Transfer mbed-tls jobs from the production to the staging

Signed-off-by: Arthur She <arthur.she@linaro.org>
Change-Id: Iadede430cf1bba8310ce19f4183507047c441cc5
diff --git a/Mbed-TLS.yaml b/Mbed-TLS.yaml
new file mode 100644
index 0000000..6cd18ff
--- /dev/null
+++ b/Mbed-TLS.yaml
@@ -0,0 +1,19 @@
+#-------------------------------------------------------------------------------
+# Copyright (c) 2021, Arm Limited. All rights reserved.
+#
+# SPDX-License-Identifier: BSD-3-Clause
+#
+#-------------------------------------------------------------------------------
+
+- view:
+    name: Mbed-TLS
+    view-type: list
+    regex: mbed.*
+    columns:
+     - status
+     - weather
+     - job
+     - last-success
+     - last-failure
+     - last-duration
+     - build-button
diff --git a/mbed-tls-nightly-tests.yaml b/mbed-tls-nightly-tests.yaml
new file mode 100644
index 0000000..b59444f
--- /dev/null
+++ b/mbed-tls-nightly-tests.yaml
@@ -0,0 +1,135 @@
+- job:
+    concurrent: true
+    description: Mbed TLS Nightly Tests
+    disabled: false
+    name: mbed-tls-nightly-tests
+    parameters:
+    - string:
+        default: https://github.com/Mbed-TLS/mbedtls.git
+        description: Enter mbed TLS repo/fork
+        name: MBED_TLS_REPO
+        trim: 'false'
+    - string:
+        default: development
+        description: Enter branch or commit to test
+        name: MBED_TLS_BRANCH
+        trim: 'false'
+    - bool:
+        default: true
+        description: |-
+          Run basic-build-test.sh
+
+          (Note, this does not work on mbedtls-2.1).
+        name: RUN_BASIC_BUILD_TEST
+    - bool:
+        default: true
+        description: Run all.sh
+        name: RUN_ALL_SH
+    - bool:
+        default: true
+        description: Run Windows tests
+        name: RUN_WINDOWS_TEST
+    - bool:
+        default: false
+        description: Import mbed TLS into mbed-os master and test mbed TLS authcrypt
+          example.
+        name: TEST_MBED_OS_AUTHCRYPT_EXAMPLE
+    - bool:
+        default: false
+        description: Import mbed TLS into mbed-os master and test mbed TLS benchmark
+          example.
+        name: TEST_MBED_OS_BENCHMARK_EXAMPLE
+    - bool:
+        default: false
+        description: Import mbed TLS into mbed-os master and test mbed TLS hashing
+          example.
+        name: TEST_MBED_OS_HASHING_EXAMPLE
+    - bool:
+        default: false
+        description: Import mbed TLS into mbed-os master and test mbed TLS tls-client
+          example.
+        name: TEST_MBED_OS_TLS_CLIENT_EXAMPLE
+    - string:
+        default: https://github.com/ARMmbed/mbed-os.git
+        description: Enter the Mbed OS repo or fork
+        name: MBED_OS_REPO
+        trim: 'false'
+    - string:
+        default: master
+        description: |-
+          Enter branch or commit to test.
+
+          By default we test with the HEAD of the master branch, which is NOT a fixed release.
+        name: MBED_OS_BRANCH
+        trim: 'false'
+    - string:
+        default: https://github.com/ARMmbed/mbed-os-example-tls.git
+        description: |-
+          Enter the Mbed OS examples repo or fork.
+
+          This defaults to the main repository the examples are held in.
+        name: MBED_OS_TLS_EXAMPLES_REPO
+        trim: 'false'
+    - string:
+        default: master
+        description: |-
+          Enter branch or commit to test.
+
+          This defaults to the HEAD of the master branch.
