": {
+              "schema": {
+                "$ref": "#/components/schemas/Patch"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "description": "OK",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              },
+              "application/yaml": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              }
+            }
+          },
+          "201": {
+            "description": "Created",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              },
+              "application/yaml": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              }
+            }
+          }
+        },
+        "x-kubernetes-action": "patch",
+        "x-kubernetes-group-version-kind": {
+          "group": "iam.grafana.app",
+          "version": "v0alpha1",
+          "kind": "User"
+        }
+      },
+      "parameters": [
+        {
+          "name": "name",
+          "in": "path",
+          "description": "name of the User",
+          "required": true,
+          "schema": {
+            "type": "string",
+            "uniqueItems": true
+          }
+        },
+        {
+          "name": "pretty",
+          "in": "query",
+          "description": "If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget).",
+          "schema": {
+            "type": "string",
+            "uniqueItems": true
+          }
+        }
+      ]
+    },
+    "/users/{name}/status": {
+      "get": {
+        "tags": ["User"],
+        "description": "read status of the specified User",
+        "operationId": "getUserStatus",
+        "responses": {
+          "200": {
+            "description": "OK",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              },
+              "application/yaml": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              }
+            }
+          }
+        },
+        "x-kubernetes-action": "get",
+        "x-kubernetes-group-version-kind": {
+          "group": "iam.grafana.app",
+          "version": "v0alpha1",
+          "kind": "User"
+        }
+      },
+      "put": {
+        "tags": ["User"],
+        "description": "replace status of the specified User",
+        "operationId": "replaceUserStatus",
+        "parameters": [
+          {
+            "name": "dryRun",
+            "in": "query",
+            "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed",
+            "schema": {
+              "type": "string",
+              "uniqueItems": true
+            }
+          },
+          {
+            "name": "fieldManager",
+            "in": "query",
+            "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.",
+            "schema": {
+              "type": "string",
+              "uniqueItems": true
+            }
+          },
+          {
+            "name": "fieldValidation",
+            "in": "query",
+            "description": "fieldValidation instructs the server on how to handle objects in the request (POST/PUT/PATCH) containing unknown or duplicate fields. Valid values are: - Ignore: This will ignore any unknown fields that are silently dropped from the object, and will ignore all but the last duplicate field that the decoder encounters. This is the default behavior prior to v1.23. - Warn: This will send a warning via the standard warning response header for each unknown field that is dropped from the object, and for each duplicate field that is encountered. The request will still succeed if there are no other errors, and will only persist the last of any duplicate fields. This is the default in v1.23+ - Strict: This will fail the request with a BadRequest error if any unknown fields would be dropped from the object, or if any duplicate fields are present. The error returned from the server will contain all unknown and duplicate fields encountered.",
+            "schema": {
+              "type": "string",
+              "uniqueItems": true
+            }
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/User"
+              }
+            },
+            "application/yaml": {
+              "schema": {
+                "$ref": "#/components/schemas/User"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "description": "OK",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              },
+              "application/yaml": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              }
+            }
+          },
+          "201": {
+            "description": "Created",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              },
+              "application/yaml": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              }
+            }
+          }
+        },
+        "x-kubernetes-action": "put",
+        "x-kubernetes-group-version-kind": {
+          "group": "iam.grafana.app",
+          "version": "v0alpha1",
+          "kind": "User"
+        }
+      },
+      "patch": {
+        "tags": ["User"],
+        "description": "partially update status of the specified User",
+        "operationId": "updateUserStatus",
+        "parameters": [
+          {
+            "name": "dryRun",
+            "in": "query",
+            "description": "When present, indicates that modifications should not be persisted. An invalid or unrecognized dryRun directive will result in an error response and no further processing of the request. Valid values are: - All: all dry run stages will be processed",
+            "schema": {
+              "type": "string",
+              "uniqueItems": true
+            }
+          },
+          {
+            "name": "fieldManager",
+            "in": "query",
+            "description": "fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. This field is required for apply requests (application/apply-patch) but optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch).",
+            "schema": {
+              "type": "string",
+              "uniqueItems": true
+            }
+          },
+          {
+            "name": "fieldValidation",
+            "in": "query",
+            "description": "fieldValidation instructs the server on how to handle objects in the request (POST/PUT/PATCH) containing unknown or duplicate fields. Valid values are: - Ignore: This will ignore any unknown fields that are silently dropped from the object, and will ignore all but the last duplicate field that the decoder encounters. This is the default behavior prior to v1.23. - Warn: This will send a warning via the standard warning response header for each unknown field that is dropped from the object, and for each duplicate field that is encountered. The request will still succeed if there are no other errors, and will only persist the last of any duplicate fields. This is the default in v1.23+ - Strict: This will fail the request with a BadRequest error if any unknown fields would be dropped from the object, or if any duplicate fields are present. The error returned from the server will contain all unknown and duplicate fields encountered.",
+            "schema": {
+              "type": "string",
+              "uniqueItems": true
+            }
+          },
+          {
+            "name": "force",
+            "in": "query",
+            "description": "Force is going to \"force\" Apply requests. It means user will re-acquire conflicting fields owned by other people. Force flag must be unset for non-apply patch requests.",
+            "schema": {
+              "type": "boolean",
+              "uniqueItems": true
+            }
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/apply-patch+yaml": {
+              "schema": {
+                "$ref": "#/components/schemas/Patch"
+              }
+            },
+            "application/json-patch+json": {
+              "schema": {
+                "$ref": "#/components/schemas/Patch"
+              }
+            },
+            "application/merge-patch+json": {
+              "schema": {
+                "$ref": "#/components/schemas/Patch"
+              }
+            },
+            "application/strategic-merge-patch+json": {
+              "schema": {
+                "$ref": "#/components/schemas/Patch"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "description": "OK",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              },
+              "application/yaml": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              }
+            }
+          },
+          "201": {
+            "description": "Created",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              },
+              "application/yaml": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              }
+            }
+          }
+        },
+        "x-kubernetes-action": "patch",
+        "x-kubernetes-group-version-kind": {
+          "group": "iam.grafana.app",
+          "version": "v0alpha1",
+          "kind": "User"
+        }
+      },
+      "parameters": [
+        {
+          "name": "name",
+          "in": "path",
+          "description": "name of the User",
+          "required": true,
+          "schema": {
+            "type": "string",
+            "uniqueItems": true
+          }
+        },
+        {
+          "name": "pretty",
+          "in": "query",
+          "description": "If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget).",
+          "schema": {
+            "type": "string",
+            "uniqueItems": true
+          }
+        }
+      ]
+    },
+    "/users/{name}/teams": {
+      "get": {
         "tags": ["User"],
         "description": "connect GET requests to teams of User",
         "operationId": "getUserTeams",
@@ -2679,31 +3705,170 @@
             "type": "string",
             "uniqueItems": true
           }
-        }
-      ]
+        }
+      ]
+    },
+    "/users/~": {
+      "get": {
+        "tags": ["User"],
+        "description": "Show display information for the currently authenticated identity. Deprecated: use /apis/iam.grafana.app/v0alpha1/whoami instead.",
+        "operationId": "getCurrentUserDisplay",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/CurrentUserInfo"
+                }
+              }
+            }
+          }
+        },
+        "deprecated": true
+      }
+    },
+    "/users/~/permissions": {
+      "get": {
+        "tags": ["User"],
+        "description": "Get effective permissions for the currently authenticated identity. Deprecated: do not use for new integrations.",
+        "operationId": "getCurrentUserPermissions",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/UserPermissions"
+                }
+              }
+            }
+          }
+        },
+        "deprecated": true
+      }
     },
-    "/users/~": {
+    "/whoami": {
       "get": {
-        "tags": ["Display"],
+        "tags": ["User"],
         "description": "Show display information for the currently authenticated identity",
-        "operationId": "getCurrentUserDisplay",
-        "parameters": [],
+        "operationId": "getWhoAmI",
         "responses": {
           "200": {
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/Display"
+                  "$ref": "#/components/schemas/CurrentUserInfo"
                 }
               }
             }
           }
         }
       }
+    },
+    "/whoami/permissions": {
+      "get": {
+        "tags": ["User"],
+        "description": "Get effective permissions for the currently authenticated identity. Deprecated: do not use for new integrations.",
+        "operationId": "getWhoAmIPermissions",
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/UserPermissions"
+                }
+              }
+            }
+          }
+        },
+        "deprecated": true
+      }
     }
   },
   "components": {
     "schemas": {
+      "AuthInfo": {
+        "type": "object",
+        "required": ["metadata", "spec"],
+        "properties": {
+          "apiVersion": {
+            "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+            "type": "string"
+          },
+          "kind": {
+            "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+            "type": "string"
+          },
+          "metadata": {
+            "default": {}
+          },
+          "spec": {
+            "description": "Spec is the spec of the AuthInfo",
+            "default": {}
+          }
+        }
+      },
+      "AuthInfoList": {
+        "type": "object",
+        "required": ["metadata", "items"],
+        "properties": {
+          "apiVersion": {
+            "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+            "type": "string"
+          },
+          "items": {
+            "type": "array",
+            "items": {}
+          },
+          "kind": {
+            "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+            "type": "string"
+          },
+          "metadata": {
+            "default": {}
+          }
+        }
+      },
+      "AuthInfoSpec": {
+        "type": "object",
+        "required": ["userRef", "authModule", "authID"],
+        "properties": {
+          "authID": {
+            "description": "authID is the identifier the auth provider returns at login (OAuth subject, LDAP DN, SAML NameID).",
+            "type": "string",
+            "default": ""
+          },
+          "authModule": {
+            "description": "authModule is the external auth provider the user is linked through (e.g. \"github\", \"ldap\", \"saml\").",
+            "type": "string",
+            "default": ""
+          },
+          "created": {
+            "description": "created is the creation timestamp of the auth link, in epoch milliseconds.",
+            "type": "integer",
+            "format": "int64"
+          },
+          "externalUID": {
+            "description": "externalUID is the external unique identifier of the user, used for provisioning systems such as SCIM to correlate the user without relying on authID.",
+            "type": "string"
+          },
+          "userRef": {
+            "default": {}
+          }
+        }
+      },
+      "AuthInfoUserRef": {
+        "type": "object",
+        "required": ["name"],
+        "properties": {
+          "name": {
+            "description": "Name is the unique identifier (UID) for a user.",
+            "type": "string",
+            "default": ""
+          }
+        }
+      },
       "CreateSearchExternalGroupMappingsBody": {
         "type": "object",
         "required": ["teams", "totalHits"],
@@ -2712,8 +3877,7 @@
             "description": "Deduplicated team UIDs whose spec.externalGroups intersect the request set.",
             "type": "array",
             "items": {
-              "type": "string",
-              "default": ""
+              "type": "string"
             }
           },
           "totalHits": {
@@ -2740,8 +3904,7 @@
             "description": "Deduplicated team UIDs whose spec.externalGroups intersect the request set.",
             "type": "array",
             "items": {
-              "type": "string",
-              "default": ""
+              "type": "string"
             }
           },
           "totalHits": {
@@ -2974,9 +4137,7 @@
           },
           "items": {
             "type": "array",
-            "items": {
-              "default": {}
-            }
+            "items": {}
           },
           "kind": {
             "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
@@ -3017,9 +4178,7 @@
         "properties": {
           "hits": {
             "type": "array",
-            "items": {
-              "default": {}
-            }
+            "items": {}
           },
           "maxScore": {
             "type": "number",
@@ -3053,9 +4212,7 @@
           },
           "hits": {
             "type": "array",
-            "items": {
-              "default": {}
-            }
+            "items": {}
           },
           "kind": {
             "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
@@ -3090,8 +4247,7 @@
           "accessControl": {
             "type": "object",
             "additionalProperties": {
-              "type": "boolean",
-              "default": false
+              "type": "boolean"
             }
           },
           "email": {
@@ -3130,9 +4286,7 @@
         "properties": {
           "hits": {
             "type": "array",
-            "items": {
-              "default": {}
-            }
+            "items": {}
           },
           "maxScore": {
             "type": "number",
@@ -3176,8 +4330,7 @@
           "accessControl": {
             "type": "object",
             "additionalProperties": {
-              "type": "boolean",
-              "default": false
+              "type": "boolean"
             }
           },
           "created": {
@@ -3198,8 +4351,7 @@
             "description": "Auth module identifiers the user is externally synced with.",
             "type": "array",
             "items": {
-              "type": "string",
-              "default": ""
+              "type": "string"
             }
           },
           "internalId": {
@@ -3311,8 +4463,7 @@
           "externalGroups": {
             "type": "array",
             "items": {
