diff --git a/manifests/namespaced-install.yaml b/manifests/namespaced-install.yaml
index f5a1e84d7be..c52d2be6baa 100644
--- a/manifests/namespaced-install.yaml
+++ b/manifests/namespaced-install.yaml
@@ -99,6 +99,12 @@ metadata:
   name: pipeline-runner
   namespace: kubeflow
 ---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: proxy-agent-runner
+  namespace: kubeflow
+---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
@@ -362,6 +368,21 @@ rules:
   verbs:
   - '*'
 ---
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: Role
+metadata:
+  labels:
+    app: proxy-agent-runner
+  name: proxy-agent-runner
+  namespace: kubeflow
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - configmaps
+  verbs:
+  - '*'
+---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
@@ -464,6 +485,22 @@ subjects:
   name: pipeline-runner
   namespace: kubeflow
 ---
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: RoleBinding
+metadata:
+  labels:
+    app: proxy-agent-runner
+  name: proxy-agent-runner
+  namespace: kubeflow
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: proxy-agent-runner
+subjects:
+- kind: ServiceAccount
+  name: proxy-agent-runner
+  namespace: kubeflow
+---
 apiVersion: v1
 data:
   config: |
@@ -617,7 +654,7 @@ spec:
       - env:
         - name: NAMESPACE
           value: kubeflow
-        image: gcr.io/ml-pipeline/persistenceagent:0.1.20
+        image: gcr.io/ml-pipeline/persistenceagent:0.1.21
         imagePullPolicy: IfNotPresent
         name: ml-pipeline-persistenceagent
       serviceAccountName: ml-pipeline-persistenceagent
@@ -642,7 +679,7 @@ spec:
       - env:
         - name: NAMESPACE
           value: kubeflow
-        image: gcr.io/ml-pipeline/scheduledworkflow:0.1.20
+        image: gcr.io/ml-pipeline/scheduledworkflow:0.1.21
         imagePullPolicy: IfNotPresent
         name: ml-pipeline-scheduledworkflow
       serviceAccountName: ml-pipeline-scheduledworkflow
@@ -667,7 +704,7 @@ spec:
       - env:
         - name: MINIO_NAMESPACE
           value: kubeflow
-        image: gcr.io/ml-pipeline/frontend:0.1.20
+        image: gcr.io/ml-pipeline/frontend:0.1.21
         imagePullPolicy: IfNotPresent
         name: ml-pipeline-ui
         ports:
@@ -694,7 +731,7 @@ spec:
       - env:
         - name: MAX_NUM_VIEWERS
           value: "50"
-        image: gcr.io/ml-pipeline/viewer-crd-controller:0.1.20
+        image: gcr.io/ml-pipeline/viewer-crd-controller:0.1.21
         imagePullPolicy: Always
         name: ml-pipeline-viewer-crd
       serviceAccountName: ml-pipeline-viewer-crd-service-account
@@ -721,7 +758,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: gcr.io/ml-pipeline/api-server:0.1.20
+        image: gcr.io/ml-pipeline/api-server:0.1.21
         imagePullPolicy: IfNotPresent
         name: ml-pipeline-api-server
         ports:
@@ -762,6 +799,28 @@ spec:
         persistentVolumeClaim:
           claimName: mysql-pv-claim
 ---
+apiVersion: apps/v1beta2
+kind: Deployment
+metadata:
+  labels:
+    app: proxy-agent
+  name: proxy-agent
+  namespace: kubeflow
+spec:
+  selector:
+    matchLabels:
+      app: proxy-agent
+  template:
+    metadata:
+      labels:
+        app: proxy-agent
+    spec:
+      containers:
+      - image: gcr.io/ml-pipeline/inverse-proxy-agent:0.1.21
+        imagePullPolicy: IfNotPresent
+        name: proxy-agent
+      serviceAccountName: proxy-agent-runner
+---
 apiVersion: extensions/v1beta1
 kind: Deployment
 metadata: