diff --git a/jenkins_home/config.xml b/jenkins_home/config.xml
index 44d8ed56dc6..eb8db0abc46 100644
--- a/jenkins_home/config.xml
+++ b/jenkins_home/config.xml
@@ -5,7 +5,7 @@
     <string>jenkins.security.s2m.MasterKillSwitchWarning</string>
   </disabledAdministrativeMonitors>
   <version>2.32.2</version>
-  <numExecutors>10</numExecutors>
+  <numExecutors>7</numExecutors>
   <mode>EXCLUSIVE</mode>
   <useSecurity>true</useSecurity>
   <authorizationStrategy class="org.jenkinsci.plugins.GithubAuthorizationStrategy" plugin="github-oauth@0.25">
@@ -57,7 +57,7 @@
           <name>ubuntu-16-04</name>
           <privileged>false</privileged>
           <alwaysPullImage>false</alwaysPullImage>
-          <instanceCap>20</instanceCap>
+          <instanceCap>10</instanceCap>
           <idleMinutes>0</idleMinutes>
           <label>ubuntu-16-04</label>
           <nodeSelector></nodeSelector>
@@ -75,7 +75,7 @@
               <workingDir>/home/jenkins</workingDir>
               <command></command>
               <args>${computer.jnlpmac} ${computer.name}</args>
-              <ttyEnabled>false</ttyEnabled>
+              <ttyEnabled>true</ttyEnabled>
               <resourceRequestCpu>500m</resourceRequestCpu>
               <resourceRequestMemory>512Mi</resourceRequestMemory>
               <resourceLimitCpu>2000m</resourceLimitCpu>
@@ -120,7 +120,7 @@
               <workingDir>/home/jenkins</workingDir>
               <command></command>
               <args>${computer.jnlpmac} ${computer.name}</args>
-              <ttyEnabled>false</ttyEnabled>
+              <ttyEnabled>true</ttyEnabled>
               <resourceRequestCpu>500m</resourceRequestCpu>
               <resourceRequestMemory>512Mi</resourceRequestMemory>
               <resourceLimitCpu>4000m</resourceLimitCpu>
@@ -183,9 +183,8 @@
       <namespace>jenkins</namespace>
       <jenkinsUrl>http://jenkins-ui.jenkins.svc.cluster.local:8080</jenkinsUrl>
       <jenkinsTunnel>jenkins-discovery.jenkins.svc.cluster.local:50000</jenkinsTunnel>
-      <credentialsId>jenkins</credentialsId>
-      <containerCap>30</containerCap>
-      <retentionTimeout>5</retentionTimeout>
+      <containerCap>20</containerCap>
+      <retentionTimeout>20</retentionTimeout>
       <connectTimeout>0</connectTimeout>
       <readTimeout>0</readTimeout>
     </org.csanchez.jenkins.plugins.kubernetes.KubernetesCloud>
diff --git a/jenkins_home/credentials.xml b/jenkins_home/credentials.xml
index 3261ab56d0d..cd711f7b739 100644
--- a/jenkins_home/credentials.xml
+++ b/jenkins_home/credentials.xml
@@ -1,23 +1,23 @@
 <?xml version='1.0' encoding='UTF-8'?>
-<com.cloudbees.plugins.credentials.SystemCredentialsProvider plugin="credentials@2.1.11">
+<com.cloudbees.plugins.credentials.SystemCredentialsProvider plugin="credentials@2.1.12">
   <domainCredentialsMap class="hudson.util.CopyOnWriteMap$Hash">
     <entry>
       <com.cloudbees.plugins.credentials.domains.Domain>
         <specifications/>
       </com.cloudbees.plugins.credentials.domains.Domain>
       <java.util.concurrent.CopyOnWriteArrayList>
-        <org.csanchez.jenkins.plugins.kubernetes.ServiceAccountCredential plugin="kubernetes@0.10">
+        <org.csanchez.jenkins.plugins.kubernetes.ServiceAccountCredential plugin="kubernetes@0.11">
           <scope>GLOBAL</scope>
           <id>jenkins</id>
           <description>jenkins</description>
         </org.csanchez.jenkins.plugins.kubernetes.ServiceAccountCredential>
-        <org.jenkinsci.plugins.plaincredentials.impl.StringCredentialsImpl plugin="plain-credentials@1.3">
+        <org.jenkinsci.plugins.plaincredentials.impl.StringCredentialsImpl plugin="plain-credentials@1.4">
           <scope>GLOBAL</scope>
           <id>istio-testing</id>
           <description>Istio Testing Jenkins</description>
           <secret>{AQAAABAAAAAwf+ymSMBqyx4qkUNcyDwbUwPkrTARMzVHGPA/ZpAwXAo42fuJW+xCusCZ3oF6SpUyCyF04LDHdxhOTY1qQdwkPA==}</secret>
         </org.jenkinsci.plugins.plaincredentials.impl.StringCredentialsImpl>
-        <org.jenkinsci.plugins.plaincredentials.impl.StringCredentialsImpl plugin="plain-credentials@1.3">
+        <org.jenkinsci.plugins.plaincredentials.impl.StringCredentialsImpl plugin="plain-credentials@1.4">
           <scope>GLOBAL</scope>
           <id>MANAGER_CODECOV_TOKEN</id>
           <description>Repository Upload Token for https://codecov.io/gh/istio/manager</description>
@@ -30,6 +30,12 @@
           <username>istiotesting</username>
           <password>{AQAAABAAAAAwGetPp4QyLCCJ/fPSj6+CFdC/zV+W+qMvA5+TtQL44/fMpPRyqX972S313lzN5iHHRbsz3Z9x6Ng01wxfBgzMOw==}</password>
         </com.cloudbees.plugins.credentials.impl.UsernamePasswordCredentialsImpl>
+        <org.jenkinsci.plugins.plaincredentials.impl.StringCredentialsImpl plugin="plain-credentials@1.4">
+          <scope>GLOBAL</scope>
+          <id>MIXER_CODECOV_TOKEN</id>