-              "type": "string",
-              "default": ""
+              "type": "string"
             }
           }
         }
@@ -3328,8 +4479,7 @@
           "externalGroups": {
             "type": "array",
             "items": {
-              "type": "string",
-              "default": ""
+              "type": "string"
             }
           },
           "kind": {
@@ -3345,15 +4495,82 @@
           }
         ]
       },
+      "GetTeamLBACRulesForSubjectRouteBody": {
+        "type": "object",
+        "required": ["team_filters"],
+        "properties": {
+          "team_filters": {
+            "type": "object",
+            "additionalProperties": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            }
+          }
+        }
+      },
+      "GetTeamLBACRulesForSubjectRouteResponse": {
+        "type": "object",
+        "required": ["team_filters"],
+        "properties": {
+          "apiVersion": {
+            "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+            "type": "string"
+          },
+          "kind": {
+            "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+            "type": "string"
+          },
+          "team_filters": {
+            "type": "object",
+            "additionalProperties": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            }
+          }
+        }
+      },
+      "GetTeamLBACUsageResponse": {
+        "type": "object",
+        "required": ["counts"],
+        "properties": {
+          "counts": {
+            "type": "object",
+            "additionalProperties": {}
+          }
+        }
+      },
+      "GetTeamLBACUsageV0alpha1ResponseCounts": {
+        "type": "object",
+        "required": ["datasources", "teams", "filters"],
+        "properties": {
+          "datasources": {
+            "type": "integer",
+            "format": "int64",
+            "default": 0
+          },
+          "filters": {
+            "type": "integer",
+            "format": "int64",
+            "default": 0
+          },
+          "teams": {
+            "type": "integer",
+            "format": "int64",
+            "default": 0
+          }
+        }
+      },
       "GetTeamMembersBody": {
         "type": "object",
         "required": ["items"],
         "properties": {
           "items": {
             "type": "array",
-            "items": {
-              "default": {}
-            }
+            "items": {}
           }
         }
       },
@@ -3367,9 +4584,7 @@
           },
           "items": {
             "type": "array",
-            "items": {
-              "default": {}
-            }
+            "items": {}
           },
           "kind": {
             "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
@@ -3405,9 +4620,7 @@
         "properties": {
           "items": {
             "type": "array",
-            "items": {
-              "default": {}
-            }
+            "items": {}
           }
         }
       },
@@ -3421,9 +4634,7 @@
           },
           "items": {
             "type": "array",
-            "items": {
-              "default": {}
-            }
+            "items": {}
           },
           "kind": {
             "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
@@ -3450,6 +4661,11 @@
             "type": "string",
             "default": ""
           },
+          "teamInternalId": {
+            "description": "Deprecated numeric team ID, when available, for legacy references.",
+            "type": "integer",
+            "format": "int64"
+          },
           "user": {
             "type": "string",
             "default": ""
@@ -3508,9 +4724,7 @@
           },
           "items": {
             "type": "array",
-            "items": {
-              "default": {}
-            }
+            "items": {}
           },
           "kind": {
             "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
@@ -3527,9 +4741,7 @@
         "properties": {
           "roleRefs": {
             "type": "array",
-            "items": {
-              "default": {}
-            }
+            "items": {}
           },
           "subject": {
             "default": {}
@@ -3578,9 +4790,7 @@
           },
           "items": {
             "type": "array",
-            "items": {
-              "default": {}
-            }
+            "items": {}
           },
           "kind": {
             "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
@@ -3606,9 +4816,7 @@
           "permissions": {
             "description": "Permissions for this role",
             "type": "array",
-            "items": {
-              "default": {}
-            }
+            "items": {}
           },
           "title": {
             "description": "Display name of the role",
@@ -3643,9 +4851,7 @@
           },
           "items": {
             "type": "array",
-            "items": {
-              "default": {}
-            }
+            "items": {}
           }
         }
       },
@@ -3664,12 +4870,7 @@
           "items": {
             "type": "array",
             "items": {
-              "default": {},
-              "allOf": [
-                {
-                  "$ref": "#/components/schemas/ListServiceAccountTokensToken"
-                }
-              ]
+              "$ref": "#/components/schemas/ListServiceAccountTokensToken"
             }
           },
           "kind": {
@@ -3750,9 +4951,7 @@
           },
           "items": {
             "type": "array",
-            "items": {
-              "default": {}
-            }
+            "items": {}
           },
           "kind": {
             "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
@@ -3769,9 +4968,7 @@
         "properties": {
           "permissions": {
             "type": "array",
-            "items": {
-              "default": {}
-            }
+            "items": {}
           },
           "resource": {
             "default": {}
@@ -3872,9 +5069,7 @@
           },
           "items": {
             "type": "array",
-            "items": {
-              "default": {}
-            }
+            "items": {}
           },
           "kind": {
             "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
@@ -3891,9 +5086,7 @@
         "properties": {
           "roleRefs": {
             "type": "array",
-            "items": {
-              "default": {}
-            }
+            "items": {}
           },
           "subject": {
             "default": {}
@@ -3942,9 +5135,7 @@
           },
           "items": {
             "type": "array",
-            "items": {
-              "default": {}
-            }
+            "items": {}
           },
           "kind": {
             "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
@@ -3970,23 +5161,17 @@
           "permissions": {
             "description": "Added permissions (permissions in actual role but NOT in seed) - for basic roles only. For custom roles, this contains all permissions.",
             "type": "array",
-            "items": {
-              "default": {}
-            }
+            "items": {}
           },
           "permissionsOmitted": {
             "description": "Permissions that exist in seed but NOT in actual role (missing/omitted permissions) - used for basic roles only",
             "type": "array",
-            "items": {
-              "default": {}
-            }
+            "items": {}
           },
           "roleRefs": {
             "description": "Roles to take permissions from (for now the list should be of size 1) delegatable?: bool created? updated?",
             "type": "array",
-            "items": {
-              "default": {}
-            }
+            "items": {}
           },
           "title": {
             "description": "Display name of the role",
@@ -4076,12 +5261,7 @@
           "items": {
             "type": "array",
             "items": {
-              "default": {},
-              "allOf": [
-                {
-                  "$ref": "#/components/schemas/ServiceAccount"
-                }
-              ]
+              "$ref": "#/components/schemas/ServiceAccount"
             }
           },
           "kind": {
@@ -4196,9 +5376,7 @@
           },
           "items": {
             "type": "array",
-            "items": {
-              "default": {}
-            }
+            "items": {}
           },
           "kind": {
             "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
@@ -4259,7 +5437,7 @@
       },
       "TeamLBACRule": {
         "type": "object",
