Feat - add the new CR UpdateRequest for post mutation (#3592)

* add new CR UpdateRequest

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* add clienset for updaterequests

Signed-off-by: ShutingZhao <shuting@nirmata.com>

api/kyverno/v1beta1/groupversion_info.go

@@ -0,0 +1,46 @@
+/*
+Copyright 2022.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Package v1beta1 contains API Schema definitions for the kyverno.io v1beta1 API group
+//+kubebuilder:object:generate=true
+//+groupName=kyverno.io
+package v1beta1
+
+import (
+	"k8s.io/apimachinery/pkg/runtime/schema"
+	"sigs.k8s.io/controller-runtime/pkg/scheme"
+)
+
+var (
+	// GroupVersion is group version used to register these objects
+	GroupVersion = schema.GroupVersion{Group: "kyverno.io", Version: "v1beta1"}
+
+	// SchemeBuilder is used to add go types to the GroupVersionKind scheme
+	SchemeBuilder = &scheme.Builder{GroupVersion: GroupVersion}
+
+	// AddToScheme adds the types in this group-version to the given scheme.
+	AddToScheme = SchemeBuilder.AddToScheme
+)
+
+// Kind takes an unqualified kind and returns back a Group qualified GroupKind
+func Kind(kind string) schema.GroupKind {
+	return GroupVersion.WithKind(kind).GroupKind()
+}
+
+// Resource takes an unqualified resource and returns a Group qualified GroupResource
+func Resource(resource string) schema.GroupResource {
+	return GroupVersion.WithResource(resource).GroupResource()
+}

api/kyverno/v1beta1/updaterequest_types.go

@@ -0,0 +1,141 @@
+/*
+Copyright 2022.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package v1beta1
+
+import (
+	v1 "github.com/kyverno/kyverno/api/kyverno/v1"
+	admissionv1 "k8s.io/api/admission/v1"
+	authenticationv1 "k8s.io/api/authentication/v1"
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+)
+
+// EDIT THIS FILE!  THIS IS SCAFFOLDING FOR YOU TO OWN!
+// NOTE: json tags are required.  Any new fields you add must have json tags for the fields to be serialized.
+
+// UpdateRequestStatus defines the observed state of UpdateRequest
+type UpdateRequestStatus struct {
+
+	// State represents state of the generate request.
+	State UpdateRequestState `json:"state" yaml:"state"`
+
+	// Specifies request status message.
+	// +optional
+	Message string `json:"message,omitempty" yaml:"message,omitempty"`
+
+	// This will track the resources that are updated by the generate Policy.
+	// Will be used during clean up resources.
+	GeneratedResources []v1.ResourceSpec `json:"generatedResources,omitempty" yaml:"generatedResources,omitempty"`
+}
+
+// UpdateRequestStatus is a request to process mutate and generate rules in background.
+// +genclient
+// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
+// +kubebuilder:object:root=true
+// +kubebuilder:subresource:status
+// +kubebuilder:printcolumn:name="Policy",type="string",JSONPath=".spec.policy"
+// +kubebuilder:printcolumn:name="ResourceKind",type="string",JSONPath=".spec.resource.kind"
+// +kubebuilder:printcolumn:name="ResourceName",type="string",JSONPath=".spec.resource.name"
+// +kubebuilder:printcolumn:name="ResourceNamespace",type="string",JSONPath=".spec.resource.namespace"
+// +kubebuilder:printcolumn:name="status",type="string",JSONPath=".status.state"
+// +kubebuilder:printcolumn:name="Age",type="date",JSONPath=".metadata.creationTimestamp"
+// +kubebuilder:resource:shortName=gr
+type UpdateRequest struct {
+	metav1.TypeMeta   `json:",inline"`
+	metav1.ObjectMeta `json:"metadata,omitempty"`
+
+	// Spec is the information to identify the update request.
+	Spec UpdateRequestSpec `json:"spec,omitempty"`
+
+	// Status contains statistics related to update request.
+	// +optional
+	Status UpdateRequestStatus `json:"status,omitempty"`
+}
+
+// UpdateRequestSpec stores the request specification.
+type UpdateRequestSpec struct {
+	// Specifies the name of the policy.
+	Policy string `json:"policy" yaml:"policy"`
+
+	// ResourceSpec is the information to identify the update request.
+	Resource v1.ResourceSpec `json:"resource" yaml:"resource"`
+
+	// Context ...
+	Context UpdateRequestSpecContext `json:"context" yaml:"context"`
+}
+
+// UpdateRequestSpecContext stores the context to be shared.
+type UpdateRequestSpecContext struct {
+	// +optional
+	UserRequestInfo RequestInfo `json:"userInfo,omitempty" yaml:"userInfo,omitempty"`
+	// +optional
+	AdmissionRequestInfo AdmissionRequestInfoObject `json:"admissionRequestInfo,omitempty" yaml:"admissionRequestInfo,omitempty"`
+}
+
+// RequestInfo contains permission info carried in an admission request.
+type RequestInfo struct {
+	// Roles is a list of possible role send the request.
+	// +nullable
+	// +optional
+	Roles []string `json:"roles" yaml:"roles"`
+
+	// ClusterRoles is a list of possible clusterRoles send the request.
+	// +nullable
+	// +optional
+	ClusterRoles []string `json:"clusterRoles" yaml:"clusterRoles"`
+
+	// UserInfo is the userInfo carried in the admission request.
+	// +optional
+	AdmissionUserInfo authenticationv1.UserInfo `json:"userInfo" yaml:"userInfo"`
+}
+
+// AdmissionRequestInfoObject stores the admission request and operation details
+type AdmissionRequestInfoObject struct {
+	// +optional
+	AdmissionRequest string `json:"admissionRequest,omitempty" yaml:"admissionRequest,omitempty"`
+	// +optional
+	Operation admissionv1.Operation `json:"operation,omitempty" yaml:"operation,omitempty"`
+}
+
+// UpdateRequestState defines the state of request.
+type UpdateRequestState string
+
+const (
+	// Pending - the Request is yet to be processed or resource has not been created.
+	Pending UpdateRequestState = "Pending"
+
+	// Failed - the Generate Request Controller failed to process the rules.
+	Failed UpdateRequestState = "Failed"
+
+	// Completed - the Generate Request Controller created resources defined in the policy.
+	Completed UpdateRequestState = "Completed"
+
+	// Skip - the Generate Request Controller skips to generate the resource.
+	Skip UpdateRequestState = "Skip"
+)
+
+//+kubebuilder:object:root=true
+
+// UpdateRequestList contains a list of UpdateRequest
+type UpdateRequestList struct {
+	metav1.TypeMeta `json:",inline"`
+	metav1.ListMeta `json:"metadata,omitempty"`
+	Items           []UpdateRequest `json:"items"`
+}
+
+func init() {
+	SchemeBuilder.Register(&UpdateRequest{}, &UpdateRequestList{})
+}