+          <description>Codecov for Mixer</description>
+          <secret>{AQAAABAAAAAwodQnLGkcRYb25vO24oteC8KC2vhGKeWA+uoaLPkrbhn4yQmZekvJhxrG0IpMeV2BbKjV7UmafAwGohhXS9+R9A==}</secret>
+        </org.jenkinsci.plugins.plaincredentials.impl.StringCredentialsImpl>
       </java.util.concurrent.CopyOnWriteArrayList>
     </entry>
   </domainCredentialsMap>
diff --git a/jenkins_home/github-plugin-configuration.xml b/jenkins_home/github-plugin-configuration.xml
index 02a173051f6..55faf12282c 100644
--- a/jenkins_home/github-plugin-configuration.xml
+++ b/jenkins_home/github-plugin-configuration.xml
@@ -1,9 +1,9 @@
 <?xml version='1.0' encoding='UTF-8'?>
-<github-plugin-configuration plugin="github@1.26.0">
+<github-plugin-configuration plugin="github@1.26.1">
   <configs>
     <github-server-config>
       <apiUrl>https://api.github.com</apiUrl>
-      <manageHooks>false</manageHooks>
+      <manageHooks>true</manageHooks>
       <credentialsId>istio-testing</credentialsId>
       <clientCacheSize>20</clientCacheSize>
     </github-server-config>
diff --git a/jenkins_home/jobs/istio-testing/jobs/pr-master/config.xml b/jenkins_home/jobs/istio-testing/jobs/pr-master/config.xml
index 33b72e5afdf..c04d4571ec3 100644
--- a/jenkins_home/jobs/istio-testing/jobs/pr-master/config.xml
+++ b/jenkins_home/jobs/istio-testing/jobs/pr-master/config.xml
@@ -12,7 +12,7 @@
         <artifactNumToKeep>-1</artifactNumToKeep>
       </strategy>
     </jenkins.model.BuildDiscarderProperty>
-    <com.coravy.hudson.plugins.github.GithubProjectProperty plugin="github@1.26.0">
+    <com.coravy.hudson.plugins.github.GithubProjectProperty plugin="github@1.26.1">
       <projectUrl>https://github.com/istio/istio-testing/</projectUrl>
       <displayName></displayName>
     </com.coravy.hudson.plugins.github.GithubProjectProperty>
diff --git a/jenkins_home/jobs/istio-testing/jobs/pr-stable/config.xml b/jenkins_home/jobs/istio-testing/jobs/pr-stable/config.xml
new file mode 100644
index 00000000000..7623061d9c8
--- /dev/null
+++ b/jenkins_home/jobs/istio-testing/jobs/pr-stable/config.xml
@@ -0,0 +1,111 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<flow-definition plugin="workflow-job@2.10">
+  <actions/>
+  <description></description>
+  <keepDependencies>false</keepDependencies>
+  <properties>
+    <jenkins.model.BuildDiscarderProperty>
+      <strategy class="hudson.tasks.LogRotator">
+        <daysToKeep>15</daysToKeep>
+        <numToKeep>20</numToKeep>
+        <artifactDaysToKeep>-1</artifactDaysToKeep>
+        <artifactNumToKeep>-1</artifactNumToKeep>
+      </strategy>
+    </jenkins.model.BuildDiscarderProperty>
+    <com.coravy.hudson.plugins.github.GithubProjectProperty plugin="github@1.26.1">
+      <projectUrl>https://github.com/istio/istio-testing/</projectUrl>
+      <displayName></displayName>
+    </com.coravy.hudson.plugins.github.GithubProjectProperty>
+    <com.sonyericsson.rebuild.RebuildSettings plugin="rebuild@1.25">
+      <autoRebuild>false</autoRebuild>
+      <rebuildDisabled>false</rebuildDisabled>
+    </com.sonyericsson.rebuild.RebuildSettings>
+    <hudson.model.ParametersDefinitionProperty>
+      <parameterDefinitions>
+        <hudson.model.StringParameterDefinition>
+          <name>STAGE</name>
+          <description></description>
+          <defaultValue>_SLAVE_UPDATE</defaultValue>
+        </hudson.model.StringParameterDefinition>
+        <hudson.model.BooleanParameterDefinition>
+          <name>UPDATE_PR</name>
+          <description></description>
+          <defaultValue>true</defaultValue>
+        </hudson.model.BooleanParameterDefinition>
+        <hudson.model.StringParameterDefinition>
+          <name>GITHUB_REPO</name>
+          <description></description>
+          <defaultValue>istio-testing</defaultValue>
+        </hudson.model.StringParameterDefinition>
+      </parameterDefinitions>
+    </hudson.model.ParametersDefinitionProperty>
+    <hudson.plugins.throttleconcurrents.ThrottleJobProperty plugin="throttle-concurrents@1.9.0">
+      <maxConcurrentPerNode>0</maxConcurrentPerNode>
+      <maxConcurrentTotal>3</maxConcurrentTotal>
+      <categories class="java.util.concurrent.CopyOnWriteArrayList"/>
+      <throttleEnabled>true</throttleEnabled>
+      <throttleOption>project</throttleOption>
+      <limitOneJobWithMatchingParams>false</limitOneJobWithMatchingParams>
+      <paramsToUseForLimit></paramsToUseForLimit>
+    </hudson.plugins.throttleconcurrents.ThrottleJobProperty>
+    <org.jenkinsci.plugins.workflow.job.properties.PipelineTriggersJobProperty>
+      <triggers>
+        <org.jenkinsci.plugins.github.pullrequest.GitHubPRTrigger plugin="github-pullrequest@0.1.0-rc21">
+          <spec>H/5 * * * *</spec>
+          <triggerMode>HEAVY_HOOKS</triggerMode>
+          <cancelQueued>true</cancelQueued>
+          <abortRunning>false</abortRunning>