-        "required": ["metadata", "spec"],
+        "required": ["metadata", "spec", "status"],
         "properties": {
           "apiVersion": {
             "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
@@ -4269,12 +5447,59 @@
             "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
             "type": "string"
           },
-          "metadata": {
-            "default": {}
+          "metadata": {
+            "default": {},
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/ObjectMeta"
+              }
+            ]
+          },
+          "spec": {
+            "description": "Spec is the spec of the TeamLBACRule",
+            "default": {},
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/TeamLBACRuleSpec"
+              }
+            ]
+          },
+          "status": {
+            "default": {},
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/TeamLBACRuleStatus"
+              }
+            ]
+          }
+        },
+        "x-kubernetes-group-version-kind": [
+          {
+            "group": "iam.grafana.app",
+            "kind": "TeamLBACRule",
+            "version": "v0alpha1"
+          }
+        ]
+      },
+      "TeamLBACRuleCondition": {
+        "description": "Condition is a minimal Kubernetes-style condition for dynamically computed Team LBAC status.",
+        "type": "object",
+        "required": ["type", "status", "reason"],
+        "properties": {
+          "reason": {
+            "description": "reason is a stable, machine-readable explanation for the current status. It is intentionally open-ended so clients tolerate reasons added later.",
+            "type": "string",
+            "default": ""
+          },
+          "status": {
+            "description": "status is True when the rule is enforceable, False when it is dormant, and Unknown when enforceability could not be determined.",
+            "type": "string",
+            "default": ""
           },
-          "spec": {
-            "description": "Spec is the spec of the TeamLBACRule",
-            "default": {}
+          "type": {
+            "description": "type identifies the condition. Enforceable is the only type currently defined for TeamLBACRule.",
+            "type": "string",
+            "default": ""
           }
         }
       },
@@ -4289,7 +5514,7 @@
           "items": {
             "type": "array",
             "items": {
-              "default": {}
+              "$ref": "#/components/schemas/TeamLBACRule"
             }
           },
           "kind": {
@@ -4297,9 +5522,21 @@
             "type": "string"
           },
           "metadata": {
-            "default": {}
+            "default": {},
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/ListMeta"
+              }
+            ]
           }
-        }
+        },
+        "x-kubernetes-group-version-kind": [
+          {
+            "group": "iam.grafana.app",
+            "kind": "TeamLBACRuleList",
+            "version": "v0alpha1"
+          }
+        ]
       },
       "TeamLBACRuleSpec": {
         "type": "object",
@@ -4321,13 +5558,26 @@
             "additionalProperties": {
               "type": "array",
               "items": {
-                "type": "string",
-                "default": ""
+                "type": "string"
               }
             }
           }
         }
       },
+      "TeamLBACRuleStatus": {
+        "type": "object",
+        "properties": {
+          "conditions": {
+            "description": "conditions contains system-owned observations about the rule. The Enforceable condition is the only condition currently defined.",
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/TeamLBACRuleCondition"
+            },
+            "x-kubernetes-list-map-keys": ["type"],
+            "x-kubernetes-list-type": "map"
+          }
+        }
+      },
       "TeamList": {
         "type": "object",
         "required": ["metadata", "items"],
@@ -4339,12 +5589,7 @@
           "items": {
             "type": "array",
             "items": {
-              "default": {},
-              "allOf": [
-                {
-                  "$ref": "#/components/schemas/Team"
-                }
-              ]
+              "$ref": "#/components/schemas/Team"
             }
           },
           "kind": {
@@ -4379,8 +5624,7 @@
           "externalGroups": {
             "type": "array",
             "items": {
-              "type": "string",
-              "default": ""
+              "type": "string"
             }
           },
           "externalUID": {
@@ -4390,12 +5634,7 @@
           "members": {
             "type": "array",
             "items": {
-              "default": {},
-              "allOf": [
-                {
-                  "$ref": "#/components/schemas/TeamTeamMember"
-                }
-              ]
+              "$ref": "#/components/schemas/TeamTeamMember"
             }
           },
           "provisioned": {
@@ -4508,114 +5747,306 @@
           "items": {
             "type": "array",
             "items": {
-              "default": {},
+              "$ref": "#/components/schemas/User"
+            }
+          },
+          "kind": {
+            "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+            "type": "string"
+          },
+          "metadata": {
+            "default": {},
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/ListMeta"
+              }
+            ]
+          }
+        },
+        "x-kubernetes-group-version-kind": [
+          {
+            "group": "iam.grafana.app",
+            "kind": "UserList",
+            "version": "v0alpha1"
+          }
+        ]
+      },
+      "UserSpec": {
+        "type": "object",
+        "required": ["disabled", "email", "emailVerified", "grafanaAdmin", "login", "title", "provisioned", "role"],
+        "properties": {
+          "disabled": {
+            "type": "boolean",
+            "default": false
+          },
+          "email": {
+            "type": "string",
+            "default": ""
+          },
+          "emailVerified": {
+            "type": "boolean",
+            "default": false
+          },
+          "externalAuthInfo": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/UserExternalAuthInfo"
+            }
+          },
+          "grafanaAdmin": {
+            "type": "boolean",
+            "default": false
+          },
+          "login": {
+            "type": "string",
+            "default": ""
+          },
+          "provisioned": {
+            "type": "boolean",
+            "default": false
+          },
+          "role": {
+            "type": "string",
+            "default": ""
+          },
+          "title": {
+            "type": "string",
+            "default": ""
+          }
+        }
+      },
+      "UserStatus": {
+        "type": "object",
+        "required": ["lastSeenAt"],
+        "properties": {
+          "lastSeenAt": {
+            "type": "integer",
+            "format": "int64",
+            "default": 0
+          },
+          "teamSync": {
+            "$ref": "#/components/schemas/UserTeamSyncStatus"
+          }
+        }
+      },
+      "UserTeamSyncStatus": {
+        "type": "object",
+        "required": ["state", "lastSyncAt"],
+        "properties": {
+          "lastSyncAt": {
+            "type": "integer",
+            "format": "int64",
+            "default": 0
+          },
+          "state": {
+            "type": "string",
+            "default": ""
+          }
+        }
+      },
+      "Unstructured": {
+        "type": "object",
+        "additionalProperties": true,
+        "x-kubernetes-preserve-unknown-fields": true
+      },
+      "CurrentUserInfo": {
+        "type": "object",
+        "required": ["identity", "displayName"],
+        "properties": {
+          "authenticatedBy": {
+            "description": "AuthenticatedBy is the authentication provider used for the current identity.",
+            "type": "string"
+          },
+          "avatarURL": {
+            "description": "AvatarURL is the url where we can get the avatar for identity",
+            "type": "string"
+          },
+          "displayName": {
+            "description": "Display name for identity.",
+            "type": "string",
+            "default": ""
+          },
+          "email": {
+            "description": "Email is the email address for the current identity.",
+            "type": "string"
+          },
+          "identity": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/IdentityRef"