api/kyverno/v1beta1/zz_generated.deepcopy.go

@@ -0,0 +1,179 @@
+//go:build !ignore_autogenerated
+// +build !ignore_autogenerated
+
+/*
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Code generated by controller-gen. DO NOT EDIT.
+
+package v1beta1
+
+import (
+	"github.com/kyverno/kyverno/api/kyverno/v1"
+	runtime "k8s.io/apimachinery/pkg/runtime"
+)
+
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *AdmissionRequestInfoObject) DeepCopyInto(out *AdmissionRequestInfoObject) {
+	*out = *in
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AdmissionRequestInfoObject.
+func (in *AdmissionRequestInfoObject) DeepCopy() *AdmissionRequestInfoObject {
+	if in == nil {
+		return nil
+	}
+	out := new(AdmissionRequestInfoObject)
+	in.DeepCopyInto(out)
+	return out
+}
+
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *RequestInfo) DeepCopyInto(out *RequestInfo) {
+	*out = *in
+	if in.Roles != nil {
+		in, out := &in.Roles, &out.Roles
+		*out = make([]string, len(*in))
+		copy(*out, *in)
+	}
+	if in.ClusterRoles != nil {
+		in, out := &in.ClusterRoles, &out.ClusterRoles
+		*out = make([]string, len(*in))
+		copy(*out, *in)
+	}
+	in.AdmissionUserInfo.DeepCopyInto(&out.AdmissionUserInfo)
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RequestInfo.
+func (in *RequestInfo) DeepCopy() *RequestInfo {
+	if in == nil {
+		return nil
+	}
+	out := new(RequestInfo)
+	in.DeepCopyInto(out)
+	return out
+}
+
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *UpdateRequest) DeepCopyInto(out *UpdateRequest) {
+	*out = *in
+	out.TypeMeta = in.TypeMeta
+	in.ObjectMeta.DeepCopyInto(&out.ObjectMeta)
+	in.Spec.DeepCopyInto(&out.Spec)
+	in.Status.DeepCopyInto(&out.Status)
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new UpdateRequest.
+func (in *UpdateRequest) DeepCopy() *UpdateRequest {
+	if in == nil {
+		return nil
+	}
+	out := new(UpdateRequest)
+	in.DeepCopyInto(out)
+	return out
+}
+
+// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
+func (in *UpdateRequest) DeepCopyObject() runtime.Object {
+	if c := in.DeepCopy(); c != nil {
+		return c
+	}
+	return nil
+}
+
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *UpdateRequestList) DeepCopyInto(out *UpdateRequestList) {
+	*out = *in
+	out.TypeMeta = in.TypeMeta
+	in.ListMeta.DeepCopyInto(&out.ListMeta)
+	if in.Items != nil {
+		in, out := &in.Items, &out.Items
+		*out = make([]UpdateRequest, len(*in))
+		for i := range *in {
+			(*in)[i].DeepCopyInto(&(*out)[i])
+		}
+	}
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new UpdateRequestList.
+func (in *UpdateRequestList) DeepCopy() *UpdateRequestList {
+	if in == nil {
+		return nil
+	}
+	out := new(UpdateRequestList)
+	in.DeepCopyInto(out)
+	return out
+}
+
+// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
+func (in *UpdateRequestList) DeepCopyObject() runtime.Object {
+	if c := in.DeepCopy(); c != nil {
+		return c
+	}
+	return nil
+}
+
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *UpdateRequestSpec) DeepCopyInto(out *UpdateRequestSpec) {
+	*out = *in
+	out.Resource = in.Resource
+	in.Context.DeepCopyInto(&out.Context)
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new UpdateRequestSpec.
+func (in *UpdateRequestSpec) DeepCopy() *UpdateRequestSpec {
+	if in == nil {
+		return nil
+	}
+	out := new(UpdateRequestSpec)
+	in.DeepCopyInto(out)
+	return out
+}
+
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *UpdateRequestSpecContext) DeepCopyInto(out *UpdateRequestSpecContext) {
+	*out = *in
+	in.UserRequestInfo.DeepCopyInto(&out.UserRequestInfo)
+	out.AdmissionRequestInfo = in.AdmissionRequestInfo
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new UpdateRequestSpecContext.
+func (in *UpdateRequestSpecContext) DeepCopy() *UpdateRequestSpecContext {
+	if in == nil {
+		return nil
+	}
+	out := new(UpdateRequestSpecContext)
+	in.DeepCopyInto(out)
+	return out
+}
+
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *UpdateRequestStatus) DeepCopyInto(out *UpdateRequestStatus) {
+	*out = *in
+	if in.GeneratedResources != nil {
+		in, out := &in.GeneratedResources, &out.GeneratedResources
+		*out = make([]v1.ResourceSpec, len(*in))
+		copy(*out, *in)
+	}
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new UpdateRequestStatus.
+func (in *UpdateRequestStatus) DeepCopy() *UpdateRequestStatus {
+	if in == nil {
+		return nil
+	}
+	out := new(UpdateRequestStatus)
+	in.DeepCopyInto(out)
+	return out
+}

pkg/client/clientset/versioned/clientset.go

@@ -23,6 +23,7 @@ import (
 
 	kyvernov1 "github.com/kyverno/kyverno/pkg/client/clientset/versioned/typed/kyverno/v1"
 	kyvernov1alpha2 "github.com/kyverno/kyverno/pkg/client/clientset/versioned/typed/kyverno/v1alpha2"
+	kyvernov1beta1 "github.com/kyverno/kyverno/pkg/client/clientset/versioned/typed/kyverno/v1beta1"
 	wgpolicyk8sv1alpha2 "github.com/kyverno/kyverno/pkg/client/clientset/versioned/typed/policyreport/v1alpha2"
 	discovery "k8s.io/client-go/discovery"
 	rest "k8s.io/client-go/rest"
@@ -32,6 +33,7 @@ import (
 type Interface interface {
 	Discovery() discovery.DiscoveryInterface
 	KyvernoV1() kyvernov1.KyvernoV1Interface
+	KyvernoV1beta1() kyvernov1beta1.KyvernoV1beta1Interface
 	KyvernoV1alpha2() kyvernov1alpha2.KyvernoV1alpha2Interface
 	Wgpolicyk8sV1alpha2() wgpolicyk8sv1alpha2.Wgpolicyk8sV1alpha2Interface
 }
@@ -41,6 +43,7 @@ type Interface interface {
 type Clientset struct {
 	*discovery.DiscoveryClient
 	kyvernoV1           *kyvernov1.KyvernoV1Client
+	kyvernoV1beta1      *kyvernov1beta1.KyvernoV1beta1Client
 	kyvernoV1alpha2     *kyvernov1alpha2.KyvernoV1alpha2Client
 	wgpolicyk8sV1alpha2 *wgpolicyk8sv1alpha2.Wgpolicyk8sV1alpha2Client
 }
@@ -50,6 +53,11 @@ func (c *Clientset) KyvernoV1() kyvernov1.KyvernoV1Interface {
 	return c.kyvernoV1
 }
 
+// KyvernoV1 retrieves the KyvernoV1Client
+func (c *Clientset) KyvernoV1beta1() kyvernov1beta1.KyvernoV1beta1Interface {
+	return c.KyvernoV1beta1()
+}
+
 // KyvernoV1alpha2 retrieves the KyvernoV1alpha2Client
 func (c *Clientset) KyvernoV1alpha2() kyvernov1alpha2.KyvernoV1alpha2Interface {
 	return c.kyvernoV1alpha2
@@ -85,6 +93,10 @@ func NewForConfig(c *rest.Config) (*Clientset, error) {
 	if err != nil {
 		return nil, err
 	}
+	cs.kyvernoV1beta1, err = kyvernov1beta1.NewForConfig(&configShallowCopy)
+	if err != nil {
+		return nil, err
+	}
 	cs.kyvernoV1alpha2, err = kyvernov1alpha2.NewForConfig(&configShallowCopy)
 	if err != nil {
 		return nil, err
@@ -100,26 +112,3 @@ func NewForConfig(c *rest.Config) (*Clientset, error) {
 	}
 	return &cs, nil
 }
-
-// NewForConfigOrDie creates a new Clientset for the given config and
-// panics if there is an error in the config.
-func NewForConfigOrDie(c *rest.Config) *Clientset {
-	var cs Clientset
-	cs.kyvernoV1 = kyvernov1.NewForConfigOrDie(c)
-	cs.kyvernoV1alpha2 = kyvernov1alpha2.NewForConfigOrDie(c)
-	cs.wgpolicyk8sV1alpha2 = wgpolicyk8sv1alpha2.NewForConfigOrDie(c)
-
-	cs.DiscoveryClient = discovery.NewDiscoveryClientForConfigOrDie(c)
-	return &cs
-}
-
-// New creates a new Clientset for the given RESTClient.
-func New(c rest.Interface) *Clientset {
-	var cs Clientset
-	cs.kyvernoV1 = kyvernov1.New(c)
-	cs.kyvernoV1alpha2 = kyvernov1alpha2.New(c)
-	cs.wgpolicyk8sV1alpha2 = wgpolicyk8sv1alpha2.New(c)
-
-	cs.DiscoveryClient = discovery.NewDiscoveryClient(c)
-	return &cs
-}

pkg/client/clientset/versioned/fake/clientset_generated.go

@@ -24,6 +24,8 @@ import (
 	fakekyvernov1 "github.com/kyverno/kyverno/pkg/client/clientset/versioned/typed/kyverno/v1/fake"
 	kyvernov1alpha2 "github.com/kyverno/kyverno/pkg/client/clientset/versioned/typed/kyverno/v1alpha2"
 	fakekyvernov1alpha2 "github.com/kyverno/kyverno/pkg/client/clientset/versioned/typed/kyverno/v1alpha2/fake"
+	kyvernov1beta1 "github.com/kyverno/kyverno/pkg/client/clientset/versioned/typed/kyverno/v1beta1"
+	fakekyvernov1beta1 "github.com/kyverno/kyverno/pkg/client/clientset/versioned/typed/kyverno/v1beta1/fake"
 	wgpolicyk8sv1alpha2 "github.com/kyverno/kyverno/pkg/client/clientset/versioned/typed/policyreport/v1alpha2"
 	fakewgpolicyk8sv1alpha2 "github.com/kyverno/kyverno/pkg/client/clientset/versioned/typed/policyreport/v1alpha2/fake"
 	"k8s.io/apimachinery/pkg/runtime"
@@ -85,6 +87,11 @@ func (c *Clientset) KyvernoV1() kyvernov1.KyvernoV1Interface {
 	return &fakekyvernov1.FakeKyvernoV1{Fake: &c.Fake}
 }
 