+          <skipFirstRun>false</skipFirstRun>
+          <repoProviders>
+            <com.github.kostyasha.github.integration.generic.repoprovider.GitHubPluginRepoProvider>
+              <cacheConnection>true</cacheConnection>
+            </com.github.kostyasha.github.integration.generic.repoprovider.GitHubPluginRepoProvider>
+          </repoProviders>
+          <errorsAction>
+            <description>GitHub Pull Requests Trigger Errors</description>
+            <errors class="java.util.Collections$SynchronizedSet" serialization="custom">
+              <java.util.Collections_-SynchronizedCollection>
+                <default>
+                  <c class="set"/>
+                  <mutex class="java.util.Collections$SynchronizedSet" reference="../../.."/>
+                </default>
+              </java.util.Collections_-SynchronizedCollection>
+            </errors>
+          </errorsAction>
+          <events>
+            <org.jenkinsci.plugins.github.pullrequest.events.impl.GitHubPROpenEvent/>
+            <org.jenkinsci.plugins.github.pullrequest.events.impl.GitHubPRCommitEvent/>
+          </events>
+          <preStatus>true</preStatus>
+          <branchRestriction>
+            <targetBranchList>
+              <string>stable</string>
+            </targetBranchList>
+          </branchRestriction>
+        </org.jenkinsci.plugins.github.pullrequest.GitHubPRTrigger>
+      </triggers>
+    </org.jenkinsci.plugins.workflow.job.properties.PipelineTriggersJobProperty>
+  </properties>
+  <definition class="org.jenkinsci.plugins.workflow.cps.CpsScmFlowDefinition" plugin="workflow-cps@2.28">
+    <scm class="hudson.plugins.git.GitSCM" plugin="git@3.0.5">
+      <configVersion>2</configVersion>
+      <userRemoteConfigs>
+        <hudson.plugins.git.UserRemoteConfig>
+          <name>origin-pull</name>
+          <refspec>+refs/pull/${GITHUB_PR_NUMBER}/head:refs/remotes/origin-pull/pull/${GITHUB_PR_NUMBER}/head</refspec>
+          <url>https://github.com/istio/istio-testing</url>
+        </hudson.plugins.git.UserRemoteConfig>
+      </userRemoteConfigs>
+      <branches>
+        <hudson.plugins.git.BranchSpec>
+          <name>origin-pull/pull/${GITHUB_PR_NUMBER}/head</name>
+        </hudson.plugins.git.BranchSpec>
+      </branches>
+      <doGenerateSubmoduleConfigurations>false</doGenerateSubmoduleConfigurations>
+      <submoduleCfg class="list"/>
+      <extensions/>
+    </scm>
+    <scriptPath>Jenkinsfile</scriptPath>
+  </definition>
+  <triggers/>
+</flow-definition>
\ No newline at end of file
diff --git a/jenkins_home/jobs/istio-testing/jobs/ubuntu-16-04-slave/config.xml b/jenkins_home/jobs/istio-testing/jobs/ubuntu-16-04-slave/config.xml
index 98e50e372ae..30d31553199 100644
--- a/jenkins_home/jobs/istio-testing/jobs/ubuntu-16-04-slave/config.xml
+++ b/jenkins_home/jobs/istio-testing/jobs/ubuntu-16-04-slave/config.xml
@@ -1,5 +1,5 @@
 <?xml version='1.0' encoding='UTF-8'?>
-<flow-definition plugin="workflow-job@2.9">
+<flow-definition plugin="workflow-job@2.10">
   <actions/>
   <description></description>
   <keepDependencies>false</keepDependencies>
@@ -13,7 +13,7 @@
       </strategy>
     </jenkins.model.BuildDiscarderProperty>
     <org.jenkinsci.plugins.workflow.job.properties.DisableConcurrentBuildsJobProperty/>
-    <com.coravy.hudson.plugins.github.GithubProjectProperty plugin="github@1.25.1">
+    <com.coravy.hudson.plugins.github.GithubProjectProperty plugin="github@1.26.1">
       <projectUrl>https://github.com/istio/istio-testing/</projectUrl>
       <displayName></displayName>
     </com.coravy.hudson.plugins.github.GithubProjectProperty>
@@ -26,7 +26,7 @@
         <hudson.model.StringParameterDefinition>
           <name>BRANCH_SPEC</name>
           <description></description>
-          <defaultValue>master</defaultValue>
+          <defaultValue>stable</defaultValue>
         </hudson.model.StringParameterDefinition>
         <hudson.model.StringParameterDefinition>
           <name>STAGE</name>
@@ -57,8 +57,8 @@
       </triggers>
     </org.jenkinsci.plugins.workflow.job.properties.PipelineTriggersJobProperty>
   </properties>
-  <definition class="org.jenkinsci.plugins.workflow.cps.CpsScmFlowDefinition" plugin="workflow-cps@2.24">
-    <scm class="hudson.plugins.git.GitSCM" plugin="git@3.0.1">
+  <definition class="org.jenkinsci.plugins.workflow.cps.CpsScmFlowDefinition" plugin="workflow-cps@2.28">
+    <scm class="hudson.plugins.git.GitSCM" plugin="git@3.0.5">
       <configVersion>2</configVersion>
       <userRemoteConfigs>
         <hudson.plugins.git.UserRemoteConfig>
diff --git a/jenkins_home/jobs/istio-testing/jobs/update-stable/config.xml b/jenkins_home/jobs/istio-testing/jobs/update-stable/config.xml
index d5d603d2baf..c9005ec761b 100644
--- a/jenkins_home/jobs/istio-testing/jobs/update-stable/config.xml
+++ b/jenkins_home/jobs/istio-testing/jobs/update-stable/config.xml