+        name: MBED_OS_TLS_EXAMPLES_BRANCH
+        trim: 'false'
+    - choice:
+        choices:
+        - Pull Request
+        - Mbed OS Gold Boards
+        - Mbed OS Silver Boards
+        - Mbed OS Gold Boards + Mbed OS Silver Boards
+        description: |-
+          Pull Request - Boards tested in the Pull Request job<br>
+
+          For the list of Mbed OS Gold and Silver boards, see <a href="https://confluence.arm.com/display/IoTBU/ISG+Device+SW+SUT+list">here</a>
+        name: PLATFORMS_TO_TEST
+    - string:
+        default: arthur.she@linaro.org,CE-OSS-Firmware-Crypto-TLS@arm.com,darryl.green@arm.com
+        description: ''
+        name: TEST_PASS_EMAIL_ADDRESS
+        trim: 'false'
+    - string:
+        default: arthur.she@linaro.org,CE-OSS-Firmware-Crypto-TLS@arm.com,darryl.green@arm.com
+        description: ''
+        name: TEST_FAIL_EMAIL_ADDRESS
+        trim: 'false'
+    - bool:
+        default: false
+        description: Push head to coverity branch, triggering a scan (development only)
+        name: PUSH_COVERITY
+    pipeline-scm:
+      lightweight-checkout: true
+      scm:
+      - git:
+          branches:
+          - 'master'
+          url: https://github.com/Mbed-TLS/mbedtls-test.git
+      script-path: vars/mbedtls-release-Jenkinsfile
+    project-type: pipeline
+    properties:
+    - build-blocker:
+        block-level: GLOBAL
+        blocking-jobs: []
+        queue-scanning: DISABLED
+        use-build-blocker: false
+    - build-discarder:
+        artifact-days-to-keep: -1
+        artifact-num-to-keep: -1
+        days-to-keep: 60
+        num-to-keep: 100
+    - inject:
+        enabled: true
+        keep-build-variables: true
+        keep-system-variables: true
+        load-from-master: false
+        override-build-parameters: false
+        properties-content: GIT_CREDENTIALS_ID=mbedtls-github-token
+    triggers:
+    - parameterized-timer:
+        cron: "H(0-29) 0 * * * %MBED_TLS_BRANCH=development \nH(0-29) 2 * * * %MBED_TLS_BRANCH=mbedtls-2.28"
diff --git a/mbed-tls-pr-head.yaml b/mbed-tls-pr-head.yaml
new file mode 100644
index 0000000..479d71e
--- /dev/null
+++ b/mbed-tls-pr-head.yaml
@@ -0,0 +1,47 @@
+- job:
+    name: mbed-tls-pr-head
+    description: 'Job for testing mbed tls PR heads'
+    project-type: multibranch
+    disabled: true
+    prune-dead-branches: true
+    days-to-keep: 60
+    num-to-keep: 1000
+    script-path: tests/.jenkins/Jenkinsfile
+    properties:
+      - raw:
+          xml: |
+            <org.jenkinsci.plugins.workflow.libs.FolderLibraries plugin="workflow-cps-global-lib@2.9">
+              <libraries>
+                <org.jenkinsci.plugins.workflow.libs.LibraryConfiguration>
+                  <name>mbedtls-test</name>
+                  <retriever class="org.jenkinsci.plugins.workflow.libs.SCMSourceRetriever">
+                    <scm class="org.jenkinsci.plugins.github_branch_source.GitHubSCMSource" plugin="github-branch-source@2.9.1">
+                      <repoOwner>Mbed-TLS</repoOwner>
+                      <repository>mbedtls-test</repository>
+                      <repositoryUrl>https://github.com/Mbed-TLS/mbedtls-test.git</repositoryUrl>
+                    </scm>
+                  </retriever>
+                  <defaultVersion>master</defaultVersion>
+                  <implicit>true</implicit>
+                  <allowVersionOverride>true</allowVersionOverride>
+                  <includeInChangesets>true</includeInChangesets>
+                </org.jenkinsci.plugins.workflow.libs.LibraryConfiguration>
+              </libraries>
+            </org.jenkinsci.plugins.workflow.libs.FolderLibraries>
+    scm:
+    - github:
+        api-uri: https://api.github.com
+        credentials-id: mbedtls-github-token
+        repo-owner: Mbed-TLS
+        repo: mbedtls
+        repository-url: https://github.com/Mbed-TLS/mbedtls.git
+        branch-discovery: no-pr
+        discover-pr-forks-strategy: both
+        discover-pr-forks-trust: permission
+        discover-pr-origin: both
+        head-filter-regex: '(?!^PR-(1824)-(merge|head)$)(PR-\d+-head)'
+        submodule:
+          disable: false
+          recursive: true
+          tracking: false
+          parent-credentials: false
diff --git a/mbed-tls-pr-merge.yaml b/mbed-tls-pr-merge.yaml
new file mode 100644
index 0000000..c031f19
--- /dev/null
+++ b/mbed-tls-pr-merge.yaml
@@ -0,0 +1,46 @@
+- job:
+    name: mbed-tls-pr-merge
+    description: 'Job for testing PRs merged with the target branch head'
+    project-type: multibranch
+    prune-dead-branches: true
+    days-to-keep: 60
+    num-to-keep: 1000
+    script-path: tests/.jenkins/Jenkinsfile
+    properties:
+      - raw:
+          xml: |
+            <org.jenkinsci.plugins.workflow.libs.FolderLibraries plugin="workflow-cps-global-lib@2.9">
+              <libraries>
+                <org.jenkinsci.plugins.workflow.libs.LibraryConfiguration>
+                  <name>mbedtls-test</name>
+                  <retriever class="org.jenkinsci.plugins.workflow.libs.SCMSourceRetriever">
+                    <scm class="org.jenkinsci.plugins.github_branch_source.GitHubSCMSource" plugin="github-branch-source@2.9.1">
+                      <repoOwner>Mbed-TLS</repoOwner>
+                      <repository>mbedtls-test</repository>
+                      <repositoryUrl>https://github.com/Mbed-TLS/mbedtls-test.git</repositoryUrl>
+                    </scm>
+                  </retriever>
+                  <defaultVersion>master</defaultVersion>
+                  <implicit>true</implicit>
+                  <allowVersionOverride>true</allowVersionOverride>