+// KyvernoV1alpha2 retrieves the KyvernoV1alpha2Client
+func (c *Clientset) KyvernoV1beta1() kyvernov1beta1.KyvernoV1beta1Interface {
+	return &fakekyvernov1beta1.FakeKyvernoV1beta1{Fake: &c.Fake}
+}
+
 // KyvernoV1alpha2 retrieves the KyvernoV1alpha2Client
 func (c *Clientset) KyvernoV1alpha2() kyvernov1alpha2.KyvernoV1alpha2Interface {
 	return &fakekyvernov1alpha2.FakeKyvernoV1alpha2{Fake: &c.Fake}

pkg/client/clientset/versioned/scheme/register.go

@@ -21,6 +21,7 @@ package scheme
 import (
 	kyvernov1 "github.com/kyverno/kyverno/api/kyverno/v1"
 	kyvernov1alpha2 "github.com/kyverno/kyverno/api/kyverno/v1alpha2"
+	kyvernov1beta1 "github.com/kyverno/kyverno/api/kyverno/v1beta1"
 	wgpolicyk8sv1alpha2 "github.com/kyverno/kyverno/api/policyreport/v1alpha2"
 	v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 	runtime "k8s.io/apimachinery/pkg/runtime"
@@ -34,6 +35,7 @@ var Codecs = serializer.NewCodecFactory(Scheme)
 var ParameterCodec = runtime.NewParameterCodec(Scheme)
 var localSchemeBuilder = runtime.SchemeBuilder{
 	kyvernov1.AddToScheme,
+	kyvernov1beta1.AddToScheme,
 	kyvernov1alpha2.AddToScheme,
 	wgpolicyk8sv1alpha2.AddToScheme,
 }

pkg/client/clientset/versioned/typed/kyverno/v1beta1/doc.go

@@ -0,0 +1,20 @@
+/*
+Copyright The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Code generated by client-gen. DO NOT EDIT.
+
+// This package has the automatically generated typed clients.
+package v1beta1

pkg/client/clientset/versioned/typed/kyverno/v1beta1/fake/doc.go

@@ -0,0 +1,20 @@
+/*
+Copyright The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Code generated by client-gen. DO NOT EDIT.
+
+// Package fake has the automatically generated clients.
+package fake

pkg/client/clientset/versioned/typed/kyverno/v1beta1/fake/fake_kyverno_client.go

@@ -0,0 +1,40 @@
+/*
+Copyright The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Code generated by client-gen. DO NOT EDIT.
+
+package fake
+
+import (
+	v1beta1 "github.com/kyverno/kyverno/pkg/client/clientset/versioned/typed/kyverno/v1beta1"
+	rest "k8s.io/client-go/rest"
+	testing "k8s.io/client-go/testing"
+)
+
+type FakeKyvernoV1beta1 struct {
+	*testing.Fake
+}
+
+func (c *FakeKyvernoV1beta1) UpdateRequests(namespace string) v1beta1.UpdateRequestInterface {
+	return &FakeUpdateRequests{c, namespace}
+}
+
+// RESTClient returns a RESTClient that is used to communicate
+// with API server by this client implementation.
+func (c *FakeKyvernoV1beta1) RESTClient() rest.Interface {
+	var ret *rest.RESTClient
+	return ret
+}