@@ -13,7 +13,7 @@
       </strategy>
     </jenkins.model.BuildDiscarderProperty>
     <org.jenkinsci.plugins.workflow.job.properties.DisableConcurrentBuildsJobProperty/>
-    <com.coravy.hudson.plugins.github.GithubProjectProperty plugin="github@1.26.0">
+    <com.coravy.hudson.plugins.github.GithubProjectProperty plugin="github@1.26.1">
       <projectUrl>https://github.com/istio/istio-testing/</projectUrl>
       <displayName></displayName>
     </com.coravy.hudson.plugins.github.GithubProjectProperty>
@@ -24,9 +24,9 @@
     <hudson.model.ParametersDefinitionProperty>
       <parameterDefinitions>
         <hudson.model.StringParameterDefinition>
-          <name>GITHUB_REPO</name>
+          <name>GITHUB_REPOS</name>
           <description></description>
-          <defaultValue>istio-testing</defaultValue>
+          <defaultValue>istio-testing,mixer,proxy,manager</defaultValue>
         </hudson.model.StringParameterDefinition>
       </parameterDefinitions>
     </hudson.model.ParametersDefinitionProperty>
@@ -47,7 +47,7 @@
       </triggers>
     </org.jenkinsci.plugins.workflow.job.properties.PipelineTriggersJobProperty>
   </properties>
-  <definition class="org.jenkinsci.plugins.workflow.cps.CpsScmFlowDefinition" plugin="workflow-cps@2.26">
+  <definition class="org.jenkinsci.plugins.workflow.cps.CpsScmFlowDefinition" plugin="workflow-cps@2.28">
     <scm class="hudson.plugins.git.GitSCM" plugin="git@3.0.5">
       <configVersion>2</configVersion>
       <userRemoteConfigs>
diff --git a/jenkins_home/jobs/manager/config.xml b/jenkins_home/jobs/manager/config.xml
index 9d6e601ce64..509193a0a9d 100644
--- a/jenkins_home/jobs/manager/config.xml
+++ b/jenkins_home/jobs/manager/config.xml
@@ -1,9 +1,9 @@
 <?xml version='1.0' encoding='UTF-8'?>
-<com.cloudbees.hudson.plugins.folder.Folder plugin="cloudbees-folder@5.17">
+<com.cloudbees.hudson.plugins.folder.Folder plugin="cloudbees-folder@5.18">
   <actions/>
   <description></description>
   <properties>
-    <org.jenkinsci.plugins.pipeline.modeldefinition.config.FolderConfig plugin="pipeline-model-definition@1.0.1">
+    <org.jenkinsci.plugins.pipeline.modeldefinition.config.FolderConfig plugin="pipeline-model-definition@1.0.2">
       <dockerLabel></dockerLabel>
       <registry plugin="docker-commons@1.6"/>
     </org.jenkinsci.plugins.pipeline.modeldefinition.config.FolderConfig>
diff --git a/jenkins_home/jobs/manager/jobs/postsubmit/config.xml b/jenkins_home/jobs/manager/jobs/postsubmit/config.xml
index f328375f6c2..5d9a262fc67 100644
--- a/jenkins_home/jobs/manager/jobs/postsubmit/config.xml
+++ b/jenkins_home/jobs/manager/jobs/postsubmit/config.xml
@@ -13,7 +13,7 @@
       </strategy>
     </jenkins.model.BuildDiscarderProperty>
     <org.jenkinsci.plugins.workflow.job.properties.DisableConcurrentBuildsJobProperty/>
-    <com.coravy.hudson.plugins.github.GithubProjectProperty plugin="github@1.26.0">
+    <com.coravy.hudson.plugins.github.GithubProjectProperty plugin="github@1.26.1">
       <projectUrl>https://github.com/istio/manager/</projectUrl>
       <displayName></displayName>
     </com.coravy.hudson.plugins.github.GithubProjectProperty>
@@ -32,9 +32,13 @@
     </hudson.plugins.throttleconcurrents.ThrottleJobProperty>
     <org.jenkinsci.plugins.workflow.job.properties.PipelineTriggersJobProperty>
       <triggers>
-        <com.cloudbees.jenkins.GitHubPushTrigger plugin="github@1.26.0">
+        <com.cloudbees.jenkins.GitHubPushTrigger plugin="github@1.26.1">
           <spec></spec>
         </com.cloudbees.jenkins.GitHubPushTrigger>
+        <hudson.triggers.SCMTrigger>
+          <spec>H/2 * * * *</spec>
+          <ignorePostCommitHooks>false</ignorePostCommitHooks>
+        </hudson.triggers.SCMTrigger>
       </triggers>
     </org.jenkinsci.plugins.workflow.job.properties.PipelineTriggersJobProperty>
   </properties>
diff --git a/jenkins_home/jobs/mixer/config.xml b/jenkins_home/jobs/mixer/config.xml
new file mode 100644
index 00000000000..509193a0a9d
--- /dev/null
+++ b/jenkins_home/jobs/mixer/config.xml
@@ -0,0 +1,29 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<com.cloudbees.hudson.plugins.folder.Folder plugin="cloudbees-folder@5.18">
+  <actions/>
+  <description></description>
+  <properties>
+    <org.jenkinsci.plugins.pipeline.modeldefinition.config.FolderConfig plugin="pipeline-model-definition@1.0.2">
+      <dockerLabel></dockerLabel>
+      <registry plugin="docker-commons@1.6"/>
+    </org.jenkinsci.plugins.pipeline.modeldefinition.config.FolderConfig>
+  </properties>
+  <folderViews class="com.cloudbees.hudson.plugins.folder.views.DefaultFolderViewHolder">
+    <views>
+      <hudson.model.AllView>
+        <owner class="com.cloudbees.hudson.plugins.folder.Folder" reference="../../../.."/>
+        <name>All</name>
+        <filterExecutors>false</filterExecutors>
+        <filterQueue>false</filterQueue>
