diff --git a/prow/cluster/jobs/istio/client-go/istio.client-go.master.gen.yaml b/prow/cluster/jobs/istio/client-go/istio.client-go.master.gen.yaml
index 99ca2e759ba..6093171e89b 100644
--- a/prow/cluster/jobs/istio/client-go/istio.client-go.master.gen.yaml
+++ b/prow/cluster/jobs/istio/client-go/istio.client-go.master.gen.yaml
@@ -109,6 +109,62 @@ postsubmits:
           path: /tmp/prow/cache
           type: DirectoryOrCreate
         name: build-cache
+  - annotations:
+      testgrid-alert-email: istio-oncall@googlegroups.com
+      testgrid-dashboards: istio_client-go_postsubmit
+      testgrid-num-failures-to-alert: "1"
+    branches:
+    - ^master$
+    decorate: true
+    extra_refs:
+    - base_ref: master
+      org: istio
+      path_alias: istio.io/test-infra
+      repo: test-infra
+    name: update_client-go_dep_client-go_postsubmit
+    path_alias: istio.io/client-go
+    spec:
+      containers:
+      - command:
+        - ../test-infra/tools/automator/automator.sh
+        - --org=istio
+        - --repo=istio
+        - '--title=Automator: update istio/client-go@$AUTOMATOR_SRC_BRANCH dependency
+          in $AUTOMATOR_ORG/$AUTOMATOR_REPO@$AUTOMATOR_BRANCH'
+        - --labels=auto-merge,release-notes-none
+        - --modifier=update_client-go_dep
+        - --token-path=/etc/github-token/oauth
+        - --git-exclude=common
+        - --cmd=go get istio.io/client-go@$AUTOMATOR_SHA && go mod tidy && make clean
+          gen
+        image: gcr.io/istio-testing/build-tools:master-2021-05-07T04-05-01
+        name: ""
+        resources:
+          limits:
+            cpu: "3"
+            memory: 24Gi
+          requests:
+            cpu: "1"
+            memory: 3Gi
+        securityContext:
+          privileged: true
+        volumeMounts:
+        - mountPath: /home/prow/go/pkg
+          name: build-cache
+          subPath: gomod
+        - mountPath: /etc/github-token
+          name: github
+          readOnly: true
+      nodeSelector:
+        testing: test-pool
+      volumes:
+      - hostPath:
+          path: /tmp/prow/cache
+          type: DirectoryOrCreate
+        name: build-cache
+      - name: github
+        secret:
+          secretName: oauth-token
 presubmits:
   istio/client-go:
   - always_run: true
diff --git a/prow/cluster/jobs/istio/gogo-genproto/istio.gogo-genproto.master.gen.yaml b/prow/cluster/jobs/istio/gogo-genproto/istio.gogo-genproto.master.gen.yaml
index 594e5b7f537..f1ddc7937ec 100644
--- a/prow/cluster/jobs/istio/gogo-genproto/istio.gogo-genproto.master.gen.yaml
+++ b/prow/cluster/jobs/istio/gogo-genproto/istio.gogo-genproto.master.gen.yaml
@@ -109,6 +109,62 @@ postsubmits:
           path: /tmp/prow/cache
           type: DirectoryOrCreate
         name: build-cache
+  - annotations:
+      testgrid-alert-email: istio-oncall@googlegroups.com
+      testgrid-dashboards: istio_gogo-genproto_postsubmit
+      testgrid-num-failures-to-alert: "1"
+    branches:
+    - ^master$
+    decorate: true
+    extra_refs:
+    - base_ref: master
+      org: istio
+      path_alias: istio.io/test-infra
+      repo: test-infra
+    name: update_gogo-genproto_dep_gogo-genproto_postsubmit
+    path_alias: istio.io/gogo-genproto
+    spec:
+      containers:
+      - command:
+        - ../test-infra/tools/automator/automator.sh
+        - --org=istio
+        - --repo=istio
+        - '--title=Automator: update istio/gogo-genproto@$AUTOMATOR_SRC_BRANCH dependency
+          in $AUTOMATOR_ORG/$AUTOMATOR_REPO@$AUTOMATOR_BRANCH'
+        - --labels=auto-merge,release-notes-none
+        - --modifier=update_gogo-genproto_dep
+        - --token-path=/etc/github-token/oauth
+        - --git-exclude=common
+        - --cmd=go get istio.io/gogo_genproto@$AUTOMATOR_SHA && go mod tidy && make
+          clean gen
+        image: gcr.io/istio-testing/build-tools:master-2021-05-07T04-05-01
+        name: ""
+        resources:
+          limits:
+            cpu: "3"
+            memory: 24Gi
+          requests:
+            cpu: "1"
+            memory: 3Gi
+        securityContext:
+          privileged: true
+        volumeMounts:
+        - mountPath: /home/prow/go/pkg
+          name: build-cache
+          subPath: gomod
+        - mountPath: /etc/github-token
+          name: github
+          readOnly: true
+      nodeSelector:
+        testing: test-pool
+      volumes:
+      - hostPath:
+          path: /tmp/prow/cache
+          type: DirectoryOrCreate
+        name: build-cache
+      - name: github
+        secret:
+          secretName: oauth-token
 presubmits:
   istio/gogo-genproto:
   - always_run: true
diff --git a/prow/cluster/jobs/istio/pkg/istio.pkg.master.gen.yaml b/prow/cluster/jobs/istio/pkg/istio.pkg.master.gen.yaml
index a26455b9095..5dfce34a545 100644
--- a/prow/cluster/jobs/istio/pkg/istio.pkg.master.gen.yaml
+++ b/prow/cluster/jobs/istio/pkg/istio.pkg.master.gen.yaml
@@ -145,6 +145,61 @@ postsubmits:
           path: /tmp/prow/cache
           type: DirectoryOrCreate
         name: build-cache
+  - annotations:
+      testgrid-alert-email: istio-oncall@googlegroups.com
+      testgrid-dashboards: istio_pkg_postsubmit
+      testgrid-num-failures-to-alert: "1"
+    branches:
+    - ^master$
+    decorate: true
+    extra_refs:
+    - base_ref: master
+      org: istio
+      path_alias: istio.io/test-infra
+      repo: test-infra
+    name: update_pkg_dep_pkg_postsubmit
+    path_alias: istio.io/pkg
+    spec:
+      containers:
+      - command:
+        - ../test-infra/tools/automator/automator.sh
+        - --org=istio
+        - --repo=istio
+        - '--title=Automator: update istio/pkg@$AUTOMATOR_SRC_BRANCH dependency in
+          $AUTOMATOR_ORG/$AUTOMATOR_REPO@$AUTOMATOR_BRANCH'
+        - --labels=auto-merge,release-notes-none
+        - --modifier=update_pkg_dep
+        - --token-path=/etc/github-token/oauth
+        - --git-exclude=common
+        - --cmd=go get istio.io/pkg@$AUTOMATOR_SHA && go mod tidy && make clean gen
+        image: gcr.io/istio-testing/build-tools:master-2021-05-07T04-05-01
+        name: ""
+        resources:
+          limits:
+            cpu: "3"
+            memory: 24Gi
+          requests:
+            cpu: "1"
+            memory: 3Gi
+        securityContext:
+          privileged: true
+        volumeMounts:
+        - mountPath: /home/prow/go/pkg
+          name: build-cache
+          subPath: gomod
+        - mountPath: /etc/github-token
+          name: github
+          readOnly: true
+      nodeSelector:
+        testing: test-pool
+      volumes:
+      - hostPath:
+          path: /tmp/prow/cache
+          type: DirectoryOrCreate
+        name: build-cache
+      - name: github
+        secret:
+          secretName: oauth-token
 presubmits:
   istio/pkg:
   - always_run: true
diff --git a/prow/config/jobs/client-go.yaml b/prow/config/jobs/client-go.yaml
index c65eade5e65..a53f414b689 100644
--- a/prow/config/jobs/client-go.yaml
+++ b/prow/config/jobs/client-go.yaml
@@ -12,3 +12,18 @@ jobs:
 