+                  <includeInChangesets>true</includeInChangesets>
+                </org.jenkinsci.plugins.workflow.libs.LibraryConfiguration>
+              </libraries>
+            </org.jenkinsci.plugins.workflow.libs.FolderLibraries>
+    scm:
+    - github:
+        api-uri: https://api.github.com
+        credentials-id: mbedtls-github-token
+        repo-owner: Mbed-TLS
+        repo: mbedtls
+        repository-url: https://github.com/Mbed-TLS/mbedtls.git
+        branch-discovery: no-pr
+        discover-pr-forks-strategy: both
+        discover-pr-forks-trust: permission
+        discover-pr-origin: both
+        head-filter-regex: '(?!^PR-(1824)-(merge|head)$)(PR-\d+-merge)'
+        submodule:
+          disable: false
+          recursive: true
+          tracking: false
+          parent-credentials: false
diff --git a/mbed-tls-restricted-pr-ci-testing.yaml b/mbed-tls-restricted-pr-ci-testing.yaml
new file mode 100644
index 0000000..071bdfe
--- /dev/null
+++ b/mbed-tls-restricted-pr-ci-testing.yaml
@@ -0,0 +1,67 @@
+- job:
+    name: mbed-tls-restricted-pr-ci-testing
+    description: 'mbedtls CI testing job'
+    project-type: multibranch
+    prune-dead-branches: true
+    script-path: tests/.jenkins/Jenkinsfile
+    properties:
+      - raw:
+          xml: |
+            <org.jenkinsci.plugins.workflow.libs.FolderLibraries plugin="workflow-cps-global-lib@2.9">
+              <libraries>
+                <org.jenkinsci.plugins.workflow.libs.LibraryConfiguration>
+                  <name>mbedtls-test</name>
+                  <retriever class="org.jenkinsci.plugins.workflow.libs.SCMSourceRetriever">
+                    <scm class="org.jenkinsci.plugins.github_branch_source.GitHubSCMSource" plugin="github-branch-source@2.9.1">
+                      <repoOwner>Mbed-TLS</repoOwner>
+                      <repository>mbedtls-test</repository>
+                      <repositoryUrl>https://github.com/Mbed-TLS/mbedtls-test.git</repositoryUrl>
+                      <traits>
+                        <org.jenkinsci.plugins.github__branch__source.BranchDiscoveryTrait>
+                          <strategyId>1</strategyId>
+                        </org.jenkinsci.plugins.github__branch__source.BranchDiscoveryTrait>
+                        <org.jenkinsci.plugins.github__branch__source.OriginPullRequestDiscoveryTrait>
+                          <strategyId>2</strategyId>
+                        </org.jenkinsci.plugins.github__branch__source.OriginPullRequestDiscoveryTrait>
+                        <org.jenkinsci.plugins.github__branch__source.ForkPullRequestDiscoveryTrait>
+                          <strategyId>2</strategyId>
+                          <trust class="org.jenkinsci.plugins.github_branch_source.ForkPullRequestDiscoveryTrait$TrustPermission"/>
+                        </org.jenkinsci.plugins.github__branch__source.ForkPullRequestDiscoveryTrait>
+                      </traits>
+                    </scm>
+                  </retriever>
+                  <defaultVersion>staging/pr-ci-testing</defaultVersion>
+                  <implicit>true</implicit>
+                  <allowVersionOverride>true</allowVersionOverride>
+                  <includeInChangesets>true</includeInChangesets>
+                </org.jenkinsci.plugins.workflow.libs.LibraryConfiguration>
+              </libraries>
+            </org.jenkinsci.plugins.workflow.libs.FolderLibraries>
+    scm:
+    - github:
+        api-uri: https://api.github.com
+        credentials-id: mbedtls-github-token
+        repo-owner: Mbed-TLS
+        repo: mbedtls-restricted
+        repository-url: https://github.com/Mbed-TLS/mbedtls-restricted.git
+        branch-discovery: no-pr
+        discover-pr-origin: both
+        head-filter-regex: 'PR-(758|759|850|906|916|919)-.*'
+        property-strategies:
+          named-branches:
+            defaults:
+            - suppress-scm-triggering: true
+            exceptions:
+              # Temporarily enable automatic scm triggering of PR-850-merge and PR-906-merge,
+              # to test the BranchIndexingCause-specific branches modified by Mbed-TLS/mbedtls-test#71
+            - exception:
+                branch-name: 'PR-850-merge,PR-906-merge'
+                properties:
+                - suppress-scm-triggering: false
+        submodule:
+          disable: false
+          recursive: true
+          tracking: false
+          parent-credentials: false
+        ssh-checkout:
+          credentials: mbedtls-github-ssh
diff --git a/mbed-tls-restricted-pr-test-parametrized.yaml b/mbed-tls-restricted-pr-test-parametrized.yaml
new file mode 100644
index 0000000..655f0c7
--- /dev/null
+++ b/mbed-tls-restricted-pr-test-parametrized.yaml
@@ -0,0 +1,142 @@
+- job:
+    concurrent: true
+    description: Mbed TLS parametrized test PR job
+    disabled: false
+    name: mbed-tls-restricted-pr-test-parametrized
+    parameters:
+    - string:
+        default: development
+        description: Set this to the branch you would be targeting for a PR
+        name: CHANGE_TARGET
+        trim: 'false'
+    - string:
+        default: ssh://git@github.com/Mbed-TLS/mbedtls-restricted.git
+        description: Enter mbed TLS repo/fork
+        name: MBED_TLS_REPO
+        trim: 'true'
+    - string:
+        default: development-restricted
+        description: Enter branch or commit to test
+        name: MBED_TLS_BRANCH
+        trim: 'false'
+    - string:
+        default: ''
+        description: |-
+          Enter Mbed Crypto repo/fork. Note this *ONLY* influences the Mbed OS tests at this time.