+        <properties class="hudson.model.View$PropertyList"/>
+      </hudson.model.AllView>
+    </views>
+    <tabBar class="hudson.views.DefaultViewsTabBar"/>
+  </folderViews>
+  <healthMetrics>
+    <com.cloudbees.hudson.plugins.folder.health.WorstChildHealthMetric>
+      <nonRecursive>false</nonRecursive>
+    </com.cloudbees.hudson.plugins.folder.health.WorstChildHealthMetric>
+  </healthMetrics>
+  <icon class="com.cloudbees.hudson.plugins.folder.icons.StockFolderIcon"/>
+</com.cloudbees.hudson.plugins.folder.Folder>
\ No newline at end of file
diff --git a/jenkins_home/jobs/manager/jobs/update-stable/config.xml b/jenkins_home/jobs/mixer/jobs/postsubmit/config.xml
similarity index 72%
rename from jenkins_home/jobs/manager/jobs/update-stable/config.xml
rename to jenkins_home/jobs/mixer/jobs/postsubmit/config.xml
index 1cafb0873e1..1b986c25934 100644
--- a/jenkins_home/jobs/manager/jobs/update-stable/config.xml
+++ b/jenkins_home/jobs/mixer/jobs/postsubmit/config.xml
@@ -6,26 +6,21 @@
   <properties>
     <jenkins.model.BuildDiscarderProperty>
       <strategy class="hudson.tasks.LogRotator">
-        <daysToKeep>15</daysToKeep>
-        <numToKeep>30</numToKeep>
+        <daysToKeep>20</daysToKeep>
+        <numToKeep>10</numToKeep>
         <artifactDaysToKeep>-1</artifactDaysToKeep>
         <artifactNumToKeep>-1</artifactNumToKeep>
       </strategy>
     </jenkins.model.BuildDiscarderProperty>
     <org.jenkinsci.plugins.workflow.job.properties.DisableConcurrentBuildsJobProperty/>
+    <com.coravy.hudson.plugins.github.GithubProjectProperty plugin="github@1.26.1">
+      <projectUrl>https://github.com/istio/mixer/</projectUrl>
+      <displayName></displayName>
+    </com.coravy.hudson.plugins.github.GithubProjectProperty>
     <com.sonyericsson.rebuild.RebuildSettings plugin="rebuild@1.25">
       <autoRebuild>false</autoRebuild>
       <rebuildDisabled>false</rebuildDisabled>
     </com.sonyericsson.rebuild.RebuildSettings>
-    <hudson.model.ParametersDefinitionProperty>
-      <parameterDefinitions>
-        <hudson.model.StringParameterDefinition>
-          <name>GITHUB_REPO</name>
-          <description></description>
-          <defaultValue>manager</defaultValue>
-        </hudson.model.StringParameterDefinition>
-      </parameterDefinitions>
-    </hudson.model.ParametersDefinitionProperty>
     <hudson.plugins.throttleconcurrents.ThrottleJobProperty plugin="throttle-concurrents@1.9.0">
       <maxConcurrentPerNode>0</maxConcurrentPerNode>
       <maxConcurrentTotal>0</maxConcurrentTotal>
@@ -37,30 +32,34 @@
     </hudson.plugins.throttleconcurrents.ThrottleJobProperty>
     <org.jenkinsci.plugins.workflow.job.properties.PipelineTriggersJobProperty>
       <triggers>
-        <hudson.triggers.TimerTrigger>
-          <spec>H * * * * </spec>
-        </hudson.triggers.TimerTrigger>
+        <com.cloudbees.jenkins.GitHubPushTrigger plugin="github@1.26.1">
+          <spec></spec>
+        </com.cloudbees.jenkins.GitHubPushTrigger>
+        <hudson.triggers.SCMTrigger>
+          <spec>H/2 * * * *</spec>
+          <ignorePostCommitHooks>false</ignorePostCommitHooks>
+        </hudson.triggers.SCMTrigger>
       </triggers>
     </org.jenkinsci.plugins.workflow.job.properties.PipelineTriggersJobProperty>
   </properties>
-  <definition class="org.jenkinsci.plugins.workflow.cps.CpsScmFlowDefinition" plugin="workflow-cps@2.26">
+  <definition class="org.jenkinsci.plugins.workflow.cps.CpsScmFlowDefinition" plugin="workflow-cps@2.28">
     <scm class="hudson.plugins.git.GitSCM" plugin="git@3.0.5">
       <configVersion>2</configVersion>
       <userRemoteConfigs>
         <hudson.plugins.git.UserRemoteConfig>
-          <url>https://github.com/istio/istio-testing</url>
+          <url>https://github.com/istio/mixer</url>
         </hudson.plugins.git.UserRemoteConfig>
       </userRemoteConfigs>
       <branches>
         <hudson.plugins.git.BranchSpec>
-          <name>stable</name>
+          <name>*/master</name>
         </hudson.plugins.git.BranchSpec>
       </branches>
       <doGenerateSubmoduleConfigurations>false</doGenerateSubmoduleConfigurations>
       <submoduleCfg class="list"/>
       <extensions/>
     </scm>
-    <scriptPath>fastForward.groovy</scriptPath>
+    <scriptPath>Jenkinsfile</scriptPath>
   </definition>
   <triggers/>
 </flow-definition>
\ No newline at end of file
diff --git a/jenkins_home/jobs/mixer/jobs/presubmit/config.xml b/jenkins_home/jobs/mixer/jobs/presubmit/config.xml
new file mode 100644
index 00000000000..1180b7101a8
--- /dev/null
+++ b/jenkins_home/jobs/mixer/jobs/presubmit/config.xml
@@ -0,0 +1,111 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<flow-definition plugin="workflow-job@2.10">
+  <actions/>
+  <description></description>
+  <keepDependencies>false</keepDependencies>
+  <properties>
+    <jenkins.model.BuildDiscarderProperty>