pkg/client/clientset/versioned/typed/kyverno/v1beta1/fake/fake_updaterequest.go

@@ -0,0 +1,142 @@
+/*
+Copyright The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Code generated by client-gen. DO NOT EDIT.
+
+package fake
+
+import (
+	"context"
+
+	v1beta1 "github.com/kyverno/kyverno/api/kyverno/v1beta1"
+	v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	labels "k8s.io/apimachinery/pkg/labels"
+	schema "k8s.io/apimachinery/pkg/runtime/schema"
+	types "k8s.io/apimachinery/pkg/types"
+	watch "k8s.io/apimachinery/pkg/watch"
+	testing "k8s.io/client-go/testing"
+)
+
+// FakeUpdateRequests implements UpdateRequestInterface
+type FakeUpdateRequests struct {
+	Fake *FakeKyvernoV1beta1
+	ns   string
+}
+
+var updaterequestsResource = schema.GroupVersionResource{Group: "kyverno.io", Version: "v1beta1", Resource: "updaterequests"}
+
+var updaterequestsKind = schema.GroupVersionKind{Group: "kyverno.io", Version: "v1beta1", Kind: "UpdateRequest"}
+
+// Get takes name of the updateRequest, and returns the corresponding updateRequest object, and an error if there is any.
+func (c *FakeUpdateRequests) Get(ctx context.Context, name string, options v1.GetOptions) (result *v1beta1.UpdateRequest, err error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewGetAction(updaterequestsResource, c.ns, name), &v1beta1.UpdateRequest{})
+
+	if obj == nil {
+		return nil, err
+	}
+	return obj.(*v1beta1.UpdateRequest), err
+}
+
+// List takes label and field selectors, and returns the list of UpdateRequests that match those selectors.
+func (c *FakeUpdateRequests) List(ctx context.Context, opts v1.ListOptions) (result *v1beta1.UpdateRequestList, err error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewListAction(updaterequestsResource, updaterequestsKind, c.ns, opts), &v1beta1.UpdateRequestList{})
+
+	if obj == nil {
+		return nil, err
+	}
+
+	label, _, _ := testing.ExtractFromListOptions(opts)
+	if label == nil {
+		label = labels.Everything()
+	}
+	list := &v1beta1.UpdateRequestList{ListMeta: obj.(*v1beta1.UpdateRequestList).ListMeta}
+	for _, item := range obj.(*v1beta1.UpdateRequestList).Items {
+		if label.Matches(labels.Set(item.Labels)) {
+			list.Items = append(list.Items, item)
+		}
+	}
+	return list, err
+}
+
+// Watch returns a watch.Interface that watches the requested updateRequests.
+func (c *FakeUpdateRequests) Watch(ctx context.Context, opts v1.ListOptions) (watch.Interface, error) {
+	return c.Fake.
+		InvokesWatch(testing.NewWatchAction(updaterequestsResource, c.ns, opts))
+
+}
+
+// Create takes the representation of a updateRequest and creates it.  Returns the server's representation of the updateRequest, and an error, if there is any.
+func (c *FakeUpdateRequests) Create(ctx context.Context, updateRequest *v1beta1.UpdateRequest, opts v1.CreateOptions) (result *v1beta1.UpdateRequest, err error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewCreateAction(updaterequestsResource, c.ns, updateRequest), &v1beta1.UpdateRequest{})
+
+	if obj == nil {
+		return nil, err
+	}
+	return obj.(*v1beta1.UpdateRequest), err
+}
+
+// Update takes the representation of a updateRequest and updates it. Returns the server's representation of the updateRequest, and an error, if there is any.
+func (c *FakeUpdateRequests) Update(ctx context.Context, updateRequest *v1beta1.UpdateRequest, opts v1.UpdateOptions) (result *v1beta1.UpdateRequest, err error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewUpdateAction(updaterequestsResource, c.ns, updateRequest), &v1beta1.UpdateRequest{})
+
+	if obj == nil {
+		return nil, err
+	}
+	return obj.(*v1beta1.UpdateRequest), err
+}
+
+// UpdateStatus was generated because the type contains a Status member.
+// Add a +genclient:noStatus comment above the type to avoid generating UpdateStatus().
+func (c *FakeUpdateRequests) UpdateStatus(ctx context.Context, updateRequest *v1beta1.UpdateRequest, opts v1.UpdateOptions) (*v1beta1.UpdateRequest, error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewUpdateSubresourceAction(updaterequestsResource, "status", c.ns, updateRequest), &v1beta1.UpdateRequest{})
+
+	if obj == nil {
+		return nil, err
+	}
+	return obj.(*v1beta1.UpdateRequest), err
+}
+
+// Delete takes name of the updateRequest and deletes it. Returns an error if one occurs.
+func (c *FakeUpdateRequests) Delete(ctx context.Context, name string, opts v1.DeleteOptions) error {
+	_, err := c.Fake.
+		Invokes(testing.NewDeleteAction(updaterequestsResource, c.ns, name), &v1beta1.UpdateRequest{})
+
+	return err
+}
+
+// DeleteCollection deletes a collection of objects.
+func (c *FakeUpdateRequests) DeleteCollection(ctx context.Context, opts v1.DeleteOptions, listOpts v1.ListOptions) error {
+	action := testing.NewDeleteCollectionAction(updaterequestsResource, c.ns, listOpts)
+
+	_, err := c.Fake.Invokes(action, &v1beta1.UpdateRequestList{})
+	return err
+}
+
+// Patch applies the patch and returns the patched updateRequest.
+func (c *FakeUpdateRequests) Patch(ctx context.Context, name string, pt types.PatchType, data []byte, opts v1.PatchOptions, subresources ...string) (result *v1beta1.UpdateRequest, err error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewPatchSubresourceAction(updaterequestsResource, c.ns, name, pt, data, subresources...), &v1beta1.UpdateRequest{})
+
+	if obj == nil {
+		return nil, err
+	}
+	return obj.(*v1beta1.UpdateRequest), err
+}

pkg/client/clientset/versioned/typed/kyverno/v1beta1/generated_expansion.go

@@ -0,0 +1,21 @@
+/*
+Copyright The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Code generated by client-gen. DO NOT EDIT.
+
+package v1beta1
+
+type UpdateRequestExpansion interface{}

pkg/client/clientset/versioned/typed/kyverno/v1beta1/kyverno_client.go

@@ -0,0 +1,74 @@
+/*
+Copyright The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Code generated by client-gen. DO NOT EDIT.
+
+package v1beta1
+
+import (
+	v1 "github.com/kyverno/kyverno/api/kyverno/v1"
+	scheme "github.com/kyverno/kyverno/pkg/client/clientset/versioned/scheme"
+	rest "k8s.io/client-go/rest"
+)
+
+type KyvernoV1beta1Interface interface {
+	RESTClient() rest.Interface
+	UpdateRequestsGetter
+}
+
+// KyvernoV1beta1Client is used to interact with features provided by the kyverno.io group.
+type KyvernoV1beta1Client struct {
+	restClient rest.Interface
+}
+
+func (c *KyvernoV1beta1Client) UpdateRequests(namespace string) UpdateRequestInterface {
+	return newUpdateRequests(c, namespace)
+}
+
+// NewForConfig creates a new KyvernoV1beta1Client for the given config.
+func NewForConfig(c *rest.Config) (*KyvernoV1beta1Client, error) {
+	config := *c
+	if err := setConfigDefaults(&config); err != nil {
+		return nil, err
+	}
+	client, err := rest.RESTClientFor(&config)
+	if err != nil {
+		return nil, err
+	}
+	return &KyvernoV1beta1Client{client}, nil
+}
+
+func setConfigDefaults(config *rest.Config) error {
+	gv := v1.SchemeGroupVersion
+	config.GroupVersion = &gv
+	config.APIPath = "/apis"
+	config.NegotiatedSerializer = scheme.Codecs.WithoutConversion()
+
+	if config.UserAgent == "" {
+		config.UserAgent = rest.DefaultKubernetesUserAgent()
+	}
+
+	return nil
+}
+
+// RESTClient returns a RESTClient that is used to communicate
+// with API server by this client implementation.
+func (c *KyvernoV1beta1Client) RESTClient() rest.Interface {
+	if c == nil {
+		return nil
+	}
+	return c.restClient
+}