+
+          Optional - if omitted will use what's embedded in the Mbed TLS submodule.
+        name: MBED_CRYPTO_REPO
+        trim: 'false'
+    - string:
+        default: ''
+        description: |-
+          Enter Mbed Crypto branch. Note this *ONLY* influences the Mbed OS tests at this time.
+
+          Optional - if omitted will use what's embedded in the Mbed TLS submodule.
+        name: MBED_CRYPTO_BRANCH
+        trim: 'false'
+    - string:
+        default: https://github.com/ARMmbed/mbed-os.git
+        description: Enter the Mbed OS repo or fork
+        name: MBED_OS_REPO
+        trim: 'false'
+    - string:
+        default: master
+        description: |-
+          Enter branch or commit to test.
+
+          By default we test with the HEAD of the master branch, which is NOT a fixed release.
+        name: MBED_OS_BRANCH
+        trim: 'false'
+    - string:
+        default: https://github.com/ARMmbed/mbed-os-example-tls.git
+        description: |-
+          Enter the Mbed OS examples repo or fork.
+
+          This defaults to the main repository the examples are held in.
+        name: MBED_OS_TLS_EXAMPLES_REPO
+        trim: 'false'
+    - string:
+        default: master
+        description: |-
+          Enter branch or commit to test.
+
+          This defaults to the HEAD of the master branch.
+        name: MBED_OS_TLS_EXAMPLES_BRANCH
+        trim: 'false'
+    - bool:
+        default: false
+        description: Run the basic linux PR job scripts.
+        name: RUN_LINUX_SCRIPTS
+    - bool:
+        default: false
+        description: Run the basic FreeBSD PR job scripts
+        name: RUN_FREEBSD
+    - bool:
+        default: false
+        description: Run Windows tests
+        name: RUN_WINDOWS_TEST
+    - bool:
+        default: false
+        description: Run all.sh tests
+        name: RUN_ALL_SH
+    - bool:
+        default: false
+        description: Run the ABI checking test
+        name: RUN_ABI_CHECK
+    - bool:
+        default: false
+        description: Import mbed TLS into mbed-os master and test mbed TLS authcrypt
+          example.
+        name: TEST_MBED_OS_AUTHCRYPT_EXAMPLE
+    - bool:
+        default: false
+        description: Import mbed TLS into mbed-os master and test mbed TLS benchmark
+          example.
+        name: TEST_MBED_OS_BENCHMARK_EXAMPLE
+    - bool:
+        default: false
+        description: Import mbed TLS into mbed-os master and test mbed TLS hashing
+          example.
+        name: TEST_MBED_OS_HASHING_EXAMPLE
+    - bool:
+        default: false
+        description: Import mbed TLS into mbed-os master and test mbed TLS tls-client
+          example.