+      <strategy class="hudson.tasks.LogRotator">
+        <daysToKeep>20</daysToKeep>
+        <numToKeep>10</numToKeep>
+        <artifactDaysToKeep>-1</artifactDaysToKeep>
+        <artifactNumToKeep>-1</artifactNumToKeep>
+      </strategy>
+    </jenkins.model.BuildDiscarderProperty>
+    <com.coravy.hudson.plugins.github.GithubProjectProperty plugin="github@1.26.0">
+      <projectUrl>https://github.com/istio/mixer/</projectUrl>
+      <displayName></displayName>
+    </com.coravy.hudson.plugins.github.GithubProjectProperty>
+    <com.sonyericsson.rebuild.RebuildSettings plugin="rebuild@1.25">
+      <autoRebuild>false</autoRebuild>
+      <rebuildDisabled>false</rebuildDisabled>
+    </com.sonyericsson.rebuild.RebuildSettings>
+    <hudson.model.ParametersDefinitionProperty>
+      <parameterDefinitions>
+        <hudson.model.StringParameterDefinition>
+          <name>STAGE</name>
+          <description></description>
+          <defaultValue>PRESUBMIT</defaultValue>
+        </hudson.model.StringParameterDefinition>
+        <hudson.model.StringParameterDefinition>
+          <name>GITHUB_REPO</name>
+          <description></description>
+          <defaultValue>mixer</defaultValue>
+        </hudson.model.StringParameterDefinition>
+        <hudson.model.BooleanParameterDefinition>
+          <name>UPDATE_PR</name>
+          <description></description>
+          <defaultValue>true</defaultValue>
+        </hudson.model.BooleanParameterDefinition>
+      </parameterDefinitions>
+    </hudson.model.ParametersDefinitionProperty>
+    <hudson.plugins.throttleconcurrents.ThrottleJobProperty plugin="throttle-concurrents@1.9.0">
+      <maxConcurrentPerNode>0</maxConcurrentPerNode>
+      <maxConcurrentTotal>3</maxConcurrentTotal>
+      <categories class="java.util.concurrent.CopyOnWriteArrayList"/>
+      <throttleEnabled>true</throttleEnabled>
+      <throttleOption>project</throttleOption>
+      <limitOneJobWithMatchingParams>false</limitOneJobWithMatchingParams>
+      <paramsToUseForLimit></paramsToUseForLimit>
+    </hudson.plugins.throttleconcurrents.ThrottleJobProperty>
+    <org.jenkinsci.plugins.workflow.job.properties.PipelineTriggersJobProperty>
+      <triggers>
+        <org.jenkinsci.plugins.github.pullrequest.GitHubPRTrigger plugin="github-pullrequest@0.1.0-rc21">
+          <spec>H/5 * * * *</spec>
+          <triggerMode>HEAVY_HOOKS</triggerMode>
+          <cancelQueued>true</cancelQueued>
+          <abortRunning>false</abortRunning>
+          <skipFirstRun>false</skipFirstRun>
+          <repoProviders>
+            <com.github.kostyasha.github.integration.generic.repoprovider.GitHubPluginRepoProvider>
+              <cacheConnection>true</cacheConnection>
+            </com.github.kostyasha.github.integration.generic.repoprovider.GitHubPluginRepoProvider>
+          </repoProviders>
+          <errorsAction>
+            <description>GitHub Pull Requests Trigger Errors</description>
+            <errors class="java.util.Collections$SynchronizedSet" serialization="custom">
+              <java.util.Collections_-SynchronizedCollection>
+                <default>
+                  <c class="set"/>
+                  <mutex class="java.util.Collections$SynchronizedSet" reference="../../.."/>
+                </default>
+              </java.util.Collections_-SynchronizedCollection>
+            </errors>
+          </errorsAction>
+          <events>
+            <org.jenkinsci.plugins.github.pullrequest.events.impl.GitHubPROpenEvent/>
+            <org.jenkinsci.plugins.github.pullrequest.events.impl.GitHubPRCommitEvent/>
+          </events>
+          <preStatus>true</preStatus>
+          <branchRestriction>
+            <targetBranchList>
+              <string>^(?!.*(stable)).*$</string>
+            </targetBranchList>
+          </branchRestriction>
+        </org.jenkinsci.plugins.github.pullrequest.GitHubPRTrigger>
+      </triggers>
+    </org.jenkinsci.plugins.workflow.job.properties.PipelineTriggersJobProperty>
+  </properties>
+  <definition class="org.jenkinsci.plugins.workflow.cps.CpsScmFlowDefinition" plugin="workflow-cps@2.28">
+    <scm class="hudson.plugins.git.GitSCM" plugin="git@3.0.5">
+      <configVersion>2</configVersion>
+      <userRemoteConfigs>
+        <hudson.plugins.git.UserRemoteConfig>
+          <name>origin-pull</name>
+          <refspec>+refs/pull/${GITHUB_PR_NUMBER}/head:refs/remotes/origin-pull/pull/${GITHUB_PR_NUMBER}/head</refspec>
+          <url>https://github.com/istio/mixer</url>
+        </hudson.plugins.git.UserRemoteConfig>
+      </userRemoteConfigs>
+      <branches>
+        <hudson.plugins.git.BranchSpec>
+          <name>origin-pull/pull/${GITHUB_PR_NUMBER}/head</name>
+        </hudson.plugins.git.BranchSpec>
+      </branches>
+      <doGenerateSubmoduleConfigurations>false</doGenerateSubmoduleConfigurations>