+              }
+            ]
+          },
+          "internalId": {
+            "description": "InternalID is the legacy numeric id for identity, Deprecated: use the identityRef where possible",
+            "type": "integer",
+            "format": "int64"
+          },
+          "namespace": {
+            "description": "Namespace is the namespace of the current identity.",
+            "type": "string"
+          },
+          "role": {
+            "description": "Role is the org role of the identity in the active organization (Admin/Editor/Viewer/None).",
+            "type": "string"
+          },
+          "teams": {
+            "description": "The user teams",
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          }
+        }
+      },
+      "Display": {
+        "type": "object",
+        "required": ["identity", "displayName"],
+        "properties": {
+          "avatarURL": {
+            "description": "AvatarURL is the url where we can get the avatar for identity",
+            "type": "string"
+          },
+          "displayName": {
+            "description": "Display name for identity.",
+            "type": "string",
+            "default": ""
+          },
+          "identity": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/IdentityRef"
+              }
+            ]
+          },
+          "internalId": {
+            "description": "InternalID is the legacy numeric id for identity, Deprecated: use the identityRef where possible",
+            "type": "integer",
+            "format": "int64"
+          }
+        }
+      },
+      "DisplayList": {
+        "type": "object",
+        "required": ["keys", "display"],
+        "properties": {
+          "apiVersion": {
+            "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+            "type": "string"
+          },
+          "display": {
+            "description": "Matching items (the caller may need to remap from keys to results)",
+            "type": "array",
+            "items": {
               "allOf": [
                 {
-                  "$ref": "#/components/schemas/User"
+                  "$ref": "#/components/schemas/Display"
                 }
               ]
-            }
+            },
+            "x-kubernetes-list-type": "atomic"
+          },
+          "invalidKeys": {
+            "description": "Input keys that were not useable",
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "x-kubernetes-list-type": "set"
+          },
+          "keys": {
+            "description": "Request keys used to lookup the display value",
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "x-kubernetes-list-type": "set"
           },
           "kind": {
             "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
             "type": "string"
           },
           "metadata": {
-            "default": {},
             "allOf": [
               {
                 "$ref": "#/components/schemas/ListMeta"
               }
             ]
           }
-        },
-        "x-kubernetes-group-version-kind": [
-          {
-            "group": "iam.grafana.app",
-            "kind": "UserList",
-            "version": "v0alpha1"
-          }
-        ]
+        }
       },
-      "UserSpec": {
+      "IdentityRef": {
         "type": "object",
-        "required": ["disabled", "email", "emailVerified", "grafanaAdmin", "login", "title", "provisioned", "role"],
+        "required": ["type", "name"],
         "properties": {
-          "disabled": {
-            "type": "boolean",
-            "default": false
-          },
-          "email": {
+          "name": {
+            "description": "Name is the unique identifier for identity, guaranteed to be a unique value for the type within a namespace.",
             "type": "string",
             "default": ""
           },
-          "emailVerified": {
-            "type": "boolean",
-            "default": false
-          },
-          "externalAuthInfo": {
-            "type": "array",
-            "items": {
-              "default": {},
-              "allOf": [
-                {
-                  "$ref": "#/components/schemas/UserExternalAuthInfo"
-                }
-              ]
-            }
-          },
-          "grafanaAdmin": {
-            "type": "boolean",
-            "default": false
-          },
-          "login": {
+          "type": {
+            "description": "Type of identity e.g. \"user\". For a full list see https://github.com/grafana/authlib/blob/d6737a7dc8f55e9d42834adb83b5da607ceed293/types/type.go#L15",
             "type": "string",
             "default": ""
+          }
+        }
+      },
+      "SSOSetting": {
+        "type": "object",
+        "properties": {
+          "apiVersion": {
+            "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+            "type": "string"
           },
-          "provisioned": {
-            "type": "boolean",
-            "default": false
+          "kind": {
+            "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+            "type": "string"
           },
-          "role": {
-            "type": "string",
-            "default": ""
+          "metadata": {
+            "description": "Standard object's metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
+            "default": {}
           },
-          "title": {
-            "type": "string",
-            "default": ""
+          "spec": {
+            "default": {}
           }
         }
       },
-      "UserStatus": {
+      "SSOSettingList": {
         "type": "object",
-        "required": ["lastSeenAt"],
+        "required": ["items"],
         "properties": {
-          "lastSeenAt": {
-            "type": "integer",
-            "format": "int64",
-            "default": 0
+          "apiVersion": {
+            "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+            "type": "string"
           },
-          "teamSync": {
-            "$ref": "#/components/schemas/UserTeamSyncStatus"
+          "items": {
+            "type": "array",
+            "items": {}
+          },
+          "kind": {
+            "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+            "type": "string"
+          },
+          "metadata": {
+            "default": {}
           }
         }
       },
-      "UserTeamSyncStatus": {
+      "SSOSettingSpec": {
+        "description": "SSOSettingSpec defines model for SSOSettingSpec.",
         "type": "object",
-        "required": ["state", "lastSyncAt"],
+        "required": ["source", "settings"],
         "properties": {
-          "lastSyncAt": {
-            "type": "integer",
-            "format": "int64",
-            "default": 0
-          },
-          "state": {
+          "settings": {},
+          "source": {
+            "description": "Possible enum values:\n - `\"db\"`\n - `\"system\"` system is from config file, env or argument",
             "type": "string",
-            "default": ""
+            "default": "",
+            "enum": ["db", "system"]
           }
         }
       },
-      "Display": {
+      "TeamMember": {
         "type": "object",
         "required": ["identity", "displayName"],
         "properties": {
@@ -4628,196 +6059,371 @@
             "type": "string",
             "default": ""
           },
+          "external": {
+            "description": "External is set if member ship was synced from external IDP.",
+            "type": "boolean"
+          },
           "identity": {
-            "allOf": [
-              {
-                "$ref": "#/components/schemas/IdentityRef"
-              }
-            ]
+            "default": {}
           },
           "internalId": {
             "description": "InternalID is the legacy numeric id for identity, Deprecated: use the identityRef where possible",
             "type": "integer",
             "format": "int64"
           },
-          "role": {
-            "description": "Role is the org role of the identity in the active organization (Admin/Editor/Viewer/None). Only populated for the current-user (\"users/~\") endpoint.",
-            "type": "string"
+          "permission": {
+            "description": "Permission member has in team.\n\nPossible enum values:\n - `\"admin\"`\n - `\"member\"`",
+            "type": "string",
+            "enum": ["admin", "member"]
           }
         }
       },
-      "DisplayList": {
+      "TeamMemberList": {
         "type": "object",
-        "required": ["keys", "display"],
+        "required": ["items"],