+        name: TEST_MBED_OS_TLS_CLIENT_EXAMPLE
+    - git-parameter:
+        name: TEST_BRANCH
+        description: Branch or tag in https://github.com/Mbed-TLS/mbedtls-test.git (forks are not supported)
+        type: PT_BRANCH_TAG
+        quickFilterEnabled: True
+        defaultValue: master
+    pipeline-scm:
+      lightweight-checkout: false
+      scm:
+      - git:
+          branches:
+          - ${TEST_BRANCH}
+          url: https://github.com/Mbed-TLS/mbedtls-test.git
+      script-path: vars/mbedtls-pr-test-Jenkinsfile
+    project-type: pipeline
+    properties:
+    - build-blocker:
+        block-level: GLOBAL
+        blocking-jobs: []
+        queue-scanning: DISABLED
+        use-build-blocker: false
+    - build-discarder:
+        artifact-days-to-keep: -1
+        artifact-num-to-keep: -1
+        days-to-keep: 60
+        num-to-keep: 100
+    - github:
+        url: https://github.com/Mbed-TLS/mbedtls
+    - inject:
+        enabled: true
+        keep-build-variables: true
+        keep-system-variables: true
+        load-from-master: false
+        override-build-parameters: false
+        properties-content: GIT_CREDENTIALS_ID=mbedtls-github-ssh
+    triggers: []
diff --git a/mbed-tls-restricted-pr.yaml b/mbed-tls-restricted-pr.yaml
new file mode 100644
index 0000000..e8ad39f
--- /dev/null
+++ b/mbed-tls-restricted-pr.yaml
@@ -0,0 +1,48 @@
+- job:
+    name: mbed-tls-restricted-pr
+    description: 'mbedtls restricted PR job'
+    project-type: multibranch
+    prune-dead-branches: true
+    days-to-keep: -1
+    num-to-keep: -1
+    script-path: tests/.jenkins/Jenkinsfile
+    properties:
+      - raw:
+          xml: |
+            <org.jenkinsci.plugins.workflow.libs.FolderLibraries plugin="workflow-cps-global-lib@2.9">
+              <libraries>
+                <org.jenkinsci.plugins.workflow.libs.LibraryConfiguration>
+                  <name>mbedtls-test</name>
+                  <retriever class="org.jenkinsci.plugins.workflow.libs.SCMSourceRetriever">
+                    <scm class="org.jenkinsci.plugins.github_branch_source.GitHubSCMSource" plugin="github-branch-source@2.9.1">
+                      <repoOwner>Mbed-TLS</repoOwner>
+                      <repository>mbedtls-test</repository>
+                      <repositoryUrl>https://github.com/Mbed-TLS/mbedtls-test.git</repositoryUrl>
+                    </scm>
+                  </retriever>
+                  <defaultVersion>master</defaultVersion>
+                  <implicit>true</implicit>
+                  <allowVersionOverride>true</allowVersionOverride>
+                  <includeInChangesets>true</includeInChangesets>
+                </org.jenkinsci.plugins.workflow.libs.LibraryConfiguration>
+              </libraries>
+            </org.jenkinsci.plugins.workflow.libs.FolderLibraries>
+    scm:
+    - github:
+        api-uri: https://api.github.com
+        credentials-id: mbedtls-github-token
+        repo-owner: Mbed-TLS
+        repo: mbedtls-restricted
+        repository-url: ssh://git@github.com/Mbed-TLS/mbedtls-restricted.git
+        branch-discovery: no-pr
+        discover-pr-forks-strategy: both
+        discover-pr-forks-trust: permission
+        discover-pr-origin: both
+        head-filter-regex: '(?!^PR-(758|759|850|906|916|919)-(merge|head)$)(PR-\d+-(merge|head))'
+        submodule:
+          disable: false
+          recursive: true
+          tracking: false
+          parent-credentials: false
+        ssh-checkout:
+          credentials: mbedtls-github-ssh
diff --git a/mbedtls-dockerfile-builder.yaml b/mbedtls-dockerfile-builder.yaml
index 1ea8bd6..6057f0a 100644
--- a/mbedtls-dockerfile-builder.yaml
+++ b/mbedtls-dockerfile-builder.yaml
@@ -72,7 +72,7 @@
     name: mbedtls-dockerfile-builder
     parameters:
     - string:
-        default: https://github.com/ARMmbed/mbedtls-test
+        default: https://github.com/Mbed-TLS/mbedtls-test.git
         description: Enter mbed TLS test repo/fork
         name: MBED_TLS_TEST_REPO
         trim: 'false'
diff --git a/mbedtls-pr-multibranch.yaml b/mbedtls-pr-multibranch.yaml
new file mode 100644
index 0000000..d87deb9
--- /dev/null
+++ b/mbedtls-pr-multibranch.yaml
@@ -0,0 +1,59 @@
+- job:
+    name: mbedtls-pr-multibranch
+    description: 'mbedtls PR job'
+    project-type: multibranch
+    prune-dead-branches: true
+    script-path: tests/.jenkins/Jenkinsfile
+    properties:
+      - raw:
+          xml: |
+            <org.jenkinsci.plugins.workflow.libs.FolderLibraries plugin="workflow-cps-global-lib@2.9">
+              <libraries>
+                <org.jenkinsci.plugins.workflow.libs.LibraryConfiguration>
+                  <name>mbedtls-test</name>
+                  <retriever class="org.jenkinsci.plugins.workflow.libs.SCMSourceRetriever">