pkg/client/clientset/versioned/typed/kyverno/v1beta1/updaterequest.go

@@ -0,0 +1,195 @@
+/*
+Copyright The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Code generated by client-gen. DO NOT EDIT.
+
+package v1beta1
+
+import (
+	"context"
+	"time"
+
+	v1beta1 "github.com/kyverno/kyverno/api/kyverno/v1beta1"
+	scheme "github.com/kyverno/kyverno/pkg/client/clientset/versioned/scheme"
+	v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	types "k8s.io/apimachinery/pkg/types"
+	watch "k8s.io/apimachinery/pkg/watch"
+	rest "k8s.io/client-go/rest"
+)
+
+// UpdateRequestsGetter has a method to return a UpdateRequestInterface.
+// A group's client should implement this interface.
+type UpdateRequestsGetter interface {
+	UpdateRequests(namespace string) UpdateRequestInterface
+}
+
+// UpdateRequestInterface has methods to work with UpdateRequest resources.
+type UpdateRequestInterface interface {
+	Create(ctx context.Context, updateRequest *v1beta1.UpdateRequest, opts v1.CreateOptions) (*v1beta1.UpdateRequest, error)
+	Update(ctx context.Context, updateRequest *v1beta1.UpdateRequest, opts v1.UpdateOptions) (*v1beta1.UpdateRequest, error)
+	UpdateStatus(ctx context.Context, updateRequest *v1beta1.UpdateRequest, opts v1.UpdateOptions) (*v1beta1.UpdateRequest, error)
+	Delete(ctx context.Context, name string, opts v1.DeleteOptions) error
+	DeleteCollection(ctx context.Context, opts v1.DeleteOptions, listOpts v1.ListOptions) error
+	Get(ctx context.Context, name string, opts v1.GetOptions) (*v1beta1.UpdateRequest, error)
+	List(ctx context.Context, opts v1.ListOptions) (*v1beta1.UpdateRequestList, error)
+	Watch(ctx context.Context, opts v1.ListOptions) (watch.Interface, error)
+	Patch(ctx context.Context, name string, pt types.PatchType, data []byte, opts v1.PatchOptions, subresources ...string) (result *v1beta1.UpdateRequest, err error)
+	UpdateRequestExpansion
+}
+
+// updateRequests implements UpdateRequestInterface
+type updateRequests struct {
+	client rest.Interface
+	ns     string
+}
+
+// newUpdateRequests returns a UpdateRequests
+func newUpdateRequests(c *KyvernoV1beta1Client, namespace string) *updateRequests {
+	return &updateRequests{
+		client: c.RESTClient(),
+		ns:     namespace,
+	}
+}
+
+// Get takes name of the updateRequest, and returns the corresponding updateRequest object, and an error if there is any.
+func (c *updateRequests) Get(ctx context.Context, name string, options v1.GetOptions) (result *v1beta1.UpdateRequest, err error) {
+	result = &v1beta1.UpdateRequest{}
+	err = c.client.Get().
+		Namespace(c.ns).
+		Resource("updaterequests").
+		Name(name).
+		VersionedParams(&options, scheme.ParameterCodec).
+		Do(ctx).
+		Into(result)
+	return
+}
+
+// List takes label and field selectors, and returns the list of UpdateRequests that match those selectors.
+func (c *updateRequests) List(ctx context.Context, opts v1.ListOptions) (result *v1beta1.UpdateRequestList, err error) {
+	var timeout time.Duration
+	if opts.TimeoutSeconds != nil {
+		timeout = time.Duration(*opts.TimeoutSeconds) * time.Second
+	}
+	result = &v1beta1.UpdateRequestList{}
+	err = c.client.Get().
+		Namespace(c.ns).
+		Resource("updaterequests").
+		VersionedParams(&opts, scheme.ParameterCodec).
+		Timeout(timeout).
+		Do(ctx).
+		Into(result)
+	return
+}
+
+// Watch returns a watch.Interface that watches the requested updateRequests.
+func (c *updateRequests) Watch(ctx context.Context, opts v1.ListOptions) (watch.Interface, error) {
+	var timeout time.Duration
+	if opts.TimeoutSeconds != nil {
+		timeout = time.Duration(*opts.TimeoutSeconds) * time.Second
+	}
+	opts.Watch = true
+	return c.client.Get().
+		Namespace(c.ns).
+		Resource("updaterequests").
+		VersionedParams(&opts, scheme.ParameterCodec).
+		Timeout(timeout).
+		Watch(ctx)
+}
+
+// Create takes the representation of a updateRequest and creates it.  Returns the server's representation of the updateRequest, and an error, if there is any.
+func (c *updateRequests) Create(ctx context.Context, updateRequest *v1beta1.UpdateRequest, opts v1.CreateOptions) (result *v1beta1.UpdateRequest, err error) {
+	result = &v1beta1.UpdateRequest{}
+	err = c.client.Post().
+		Namespace(c.ns).
+		Resource("updaterequests").
+		VersionedParams(&opts, scheme.ParameterCodec).
+		Body(updateRequest).
+		Do(ctx).
+		Into(result)
+	return
+}
+
+// Update takes the representation of a updateRequest and updates it. Returns the server's representation of the updateRequest, and an error, if there is any.
+func (c *updateRequests) Update(ctx context.Context, updateRequest *v1beta1.UpdateRequest, opts v1.UpdateOptions) (result *v1beta1.UpdateRequest, err error) {
+	result = &v1beta1.UpdateRequest{}
+	err = c.client.Put().
+		Namespace(c.ns).
+		Resource("updaterequests").
+		Name(updateRequest.Name).
+		VersionedParams(&opts, scheme.ParameterCodec).
+		Body(updateRequest).
+		Do(ctx).
+		Into(result)
+	return
+}
+
+// UpdateStatus was generated because the type contains a Status member.
+// Add a +genclient:noStatus comment above the type to avoid generating UpdateStatus().
+func (c *updateRequests) UpdateStatus(ctx context.Context, updateRequest *v1beta1.UpdateRequest, opts v1.UpdateOptions) (result *v1beta1.UpdateRequest, err error) {
+	result = &v1beta1.UpdateRequest{}
+	err = c.client.Put().
+		Namespace(c.ns).
+		Resource("updaterequests").
+		Name(updateRequest.Name).
+		SubResource("status").
+		VersionedParams(&opts, scheme.ParameterCodec).
+		Body(updateRequest).
+		Do(ctx).
+		Into(result)
+	return
+}
+
+// Delete takes name of the updateRequest and deletes it. Returns an error if one occurs.
+func (c *updateRequests) Delete(ctx context.Context, name string, opts v1.DeleteOptions) error {
+	return c.client.Delete().
+		Namespace(c.ns).
+		Resource("updaterequests").
+		Name(name).
+		Body(&opts).
+		Do(ctx).
+		Error()
+}
+
+// DeleteCollection deletes a collection of objects.
+func (c *updateRequests) DeleteCollection(ctx context.Context, opts v1.DeleteOptions, listOpts v1.ListOptions) error {
+	var timeout time.Duration
+	if listOpts.TimeoutSeconds != nil {
+		timeout = time.Duration(*listOpts.TimeoutSeconds) * time.Second
+	}
+	return c.client.Delete().
+		Namespace(c.ns).
+		Resource("updaterequests").
+		VersionedParams(&listOpts, scheme.ParameterCodec).
+		Timeout(timeout).
+		Body(&opts).
+		Do(ctx).
+		Error()
+}
+
+// Patch applies the patch and returns the patched updateRequest.
+func (c *updateRequests) Patch(ctx context.Context, name string, pt types.PatchType, data []byte, opts v1.PatchOptions, subresources ...string) (result *v1beta1.UpdateRequest, err error) {
+	result = &v1beta1.UpdateRequest{}
+	err = c.client.Patch(pt).
+		Namespace(c.ns).
+		Resource("updaterequests").
+		Name(name).
+		SubResource(subresources...).
+		VersionedParams(&opts, scheme.ParameterCodec).
+		Body(data).
+		Do(ctx).
+		Into(result)
+	return
+}