+      <submoduleCfg class="list"/>
+      <extensions/>
+    </scm>
+    <scriptPath>Jenkinsfile</scriptPath>
+  </definition>
+  <triggers/>
+</flow-definition>
\ No newline at end of file
diff --git a/jenkins_home/jobs/proxy/config.xml b/jenkins_home/jobs/proxy/config.xml
index 538815e282c..509193a0a9d 100644
--- a/jenkins_home/jobs/proxy/config.xml
+++ b/jenkins_home/jobs/proxy/config.xml
@@ -1,9 +1,9 @@
 <?xml version='1.0' encoding='UTF-8'?>
-<com.cloudbees.hudson.plugins.folder.Folder plugin="cloudbees-folder@5.17">
+<com.cloudbees.hudson.plugins.folder.Folder plugin="cloudbees-folder@5.18">
   <actions/>
   <description></description>
   <properties>
-    <org.jenkinsci.plugins.pipeline.modeldefinition.config.FolderConfig plugin="pipeline-model-definition@1.0">
+    <org.jenkinsci.plugins.pipeline.modeldefinition.config.FolderConfig plugin="pipeline-model-definition@1.0.2">
       <dockerLabel></dockerLabel>
       <registry plugin="docker-commons@1.6"/>
     </org.jenkinsci.plugins.pipeline.modeldefinition.config.FolderConfig>
diff --git a/jenkins_home/jobs/proxy/jobs/postsubmit/config.xml b/jenkins_home/jobs/proxy/jobs/postsubmit/config.xml
index ba8683cbaba..9ce54c716a1 100644
--- a/jenkins_home/jobs/proxy/jobs/postsubmit/config.xml
+++ b/jenkins_home/jobs/proxy/jobs/postsubmit/config.xml
@@ -12,7 +12,7 @@
         <artifactNumToKeep>-1</artifactNumToKeep>
       </strategy>
     </jenkins.model.BuildDiscarderProperty>
-    <com.coravy.hudson.plugins.github.GithubProjectProperty plugin="github@1.26.0">
+    <com.coravy.hudson.plugins.github.GithubProjectProperty plugin="github@1.26.1">
       <projectUrl>https://github.com/istio/proxy/</projectUrl>
       <displayName></displayName>
     </com.coravy.hudson.plugins.github.GithubProjectProperty>
@@ -40,9 +40,13 @@
     </hudson.plugins.throttleconcurrents.ThrottleJobProperty>
     <org.jenkinsci.plugins.workflow.job.properties.PipelineTriggersJobProperty>
       <triggers>
-        <com.cloudbees.jenkins.GitHubPushTrigger plugin="github@1.26.0">
+        <com.cloudbees.jenkins.GitHubPushTrigger plugin="github@1.26.1">
           <spec></spec>
         </com.cloudbees.jenkins.GitHubPushTrigger>
+        <hudson.triggers.SCMTrigger>
+          <spec>H/2 * * * *</spec>
+          <ignorePostCommitHooks>false</ignorePostCommitHooks>
+        </hudson.triggers.SCMTrigger>
       </triggers>
     </org.jenkinsci.plugins.workflow.job.properties.PipelineTriggersJobProperty>
   </properties>
diff --git a/jenkins_home/jobs/proxy/jobs/update-stable/config.xml b/jenkins_home/jobs/proxy/jobs/update-stable/config.xml
deleted file mode 100644
index 4ad7d258acb..00000000000
--- a/jenkins_home/jobs/proxy/jobs/update-stable/config.xml
+++ /dev/null
@@ -1,66 +0,0 @@
-<?xml version='1.0' encoding='UTF-8'?>
-<flow-definition plugin="workflow-job@2.10">
-  <actions/>
-  <description></description>
-  <keepDependencies>false</keepDependencies>
-  <properties>
-    <jenkins.model.BuildDiscarderProperty>
-      <strategy class="hudson.tasks.LogRotator">
-        <daysToKeep>15</daysToKeep>
-        <numToKeep>30</numToKeep>
-        <artifactDaysToKeep>-1</artifactDaysToKeep>
-        <artifactNumToKeep>-1</artifactNumToKeep>
-      </strategy>
-    </jenkins.model.BuildDiscarderProperty>
-    <org.jenkinsci.plugins.workflow.job.properties.DisableConcurrentBuildsJobProperty/>
-    <com.sonyericsson.rebuild.RebuildSettings plugin="rebuild@1.25">
-      <autoRebuild>false</autoRebuild>
-      <rebuildDisabled>false</rebuildDisabled>
-    </com.sonyericsson.rebuild.RebuildSettings>
-    <hudson.model.ParametersDefinitionProperty>
-      <parameterDefinitions>
-        <hudson.model.StringParameterDefinition>
-          <name>GITHUB_REPO</name>
-          <description></description>
-          <defaultValue>proxy</defaultValue>
-        </hudson.model.StringParameterDefinition>
-      </parameterDefinitions>
-    </hudson.model.ParametersDefinitionProperty>
-    <hudson.plugins.throttleconcurrents.ThrottleJobProperty plugin="throttle-concurrents@1.9.0">
-      <maxConcurrentPerNode>0</maxConcurrentPerNode>
-      <maxConcurrentTotal>0</maxConcurrentTotal>
-      <categories class="java.util.concurrent.CopyOnWriteArrayList"/>
-      <throttleEnabled>false</throttleEnabled>
-      <throttleOption>project</throttleOption>
-      <limitOneJobWithMatchingParams>false</limitOneJobWithMatchingParams>
-      <paramsToUseForLimit></paramsToUseForLimit>
-    </hudson.plugins.throttleconcurrents.ThrottleJobProperty>
-    <org.jenkinsci.plugins.workflow.job.properties.PipelineTriggersJobProperty>
-      <triggers>
-        <hudson.triggers.TimerTrigger>
-          <spec>H * * * * </spec>
-        </hudson.triggers.TimerTrigger>
-      </triggers>
-    </org.jenkinsci.plugins.workflow.job.properties.PipelineTriggersJobProperty>
-  </properties>