+                    <scm class="org.jenkinsci.plugins.github_branch_source.GitHubSCMSource" plugin="github-branch-source@2.9.1">
+                      <repoOwner>Mbed-TLS</repoOwner>
+                      <repository>mbedtls-test</repository>
+                      <repositoryUrl>https://github.com/Mbed-TLS/mbedtls-test.git</repositoryUrl>
+                      <traits>
+                        <org.jenkinsci.plugins.github__branch__source.BranchDiscoveryTrait>
+                          <strategyId>1</strategyId>
+                        </org.jenkinsci.plugins.github__branch__source.BranchDiscoveryTrait>
+                        <org.jenkinsci.plugins.github__branch__source.OriginPullRequestDiscoveryTrait>
+                          <strategyId>2</strategyId>
+                        </org.jenkinsci.plugins.github__branch__source.OriginPullRequestDiscoveryTrait>
+                        <org.jenkinsci.plugins.github__branch__source.ForkPullRequestDiscoveryTrait>
+                          <strategyId>2</strategyId>
+                          <trust class="org.jenkinsci.plugins.github_branch_source.ForkPullRequestDiscoveryTrait$TrustPermission"/>
+                        </org.jenkinsci.plugins.github__branch__source.ForkPullRequestDiscoveryTrait>
+                      </traits>
+                    </scm>
+                  </retriever>
+                  <defaultVersion>master</defaultVersion>
+                  <implicit>true</implicit>
+                  <allowVersionOverride>true</allowVersionOverride>
+                  <includeInChangesets>true</includeInChangesets>
+                </org.jenkinsci.plugins.workflow.libs.LibraryConfiguration>
+              </libraries>
+            </org.jenkinsci.plugins.workflow.libs.FolderLibraries>
+    scm:
+    - github:
+        api-uri: https://api.github.com
+        credentials-id: mbedtls-github-token
+        repo-owner: Mbed-TLS
+        repo: mbedtls
+        repository-url: https://github.com/Mbed-TLS/mbedtls.git
+        branch-discovery: no-pr
+        discover-pr-origin: both
+        discover-pr-forks-strategy: both
+        discover-pr-forks-trust: permission
+        head-filter-regex: '(?!^PR-(1824)-(merge|head)$)(PR-\d+-(merge|head))'
+        property-strategies:
+            all-branches:
+                - suppress-scm-triggering: true
+        submodule:
+          disable: false
+          recursive: true
+          tracking: false
+          parent-credentials: false
diff --git a/mbedtls-release-ci-testing.yaml b/mbedtls-release-ci-testing.yaml
new file mode 100644
index 0000000..960a92c
--- /dev/null
+++ b/mbedtls-release-ci-testing.yaml
@@ -0,0 +1,151 @@
+- job:
+    concurrent: true
+    description: Mbed TLS Release job (new)
+    disabled: false
+    name: mbedtls-release-ci-testing
+    parameters:
+    - string:
+        default: https://github.com/Mbed-TLS/mbedtls.git
+        description: Enter mbed TLS repo/fork
+        name: MBED_TLS_REPO
+        trim: 'true'
+    - string:
+        default: development
+        description: Enter branch or commit to test
+        name: MBED_TLS_BRANCH
+        trim: 'true'
+    - bool:
+        default: false
+        description: Run basic-build-test.sh (test coverage measurement)
+        name: RUN_BASIC_BUILD_TEST
+    - bool:
+        default: false
+        description: Run all.sh on Linux
+        name: RUN_ALL_SH
+    - bool:
+        default: false
+        description: Run a selection of all.sh on FreeBSD
+        name: RUN_FREEBSD
+    - bool:
+        default: false
+        description: Run Windows tests
+        name: RUN_WINDOWS_TEST
+    - bool:
+        default: false
+        description: Import mbed TLS into mbed-os master and test mbed TLS authcrypt
+          example.
+        name: TEST_MBED_OS_AUTHCRYPT_EXAMPLE
+    - bool:
+        default: false
+        description: Import mbed TLS into mbed-os master and test mbed TLS benchmark
+          example.
+        name: TEST_MBED_OS_BENCHMARK_EXAMPLE
+    - bool:
+        default: false
+        description: Import mbed TLS into mbed-os master and test mbed TLS hashing
+          example.
+        name: TEST_MBED_OS_HASHING_EXAMPLE
+    - bool:
+        default: false
+        description: Import mbed TLS into mbed-os master and test mbed TLS tls-client
+          example.
+        name: TEST_MBED_OS_TLS_CLIENT_EXAMPLE
+    - string:
+        default: ''
+        description: |-
+          Enter Mbed Crypto repo/fork. Note this *ONLY* influences the Mbed OS tests at this time.
+
+          Optional - if omitted will use what's embedded in the Mbed TLS submodule.
+        name: MBED_CRYPTO_REPO
+        trim: 'true'
+    - string:
+        default: ''
+        description: |-
+          Enter Mbed Crypto branch. Note this *ONLY* influences the Mbed OS tests at this time.
+
+          Optional - if omitted will use what's embedded in the Mbed TLS submodule.