         "properties": {
           "apiVersion": {
             "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
             "type": "string"
           },
-          "display": {
-            "description": "Matching items (the caller may need to remap from keys to results)",
+          "items": {
+            "type": "array",
+            "items": {}
+          },
+          "kind": {
+            "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+            "type": "string"
+          },
+          "metadata": {
+            "default": {}
+          }
+        }
+      },
+      "TeamRef": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "description": "Name is the unique identifier for a team.",
+            "type": "string"
+          }
+        }
+      },
+      "TeamSubject": {
+        "type": "object",
+        "required": ["identity"],
+        "properties": {
+          "identity": {
+            "description": "Identity is a reference to the identity of this subject.",
+            "default": {}
+          },
+          "permission": {
+            "description": "Permission subject has in team.\n\nPossible enum values:\n - `\"admin\"`\n - `\"member\"`",
+            "type": "string",
+            "enum": ["admin", "member"]
+          }
+        }
+      },
+      "UserPermission": {
+        "description": "UserPermission is one effective action and scope granted to an identity.",
+        "type": "object",
+        "required": ["action"],
+        "properties": {
+          "action": {
+            "type": "string",
+            "default": ""
+          },
+          "scope": {
+            "type": "string"
+          }
+        }
+      },
+      "UserPermissions": {
+        "description": "UserPermissions contains the effective permissions for the current identity.",
+        "type": "object",
+        "required": ["permissions"],
+        "properties": {
+          "permissions": {
             "type": "array",
             "items": {
-              "allOf": [
-                {
-                  "$ref": "#/components/schemas/Display"
-                }
-              ]
+              "$ref": "#/components/schemas/UserPermission"
             },
             "x-kubernetes-list-type": "atomic"
+          }
+        }
+      },
+      "UserTeam": {
+        "type": "object",
+        "properties": {
+          "permission": {
+            "description": "Possible enum values:\n - `\"admin\"`\n - `\"member\"`",
+            "type": "string",
+            "enum": ["admin", "member"]
           },
-          "invalidKeys": {
-            "description": "Input keys that were not useable",
+          "teamRef": {
+            "default": {}
+          },
+          "title": {
+            "type": "string"
+          }
+        }
+      },
+      "UserTeamList": {
+        "type": "object",
+        "required": ["items"],
+        "properties": {
+          "apiVersion": {
+            "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
+            "type": "string"
+          },
+          "items": {
             "type": "array",
-            "items": {
-              "type": "string",
-              "default": ""
-            },
-            "x-kubernetes-list-type": "set"
+            "items": {}
+          },
+          "kind": {
+            "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+            "type": "string"
+          },
+          "metadata": {
+            "default": {}
+          }
+        }
+      },
+      "ExistsPredicate": {
+        "description": "ExistsPredicate is a future field-existence predicate. Modelled for schema stability; always rejected in v1.",
+        "type": "object",
+        "required": ["field"],
+        "properties": {
+          "field": {
+            "type": "string",
+            "default": ""
+          }
+        }
+      },
+      "FacetTerm": {
+        "description": "FacetTerm is a single facet term and its count.",
+        "type": "object",
+        "required": ["value", "count"],
+        "properties": {
+          "count": {
+            "type": "integer",
+            "format": "int64",
+            "default": 0
+          },
+          "value": {
+            "type": "string",
+            "default": ""
+          }
+        }
+      },
+      "FilterPredicate": {
+        "description": "FilterPredicate is an exact / set-based predicate against a single field. Values are strings whatever the field's declared type, so a boolean field takes \"true\" or \"false\" and a numeric field takes the number written out.\n\nNumbers are held as float64, so only integers up to 2^53 are compared exactly. Past that, values a whole number apart share one representation, and a filter can both match a neighbour and miss the value asked for.",
+        "type": "object",
+        "required": ["field", "operator", "values"],
+        "properties": {
+          "field": {
+            "type": "string",
+            "default": ""
           },
-          "keys": {
-            "description": "Request keys used to lookup the display value",
+          "operator": {
+            "description": "Operator is \"In\", \"NotIn\" or \"All\" in v1. \"In\" matches any of the values, \"NotIn\" excludes all of them, and \"All\" requires the field to hold every value, which only a field holding a list of values can do.",
+            "type": "string",
+            "default": ""
+          },
+          "values": {
             "type": "array",
             "items": {
-              "type": "string",
-              "default": ""
-            },
-            "x-kubernetes-list-type": "set"
+              "type": "string"
+            }
+          }
+        }
+      },
+      "RangePredicate": {
+        "description": "RangePredicate compares a numeric field against one or two bounds. At least one bound is required, gt cannot be combined with gte, and lt cannot be combined with lte. Boolean and string fields are rejected: only numbers have the order a range asks about. On an integer field a bound must be whole.\n\nBounds are held as float64, so only integers up to 2^53 are compared exactly. Past that, values a whole number apart share one representation, and a bound can both admit a neighbour and exclude the value asked for.",
+        "type": "object",
+        "required": ["field"],
+        "properties": {
+          "field": {
+            "type": "string",
+            "default": ""
           },
-          "kind": {
-            "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
-            "type": "string"
+          "gt": {
+            "type": "number",
+            "format": "double"
           },
-          "metadata": {
-            "allOf": [
-              {
-                "$ref": "#/components/schemas/ListMeta"
-              }
-            ]
+          "gte": {
+            "type": "number",
+            "format": "double"
+          },
+          "lt": {
+            "type": "number",
+            "format": "double"
+          },
+          "lte": {
+            "type": "number",
+            "format": "double"
           }
         }
       },
-      "IdentityRef": {
+      "RegexPredicate": {
+        "description": "RegexPredicate matches a single field against a regular expression, one pattern per leaf the way a single Prometheus matcher works. Negate turns the leaf from =~ into !~.\n\nMatching is against the whole indexed term and is case-sensitive, so it is restricted to filterable keyword string fields that keep their original case. The pattern is a portable RE2 subset: literals, character classes, grouping, alternation, and greedy repetition. The backend is the source of truth for what the subset admits; it rejects unsupported syntax, fields that do not preserve case, and patterns that expand to too many terms with a 400.",
         "type": "object",
-        "required": ["type", "name"],
+        "required": ["field", "pattern"],
         "properties": {
-          "name": {
-            "description": "Name is the unique identifier for identity, guaranteed to be a unique value for the type within a namespace.",
+          "field": {
             "type": "string",
             "default": ""
           },
-          "type": {
-            "description": "Type of identity e.g. \"user\". For a full list see https://github.com/grafana/authlib/blob/d6737a7dc8f55e9d42834adb83b5da607ceed293/types/type.go#L15",
+          "negate": {
+            "description": "Negate inverts the match: the field must not match the pattern.",
+            "type": "boolean"
+          },
+          "pattern": {