pkg/client/informers/externalversions/kyverno/v1beta1/interface.go

@@ -0,0 +1,45 @@
+/*
+Copyright The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Code generated by informer-gen. DO NOT EDIT.
+
+package v1beta1
+
+import (
+	internalinterfaces "github.com/kyverno/kyverno/pkg/client/informers/externalversions/internalinterfaces"
+)
+
+// Interface provides access to all the informers in this group version.
+type Interface interface {
+	// UpdateRequests returns a UpdateRequestInformer.
+	UpdateRequests() UpdateRequestInformer
+}
+
+type version struct {
+	factory          internalinterfaces.SharedInformerFactory
+	namespace        string
+	tweakListOptions internalinterfaces.TweakListOptionsFunc
+}
+
+// New returns a new Interface.
+func New(f internalinterfaces.SharedInformerFactory, namespace string, tweakListOptions internalinterfaces.TweakListOptionsFunc) Interface {
+	return &version{factory: f, namespace: namespace, tweakListOptions: tweakListOptions}
+}
+
+// UpdateRequests returns a UpdateRequestInformer.
+func (v *version) UpdateRequests() UpdateRequestInformer {
+	return &updateRequestInformer{factory: v.factory, namespace: v.namespace, tweakListOptions: v.tweakListOptions}
+}

pkg/client/informers/externalversions/kyverno/v1beta1/updaterequest.go

@@ -0,0 +1,90 @@
+/*
+Copyright The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Code generated by informer-gen. DO NOT EDIT.
+
+package v1beta1
+
+import (
+	"context"
+	time "time"
+
+	kyvernov1beta1 "github.com/kyverno/kyverno/api/kyverno/v1beta1"
+	versioned "github.com/kyverno/kyverno/pkg/client/clientset/versioned"
+	internalinterfaces "github.com/kyverno/kyverno/pkg/client/informers/externalversions/internalinterfaces"
+	v1beta1 "github.com/kyverno/kyverno/pkg/client/listers/kyverno/v1beta1"
+	v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	runtime "k8s.io/apimachinery/pkg/runtime"
+	watch "k8s.io/apimachinery/pkg/watch"
+	cache "k8s.io/client-go/tools/cache"
+)
+
+// UpdateRequestInformer provides access to a shared informer and lister for
+// UpdateRequests.
+type UpdateRequestInformer interface {
+	Informer() cache.SharedIndexInformer
+	Lister() v1beta1.UpdateRequestLister
+}
+
+type updateRequestInformer struct {
+	factory          internalinterfaces.SharedInformerFactory
+	tweakListOptions internalinterfaces.TweakListOptionsFunc
+	namespace        string
+}
+
+// NewUpdateRequestInformer constructs a new informer for UpdateRequest type.
+// Always prefer using an informer factory to get a shared informer instead of getting an independent
+// one. This reduces memory footprint and number of connections to the server.
+func NewUpdateRequestInformer(client versioned.Interface, namespace string, resyncPeriod time.Duration, indexers cache.Indexers) cache.SharedIndexInformer {
+	return NewFilteredUpdateRequestInformer(client, namespace, resyncPeriod, indexers, nil)
+}
+
+// NewFilteredUpdateRequestInformer constructs a new informer for UpdateRequest type.
+// Always prefer using an informer factory to get a shared informer instead of getting an independent
+// one. This reduces memory footprint and number of connections to the server.
+func NewFilteredUpdateRequestInformer(client versioned.Interface, namespace string, resyncPeriod time.Duration, indexers cache.Indexers, tweakListOptions internalinterfaces.TweakListOptionsFunc) cache.SharedIndexInformer {
+	return cache.NewSharedIndexInformer(
+		&cache.ListWatch{
+			ListFunc: func(options v1.ListOptions) (runtime.Object, error) {
+				if tweakListOptions != nil {
+					tweakListOptions(&options)
+				}
+				return client.KyvernoV1beta1().UpdateRequests(namespace).List(context.TODO(), options)
+			},
+			WatchFunc: func(options v1.ListOptions) (watch.Interface, error) {
+				if tweakListOptions != nil {
+					tweakListOptions(&options)
+				}
+				return client.KyvernoV1beta1().UpdateRequests(namespace).Watch(context.TODO(), options)
+			},
+		},
+		&kyvernov1beta1.UpdateRequest{},
+		resyncPeriod,
+		indexers,
+	)
+}
+
+func (f *updateRequestInformer) defaultInformer(client versioned.Interface, resyncPeriod time.Duration) cache.SharedIndexInformer {
+	return NewFilteredUpdateRequestInformer(client, f.namespace, resyncPeriod, cache.Indexers{cache.NamespaceIndex: cache.MetaNamespaceIndexFunc}, f.tweakListOptions)
+}
+
+func (f *updateRequestInformer) Informer() cache.SharedIndexInformer {
+	return f.factory.InformerFor(&kyvernov1beta1.UpdateRequest{}, f.defaultInformer)
+}
+
+func (f *updateRequestInformer) Lister() v1beta1.UpdateRequestLister {
+	return v1beta1.NewUpdateRequestLister(f.Informer().GetIndexer())
+}