+        name: MBED_CRYPTO_BRANCH
+        trim: 'true'
+    - string:
+        default: https://github.com/ARMmbed/mbed-os.git
+        description: Enter the Mbed OS repo or fork
+        name: MBED_OS_REPO
+        trim: 'true'
+    - string:
+        default: master
+        description: |-
+          Enter branch or commit to test.
+
+          By default we test with the HEAD of the master branch, which is NOT a fixed release.
+        name: MBED_OS_BRANCH
+        trim: 'true'
+    - string:
+        default: https://github.com/ARMmbed/mbed-os-example-tls.git
+        description: |-
+          Enter the Mbed OS examples repo or fork.
+
+          This defaults to the main repository the examples are held in.
+        name: MBED_OS_TLS_EXAMPLES_REPO
+        trim: 'true'
+    - string:
+        default: master
+        description: |-
+          Enter branch or commit to test.
+
+          This defaults to the HEAD of the master branch.
+        name: MBED_OS_TLS_EXAMPLES_BRANCH
+        trim: 'true'
+    - choice:
+        choices:
+        - Pull Request
+        - Mbed OS Gold Boards
+        - Mbed OS Silver Boards
+        - Mbed OS Gold Boards + Mbed OS Silver Boards
+        description: |-
+          Pull Request - Boards tested in the Pull Request job<br>
+
+          For the list of Mbed OS Gold and Silver boards, see <a href="https://confluence.arm.com/display/IoTBU/ISG+Device+SW+SUT+list">here</a>
+        name: PLATFORMS_TO_TEST
+    - bool:
+        default: false
+        description: Push head to coverity branch, triggering a scan (development only)
+        name: PUSH_COVERITY
+    - git-parameter:
+        name: TEST_BRANCH
+        description: Branch or tag in https://github.com/Mbed-TLS/mbedtls-test.git (forks are not supported)
+        type: PT_BRANCH_TAG
+        quickFilterEnabled: True
+        defaultValue: master
+    pipeline-scm:
+      lightweight-checkout: false
+      scm:
+      - git:
+          branches:
+          - ${TEST_BRANCH}
+          url: https://github.com/Mbed-TLS/mbedtls-test.git
+      script-path: vars/mbedtls-release-Jenkinsfile
+    project-type: pipeline
+    properties:
+    - build-blocker:
+        block-level: GLOBAL
+        blocking-jobs: []
+        queue-scanning: DISABLED
+        use-build-blocker: false
+    - build-discarder:
+        artifact-days-to-keep: -1
+        artifact-num-to-keep: -1
+        days-to-keep: 60
+        num-to-keep: 30
+    - github:
+        url: https://github.com/Mbed-TLS/mbedtls
+    - inject:
+        enabled: true
+        keep-build-variables: true
+        keep-system-variables: true
+        load-from-master: false
+        override-build-parameters: false
+        properties-content: |-
+          GIT_CREDENTIALS_ID=mbedtls-github-ssh
+          TEST_PASS_EMAIL_ADDRESS=arthur.she@linaro.org,CE-OSS-Firmware-Crypto-TLS@arm.com,darryl.green@arm.com
+          TEST_FAIL_EMAIL_ADDRESS=arthur.she@linaro.org,CE-OSS-Firmware-Crypto-TLS@arm.com,darryl.green@arm.com
+
diff --git a/mbedtls-repo-scan-scheduler.yaml b/mbedtls-repo-scan-scheduler.yaml
new file mode 100644
index 0000000..6ae8b77
--- /dev/null
+++ b/mbedtls-repo-scan-scheduler.yaml
@@ -0,0 +1,21 @@
+- job:
+    concurrent: true
+    description: |-
+      This job exists to schedule the nightly repository scans.
+      There appears to be an issue with automatically scanning if there are more than one multibranch pipelines on the same repo.
+    disabled: false
+    dsl: |-
+      build job: "mbed-tls-pr-merge", wait: false, propagate: false
+      build job: "mbed-tls-pr-head", wait: false, propagate: false
+      build job: "mbed-tls-restricted-pr", wait: false, propagate: false
+    name: mbedtls-repo-scan-scheduler
+    project-type: pipeline
+    sandbox: true
+    triggers:
+    - timed: 0 20 * * *
+    properties:
+    - build-blocker:
+        block-level: GLOBAL
+        blocking-jobs: []
+        queue-scanning: DISABLED
+        use-build-blocker: false
diff --git a/mbedtls-restricted-release-new.yaml b/mbedtls-restricted-release-new.yaml
new file mode 100644
index 0000000..3291b7e
--- /dev/null
+++ b/mbedtls-restricted-release-new.yaml
@@ -0,0 +1,137 @@
+- job:
+    concurrent: true
+    description: Mbed TLS Release job (new)
+    disabled: false
+    name: mbedtls-restricted-release-new
+    parameters:
+    - string:
+        default: ssh://git@github.com/Mbed-TLS/mbedtls-restricted.git
+        description: Enter mbed TLS repo/fork
+        name: MBED_TLS_REPO
+        trim: 'true'
+    - string:
+        default: development-restricted
+        description: Enter branch or commit to test
+        name: MBED_TLS_BRANCH
+        trim: 'true'
+    - bool:
+        default: true
+        description: Run basic-build-test.sh
+        name: RUN_BASIC_BUILD_TEST
+    - bool:
+        default: true
+        description: Run all.sh on Linux
+        name: RUN_ALL_SH
+    - bool:
+        default: false
+        description: Run Windows tests
+        name: RUN_WINDOWS_TEST
+    - bool:
+        default: false
+        description: Import mbed TLS into mbed-os master and test mbed TLS authcrypt
+          example.