-  <definition class="org.jenkinsci.plugins.workflow.cps.CpsScmFlowDefinition" plugin="workflow-cps@2.26">
-    <scm class="hudson.plugins.git.GitSCM" plugin="git@3.0.5">
-      <configVersion>2</configVersion>
-      <userRemoteConfigs>
-        <hudson.plugins.git.UserRemoteConfig>
-          <url>https://github.com/istio/istio-testing</url>
-        </hudson.plugins.git.UserRemoteConfig>
-      </userRemoteConfigs>
-      <branches>
-        <hudson.plugins.git.BranchSpec>
-          <name>stable</name>
-        </hudson.plugins.git.BranchSpec>
-      </branches>
-      <doGenerateSubmoduleConfigurations>false</doGenerateSubmoduleConfigurations>
-      <submoduleCfg class="list"/>
-      <extensions/>
-    </scm>
-    <scriptPath>fastForward.groovy</scriptPath>
-  </definition>
-  <triggers/>
-</flow-definition>
\ No newline at end of file
diff --git a/jenkins_home/org.jenkinsci.plugins.workflow.flow.FlowExecutionList.xml b/jenkins_home/org.jenkinsci.plugins.workflow.flow.FlowExecutionList.xml
index 3631c709996..6df03a85c01 100644
--- a/jenkins_home/org.jenkinsci.plugins.workflow.flow.FlowExecutionList.xml
+++ b/jenkins_home/org.jenkinsci.plugins.workflow.flow.FlowExecutionList.xml
@@ -1,7 +1,7 @@
 <?xml version='1.0' encoding='UTF-8'?>
 <list>
   <flow-owner plugin="workflow-job@2.10">
-    <job>proxy/presubmit</job>
-    <id>137</id>
+    <job>mixer/postsubmit</job>
+    <id>4</id>
   </flow-owner>
 </list>
\ No newline at end of file
diff --git a/jenkins_home/plugins/github.jpi b/jenkins_home/plugins/github.jpi
index 186ab932d33..296e5bd65be 100644
Binary files a/jenkins_home/plugins/github.jpi and b/jenkins_home/plugins/github.jpi differ
diff --git a/jenkins_home/scriptApproval.xml b/jenkins_home/scriptApproval.xml
index 7c7e63cab09..2500c087422 100644
--- a/jenkins_home/scriptApproval.xml
+++ b/jenkins_home/scriptApproval.xml
@@ -1,18 +1,10 @@
 <?xml version='1.0' encoding='UTF-8'?>
-<scriptApproval plugin="script-security@1.25">
+<scriptApproval plugin="script-security@1.26">
   <approvedScriptHashes/>
-  <approvedSignatures>
-    <string>staticMethod org.codehaus.groovy.runtime.DefaultGroovyMethods get java.util.Map java.lang.Object java.lang.Object</string>
-  </approvedSignatures>
+  <approvedSignatures/>
   <aclApprovedSignatures/>
   <approvedClasspathEntries/>
   <pendingScripts/>
-  <pendingSignatures>
-    <pendingSignature>
-      <context/>
-      <signature>method groovy.lang.GroovyObject invokeMethod java.lang.String java.lang.Object</signature>
-      <dangerous>true</dangerous>
-    </pendingSignature>
-  </pendingSignatures>
+  <pendingSignatures/>
   <pendingClasspathEntries/>
 </scriptApproval>
\ No newline at end of file
diff --git a/resources/release-docker b/resources/release-docker
index f6aaf7652d2..be9a1fb2272 100755
--- a/resources/release-docker
+++ b/resources/release-docker
@@ -40,7 +40,7 @@ fi
 set -ex
 
 for IMAGE in "${IMAGES[@]}"; do
-  bazel ${BAZEL_STARTUP_ARGS} run ${BAZEL_ARGS} "//docker:${IMAGE}"
+  bazel ${BAZEL_STARTUP_ARGS} run ${BAZEL_ARGS} "//docker:${IMAGE}" istio/docker:"${IMAGE}"
   for TAG in "${TAGS[@]}"; do
     docker tag istio/docker:"${IMAGE}" "${HUB}/${IMAGE}:${TAG}"
     docker push "${HUB}/${IMAGE}:${TAG}"
diff --git a/scripts/backup_jenkins_home b/scripts/backup_jenkins_home
index 3030557c53d..ea551b2c81a 100755
--- a/scripts/backup_jenkins_home
+++ b/scripts/backup_jenkins_home
@@ -8,8 +8,9 @@ export DEBIAN_FRONTEND=noninteractive
 
 NAMESPACE='jenkins'
 APP='master'
+BUCKET='gs://istio-tools/jenkins-secrets'
 
-BASH_SCRIPT='''BACKUP_FILES="$(find /var/jenkins_home \
+BACKUP_HOME='''BACKUP_FILES="$(find /var/jenkins_home \
   \( -not -path "/var/jenkins_home/*/*" -and \
      -wholename "/var/jenkins_home/*.xml" \) -o \
   \( -wholename "/var/jenkins_home/jobs/*/config.xml" \
@@ -18,6 +19,17 @@ BASH_SCRIPT='''BACKUP_FILES="$(find /var/jenkins_home \
 
 tar czf - ${BACKUP_FILES}'''
 
+BACKUP_SECRETS='''BACKUP_FILES="$(find /var/jenkins_home \
+  -wholename "/var/jenkins_home/secrets/*")"
+
+tar czf - ${BACKUP_FILES}'''
+
+GIT_FILES="$(git status -s)"
+[[ -z "${GIT_FILES}" ]] \
+  || error_exit "You have modified files. Please commit or reset your workspace."
+
+rm -rf jenkins_home/*
+
 POD_NAME="$(kubectl get pods \
   --selector=app="${APP}" \
   -n "${NAMESPACE}" \
@@ -25,6 +37,14 @@ POD_NAME="$(kubectl get pods \
 
 echo "Getting backup data from pod ${POD_NAME} in ns ${NAMESPACE}"
 
-kubectl exec "${POD_NAME}" -n "${NAMESPACE}" -- /bin/bash -c "${BASH_SCRIPT}" \
+kubectl exec "${POD_NAME}" -n "${NAMESPACE}" -- /bin/bash -c "${BACKUP_HOME}" \
   | tar zxvf - --strip-components 2 -C "${ROOT}/jenkins_home"
 
+git add .
+git commit -m "Backup Jenkins Home"
+
+COMMIT="$(git rev-parse --verify HEAD)"
+ARCHIVE="${BUCKET}/secrets-${COMMIT}.tar.gz"
+
+kubectl exec "${POD_NAME}" -n "${NAMESPACE}" -- /bin/bash -c "${BACKUP_SECRETS}" \
+  | gsutil cp - "${ARCHIVE}"