pkg/client/listers/kyverno/v1beta1/expansion_generated.go

@@ -0,0 +1,27 @@
+/*
+Copyright The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Code generated by lister-gen. DO NOT EDIT.
+
+package v1beta1
+
+// UpdateRequestListerExpansion allows custom methods to be added to
+// UpdateRequestLister.
+type UpdateRequestListerExpansion interface{}
+
+// UpdateRequestNamespaceListerExpansion allows custom methods to be added to
+// UpdateRequestNamespaceLister.
+type UpdateRequestNamespaceListerExpansion interface{}

pkg/client/listers/kyverno/v1beta1/updaterequest.go

@@ -0,0 +1,99 @@
+/*
+Copyright The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Code generated by lister-gen. DO NOT EDIT.
+
+package v1beta1
+
+import (
+	v1beta1 "github.com/kyverno/kyverno/api/kyverno/v1beta1"
+	"k8s.io/apimachinery/pkg/api/errors"
+	"k8s.io/apimachinery/pkg/labels"
+	"k8s.io/client-go/tools/cache"
+)
+
+// UpdateRequestLister helps list UpdateRequests.
+// All objects returned here must be treated as read-only.
+type UpdateRequestLister interface {
+	// List lists all UpdateRequests in the indexer.
+	// Objects returned here must be treated as read-only.
+	List(selector labels.Selector) (ret []*v1beta1.UpdateRequest, err error)
+	// UpdateRequests returns an object that can list and get UpdateRequests.
+	UpdateRequests(namespace string) UpdateRequestNamespaceLister
+	UpdateRequestListerExpansion
+}
+
+// updateRequestLister implements the UpdateRequestLister interface.
+type updateRequestLister struct {
+	indexer cache.Indexer
+}
+
+// NewUpdateRequestLister returns a new UpdateRequestLister.
+func NewUpdateRequestLister(indexer cache.Indexer) UpdateRequestLister {
+	return &updateRequestLister{indexer: indexer}
+}
+
+// List lists all UpdateRequests in the indexer.
+func (s *updateRequestLister) List(selector labels.Selector) (ret []*v1beta1.UpdateRequest, err error) {
+	err = cache.ListAll(s.indexer, selector, func(m interface{}) {
+		ret = append(ret, m.(*v1beta1.UpdateRequest))
+	})
+	return ret, err
+}
+
+// UpdateRequests returns an object that can list and get UpdateRequests.
+func (s *updateRequestLister) UpdateRequests(namespace string) UpdateRequestNamespaceLister {
+	return updateRequestNamespaceLister{indexer: s.indexer, namespace: namespace}
+}
+
+// UpdateRequestNamespaceLister helps list and get UpdateRequests.
+// All objects returned here must be treated as read-only.
+type UpdateRequestNamespaceLister interface {
+	// List lists all UpdateRequests in the indexer for a given namespace.
+	// Objects returned here must be treated as read-only.
+	List(selector labels.Selector) (ret []*v1beta1.UpdateRequest, err error)
+	// Get retrieves the UpdateRequest from the indexer for a given namespace and name.
+	// Objects returned here must be treated as read-only.
+	Get(name string) (*v1beta1.UpdateRequest, error)
+	UpdateRequestNamespaceListerExpansion
+}
+
+// updateRequestNamespaceLister implements the UpdateRequestNamespaceLister
+// interface.
+type updateRequestNamespaceLister struct {
+	indexer   cache.Indexer
+	namespace string
+}
+
+// List lists all UpdateRequests in the indexer for a given namespace.
+func (s updateRequestNamespaceLister) List(selector labels.Selector) (ret []*v1beta1.UpdateRequest, err error) {
+	err = cache.ListAllByNamespace(s.indexer, s.namespace, selector, func(m interface{}) {
+		ret = append(ret, m.(*v1beta1.UpdateRequest))
+	})
+	return ret, err
+}
+
+// Get retrieves the UpdateRequest from the indexer for a given namespace and name.
+func (s updateRequestNamespaceLister) Get(name string) (*v1beta1.UpdateRequest, error) {
+	obj, exists, err := s.indexer.GetByKey(s.namespace + "/" + name)
+	if err != nil {
+		return nil, err
+	}
+	if !exists {
+		return nil, errors.NewNotFound(v1beta1.Resource("updaterequest"), name)
+	}
+	return obj.(*v1beta1.UpdateRequest), nil
+}

scripts/update-codegen.sh

@@ -26,4 +26,4 @@ ${CODEGEN_PKG}/generate-groups.sh \
     "deepcopy,client,informer,lister" \
     ${NIRMATA_PKG}/pkg/client \
     ${NIRMATA_PKG}/pkg/api \
-    "kyverno:v1 policyreport:v1alpha2 kyverno:v1alpha2"
+    "kyverno:v1 kyverno:v1beta1 kyverno:v1alpha2 policyreport:v1alpha2"