+        name: TEST_MBED_OS_AUTHCRYPT_EXAMPLE
+    - bool:
+        default: false
+        description: Import mbed TLS into mbed-os master and test mbed TLS benchmark
+          example.
+        name: TEST_MBED_OS_BENCHMARK_EXAMPLE
+    - bool:
+        default: false
+        description: Import mbed TLS into mbed-os master and test mbed TLS hashing
+          example.
+        name: TEST_MBED_OS_HASHING_EXAMPLE
+    - bool:
+        default: false
+        description: Import mbed TLS into mbed-os master and test mbed TLS tls-client
+          example.
+        name: TEST_MBED_OS_TLS_CLIENT_EXAMPLE
+    - string:
+        default: ''
+        description: |-
+          Enter Mbed Crypto repo/fork. Note this *ONLY* influences the Mbed OS tests at this time.
+
+          Optional - if omitted will use what's embedded in the Mbed TLS submodule.
+        name: MBED_CRYPTO_REPO
+        trim: 'true'
+    - string:
+        default: ''
+        description: |-
+          Enter Mbed Crypto branch. Note this *ONLY* influences the Mbed OS tests at this time.
+
+          Optional - if omitted will use what's embedded in the Mbed TLS submodule.
+        name: MBED_CRYPTO_BRANCH
+        trim: 'true'
+    - string:
+        default: https://github.com/ARMmbed/mbed-os.git
+        description: Enter the Mbed OS repo or fork
+        name: MBED_OS_REPO
+        trim: 'true'
+    - string:
+        default: master
+        description: |-
+          Enter branch or commit to test.
+
+          By default we test with the HEAD of the master branch, which is NOT a fixed release.
+        name: MBED_OS_BRANCH
+        trim: 'true'
+    - string:
+        default: https://github.com/ARMmbed/mbed-os-example-tls.git
+        description: |-
+          Enter the Mbed OS examples repo or fork.
+
+          This defaults to the main repository the examples are held in.
+        name: MBED_OS_TLS_EXAMPLES_REPO
+        trim: 'true'
+    - string:
+        default: master
+        description: |-
+          Enter branch or commit to test.
+
+          This defaults to the HEAD of the master branch.
+        name: MBED_OS_TLS_EXAMPLES_BRANCH
+        trim: 'true'
+    - choice:
+        choices:
+        - Pull Request
+        - Mbed OS Gold Boards
+        - Mbed OS Silver Boards
+        - Mbed OS Gold Boards + Mbed OS Silver Boards
+        description: |-
+          Pull Request - Boards tested in the Pull Request job<br>
+
+          For the list of Mbed OS Gold and Silver boards, see <a href="https://confluence.arm.com/display/IoTBU/ISG+Device+SW+SUT+list">here</a>
+        name: PLATFORMS_TO_TEST
+    pipeline-scm:
+      lightweight-checkout: true
+      scm:
+      - git:
+          branches:
+          - 'master'
+          url: https://github.com/Mbed-TLS/mbedtls-test.git
+      script-path: vars/mbedtls-release-Jenkinsfile
+    project-type: pipeline
+    properties:
+    - build-blocker:
+        block-level: GLOBAL
+        blocking-jobs: []
+        queue-scanning: DISABLED
+        use-build-blocker: false
+    - build-discarder:
+        artifact-days-to-keep: -1
+        artifact-num-to-keep: -1
+        days-to-keep: 60
+        num-to-keep: 100
+    - github:
+        url: https://github.com/Mbed-TLS/mbedtls
+    - inject:
+        enabled: true
+        keep-build-variables: true
+        keep-system-variables: true
+        load-from-master: false
+        override-build-parameters: false
+        properties-content: |-
+          GIT_CREDENTIALS_ID=mbedtls-github-ssh
+          TEST_PASS_EMAIL_ADDRESS=mbed-tls-eng@arm.com;jaeden.amero@arm.com;arthur.she@linaro.org
+          TEST_FAIL_EMAIL_ADDRESS=mbed-tls-eng@arm.com;jaeden.amero@arm.com;arthur.she@linaro.org
+    triggers: []