   - name: gencheck
     command: [make, gen-check]
+
+  - name: update_client-go_dep
+    types: [postsubmit]
+    command:
+    - ../test-infra/tools/automator/automator.sh
+    - --org=istio
+    - --repo=istio
+    - "--title=Automator: update istio/client-go@$AUTOMATOR_SRC_BRANCH dependency in $AUTOMATOR_ORG/$AUTOMATOR_REPO@$AUTOMATOR_BRANCH"
+    - --labels=auto-merge,release-notes-none
+    - --modifier=update_client-go_dep
+    - --token-path=/etc/github-token/oauth
+    - --git-exclude=common
+    - --cmd=go get istio.io/client-go@$AUTOMATOR_SHA && go mod tidy && make clean gen
+    requirements: [github]
+    repos: [istio/test-infra@master]
diff --git a/prow/config/jobs/gogo-genproto.yaml b/prow/config/jobs/gogo-genproto.yaml
index 134747c5522..16ffcf61385 100644
--- a/prow/config/jobs/gogo-genproto.yaml
+++ b/prow/config/jobs/gogo-genproto.yaml
@@ -12,3 +12,18 @@ jobs:
 
   - name: gencheck
     command: [make, gen-check]
+
+  - name: update_gogo-genproto_dep
+    types: [postsubmit]
+    command:
+    - ../test-infra/tools/automator/automator.sh
+    - --org=istio
+    - --repo=istio
+    - "--title=Automator: update istio/gogo-genproto@$AUTOMATOR_SRC_BRANCH dependency in $AUTOMATOR_ORG/$AUTOMATOR_REPO@$AUTOMATOR_BRANCH"
+    - --labels=auto-merge,release-notes-none
+    - --modifier=update_gogo-genproto_dep
+    - --token-path=/etc/github-token/oauth
+    - --git-exclude=common
+    - --cmd=go get istio.io/gogo_genproto@$AUTOMATOR_SHA && go mod tidy && make clean gen
+    requirements: [github]
+    repos: [istio/test-infra@master]
diff --git a/prow/config/jobs/pkg.yaml b/prow/config/jobs/pkg.yaml
index d45459a8ed0..c068c6954e5 100644
--- a/prow/config/jobs/pkg.yaml
+++ b/prow/config/jobs/pkg.yaml
@@ -15,3 +15,18 @@ jobs:
 
   - name: gencheck
     command: [make, gen-check]
+
+  - name: update_pkg_dep
+    types: [postsubmit]
+    command:
+    - ../test-infra/tools/automator/automator.sh
+    - --org=istio
+    - --repo=istio
+    - "--title=Automator: update istio/pkg@$AUTOMATOR_SRC_BRANCH dependency in $AUTOMATOR_ORG/$AUTOMATOR_REPO@$AUTOMATOR_BRANCH"
+    - --labels=auto-merge,release-notes-none
+    - --modifier=update_pkg_dep
+    - --token-path=/etc/github-token/oauth
+    - --git-exclude=common
+    - --cmd=go get istio.io/pkg@$AUTOMATOR_SHA && go mod tidy && make clean gen
+    requirements: [github]
+    repos: [istio/test-infra@master]