             "type": "string",
             "default": ""
           }
         }
       },
-      "SSOSetting": {
+      "ResourceRef": {
+        "description": "ResourceRef is the full identity of a returned item. Namespace is implicit from the URL and omitted.",
         "type": "object",
+        "required": ["group", "resource", "kind", "name"],
         "properties": {
-          "apiVersion": {
-            "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
-            "type": "string"
+          "group": {
+            "type": "string",
+            "default": ""
           },
           "kind": {
-            "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
-            "type": "string"
+            "type": "string",
+            "default": ""
           },
-          "metadata": {
-            "description": "Standard object's metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata",
-            "default": {}
+          "name": {
+            "type": "string",
+            "default": ""
           },
-          "spec": {
-            "default": {}
+          "resource": {
+            "type": "string",
+            "default": ""
           }
         }
       },
-      "SSOSettingList": {
+      "ResultItem": {
+        "description": "ResultItem is one search or trash hit. The item shape is identical on both endpoints; only which fields the Fields map can carry differs.",
         "type": "object",
-        "required": ["items"],
+        "required": ["resource"],
         "properties": {
-          "apiVersion": {
-            "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
-            "type": "string"
-          },
-          "items": {
-            "type": "array",
-            "items": {
-              "default": {}
-            }
+          "fields": {
+            "description": "Fields holds the JSON values for the requested (or default) fields. Array-typed fields are returned as JSON arrays. Absent fields are omitted.",
+            "$ref": "#/components/schemas/Unstructured"
           },
-          "kind": {
-            "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
-            "type": "string"
+          "resource": {
+            "default": {},
+            "$ref": "#/components/schemas/ResourceRef"
           },
-          "metadata": {
-            "default": {}
+          "score": {
+            "description": "Score is present only when a text query was evaluated. A pointer so a real score of 0 is still distinguishable from \"no text query\" (absent).",
+            "type": "number",
+            "format": "double"
           }
         }
       },
-      "SSOSettingSpec": {
-        "description": "SSOSettingSpec defines model for SSOSettingSpec.",
+      "ResultsMetadata": {
+        "description": "ResultsMetadata carries the pagination token and the total hit count.",
         "type": "object",
-        "required": ["source", "settings"],
+        "required": ["totalHits", "totalHitsRelation"],
         "properties": {
-          "settings": {},
-          "source": {
-            "description": "Possible enum values:\n - `\"db\"`\n - `\"system\"` system is from config file, env or argument",
+          "continue": {
+            "type": "string"
+          },
+          "totalHits": {
+            "description": "TotalHits counts the resources matching the query. Always read it together with TotalHitsRelation. When the relation is \"unknown\", this is a zero placeholder that must not be interpreted as a count.",
+            "type": "integer",
+            "format": "int64",
+            "default": 0
+          },
+          "totalHitsRelation": {
+            "description": "TotalHitsRelation is \"eq\" when TotalHits is exact and \"lte\" when it is an upper bound. \"unknown\" means no count is available and TotalHits must be ignored.",
             "type": "string",
-            "default": "",
-            "enum": ["db", "system"]
+            "default": ""
           }
         }
       },
-      "TeamMember": {
+      "SearchQuery": {
+        "description": "SearchQuery is the request body for POST .../{resource}/search, which searches one kind, and for POST .../namespaces/{namespace}/global/search, which searches several resource types at once.",
         "type": "object",
-        "required": ["identity", "displayName"],
         "properties": {
-          "avatarURL": {
-            "description": "AvatarURL is the url where we can get the avatar for identity",
+          "apiVersion": {
+            "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
             "type": "string"
           },
-          "displayName": {
-            "description": "Display name for identity.",
-            "type": "string",
-            "default": ""
+          "continue": {
+            "description": "Continue is an opaque pagination token from a previous page.",
+            "type": "string"
           },
-          "external": {
-            "description": "External is set if member ship was synced from external IDP.",
-            "type": "boolean"
+          "facetLimit": {
+            "description": "FacetLimit caps the number of terms returned per facet. It applies to every entry in Facets. Zero uses the server default; values above the server cap are clamped.",
+            "type": "integer",
+            "format": "int64"
           },
-          "identity": {
-            "default": {}
+          "facets": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
           },
-          "internalId": {
-            "description": "InternalID is the legacy numeric id for identity, Deprecated: use the identityRef where possible",
+          "fields": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "kind": {
+            "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
+            "type": "string"
+          },
+          "labelSelector": {
+            "description": "LabelSelector filters on metadata.labels, ANDed with Where.",
+            "$ref": "#/components/schemas/LabelSelector"
+          },
+          "limit": {
+            "description": "Limit is the page size. Zero uses the default; values above the maximum are clamped.",
             "type": "integer",
             "format": "int64"
           },
-          "permission": {
-            "description": "Permission member has in team.\n\nPossible enum values:\n - `\"admin\"`\n - `\"member\"`",
-            "type": "string",
-            "enum": ["admin", "member"]
+          "sort": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/SortField"
+            }
           },
-          "role": {
-            "description": "Role is the org role of the identity in the active organization (Admin/Editor/Viewer/None). Only populated for the current-user (\"users/~\") endpoint.",
-            "type": "string"
+          "where": {
+            "description": "Where is the search predicate tree. Omitting it matches everything the endpoint searches: all resources of the kind, or of every type the global search covers (subject to labelSelector and per-item authz).",
+            "$ref": "#/components/schemas/WhereNode"
           }
         }
       },
-      "TeamMemberList": {
+      "SearchResults": {
+        "description": "SearchResults is the response body for POST .../{resource}/search.",
         "type": "object",
-        "required": ["items"],
+        "required": ["metadata", "items"],
         "properties": {
           "apiVersion": {
             "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
             "type": "string"
           },
+          "facets": {
+            "description": "Facets holds term counts per requested facet field. Counts are computed over a bounded sample window, so they are best-effort/approximate.",
+            "type": "object",
+            "additionalProperties": {
+              "type": "array",
+              "items": {
+                "$ref": "#/components/schemas/FacetTerm"
+              }
+            }
+          },
           "items": {
             "type": "array",
             "items": {
-              "default": {}
+              "$ref": "#/components/schemas/ResultItem"
             }
           },
           "kind": {
@@ -4825,70 +6431,82 @@
             "type": "string"
           },
           "metadata": {
-            "default": {}
+            "default": {},
+            "$ref": "#/components/schemas/ResultsMetadata"
           }
         }
       },
-      "TeamRef": {
+      "SortField": {
+        "description": "SortField names a field to sort by and a direction (\"asc\" or \"desc\"). V1 allows sorting only on scalar string and numeric fields that declare the sort capability.",
         "type": "object",
+        "required": ["field"],
         "properties": {
-          "name": {
-            "description": "Name is the unique identifier for a team.",
+          "direction": {
             "type": "string"
-          }
-        }
-      },
-      "TeamSubject": {
-        "type": "object",
-        "required": ["identity"],
-        "properties": {
-          "identity": {
-            "description": "Identity is a reference to the identity of this subject.",
-            "default": {}
           },
-          "permission": {
-            "description": "Permission subject has in team.\n\nPossible enum values:\n - `\"admin\"`\n - `\"member\"`",
+          "field": {
             "type": "string",
-            "enum": ["admin", "member"]
+            "default": ""
           }
         }
       },
-      "UserTeam": {
+      "TextPredicate": {
+        "description": "TextPredicate is a free-text predicate against one or more text-capable fields. When Fields is empty it defaults to the kind's searchTextFields (currently [\"title\"]).",
         "type": "object",
+        "required": ["value"],
         "properties": {
-          "permission": {
-            "description": "Possible enum values:\n - `\"admin\"`\n - `\"member\"`",
-            "type": "string",
-            "enum": ["admin", "member"]
+          "boost": {
+            "description": "Boost is a future per-leaf score multiplier. Setting it is rejected in v1.",
+            "type": "number",
+            "format": "double"
           },
-          "teamRef": {
-            "default": {}
+          "fields": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
           },
-          "title": {
-            "type": "string"
+          "value": {
+            "type": "string",
+            "default": ""
           }
         }
       },
-      "UserTeamList": {
+      "WhereNode": {
+        "description": "WhereNode is a single node of the where tree. Exactly one field must be set; the set field names the node's type. Combinators (and/or/not) compose other nodes, leaves (text/filter/range/regex/exists) are terminal predicates.\n\nAll node types are modelled so the schema is future-proof, but v1 only accepts a narrow subset (top-level single leaf or a single and of leaves; text, filter, range and regex leaves; In/NotIn/All filter operators). Everything else is rejected with 422 Unprocessable Entity by the validation layer. exists is sketched for a future version and always rejected today.",
         "type": "object",
-        "required": ["items"],
         "properties": {
-          "apiVersion": {
-            "description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
-            "type": "string"
+          "and": {
+            "description": "Combinators.",
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/WhereNode"
+            }
           },
-          "items": {
+          "exists": {
+            "$ref": "#/components/schemas/ExistsPredicate"
+          },
+          "filter": {
+            "$ref": "#/components/schemas/FilterPredicate"
+          },
+          "not": {
+            "$ref": "#/components/schemas/WhereNode"
+          },
+          "or": {
             "type": "array",
             "items": {
-              "default": {}
+              "$ref": "#/components/schemas/WhereNode"
             }
           },
-          "kind": {
-            "description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
-            "type": "string"
+          "range": {
+            "$ref": "#/components/schemas/RangePredicate"
           },
-          "metadata": {
-            "default": {}
+          "regex": {
+            "$ref": "#/components/schemas/RegexPredicate"
+          },
+          "text": {
+            "description": "Leaves.",
+            "$ref": "#/components/schemas/TextPredicate"
           }
         }
       },
@@ -4922,9 +6540,7 @@
           },
           "permissions": {
             "type": "array",
-            "items": {
-              "default": {}
-            }
+            "items": {}
           }
         }
       },
@@ -4962,10 +6578,6 @@
             "description": "Permission member has in team.\n\nPossible enum values:\n - `\"admin\"`\n - `\"member\"`",
             "type": "string",
             "enum": ["admin", "member"]
-          },
-          "role": {
-            "description": "Role is the org role of the identity in the active organization (Admin/Editor/Viewer/None). Only populated for the current-user (\"users/~\") endpoint.",
-            "type": "string"
           }
         }
       },
@@ -4980,12 +6592,7 @@
           "items": {
             "type": "array",
             "items": {
-              "default": {},
-              "allOf": [
-                {
-                  "$ref": "#/components/schemas/github.com~1grafana~1grafana~1pkg~1apis~1iam~1v0alpha1.TeamMember"
-                }
-              ]
+              "$ref": "#/components/schemas/github.com~1grafana~1grafana~1pkg~1apis~1iam~1v0alpha1.TeamMember"
             }
           },
           "kind": {
@@ -5043,12 +6650,7 @@
           "items": {
             "type": "array",
             "items": {
-              "default": {},
-              "allOf": [
-                {
-                  "$ref": "#/components/schemas/github.com~1grafana~1grafana~1pkg~1apis~1iam~1v0alpha1.UserTeam"
-                }
-              ]
+              "$ref": "#/components/schemas/github.com~1grafana~1grafana~1pkg~1apis~1iam~1v0alpha1.UserTeam"
             }
           },
           "kind": {
@@ -5215,6 +6817,53 @@
         "description": "FieldsV1 stores a set of fields in a data structure like a Trie, in JSON format.\n\nEach key is either a '.' representing the field itself, and will always map to an empty set, or a string representing a sub-field or item. The string will follow one of these four formats: 'f:<name>', where <name> is the name of a field in a struct, or key in a map 'v:<value>', where <value> is the exact json formatted value of a list item 'i:<index>', where <index> is position of a item in a list 'k:<keys>', where <keys> is a map of  a list item's key fields to their unique values If a key maps to an empty Fields value, the field that key represents is part of the set.\n\nThe exact format is defined in sigs.k8s.io/structured-merge-diff",
         "type": "object"
       },
+      "LabelSelector": {
+        "description": "A label selector is a label query over a set of resources. The result of matchLabels and matchExpressions are ANDed. An empty label selector matches all objects. A null label selector matches no objects.",
+        "type": "object",
+        "properties": {
+          "matchExpressions": {
+            "description": "matchExpressions is a list of label selector requirements. The requirements are ANDed.",
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/LabelSelectorRequirement"
+            },
+            "x-kubernetes-list-type": "atomic"
+          },
+          "matchLabels": {
+            "description": "matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is \"key\", the operator is \"In\", and the values array contains only \"value\". The requirements are ANDed.",
+            "type": "object",
+            "additionalProperties": {
+              "type": "string"
+            }
+          }
+        },
+        "x-kubernetes-map-type": "atomic"
+      },
+      "LabelSelectorRequirement": {
+        "description": "A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.",
+        "type": "object",
+        "required": ["key", "operator"],
+        "properties": {
+          "key": {
+            "description": "key is the label key that the selector applies to.",
+            "type": "string",
+            "default": ""
+          },
+          "operator": {
+            "description": "operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.",
+            "type": "string",
+            "default": ""
+          },
+          "values": {
+            "description": "values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.",
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "x-kubernetes-list-type": "atomic"
+          }
+        }
+      },
       "ListMeta": {
         "description": "ListMeta describes metadata that synthetic resources must have, including lists and various status objects. A resource may have only one of {ObjectMeta, ListMeta}.",
         "type": "object",