diff --git a/README.md b/README.md
index 4a0eccaeb9..f47714c8dd 100644
--- a/README.md
+++ b/README.md
@@ -56,7 +56,7 @@ This repo periodically syncs all official Kubeflow components from their respect
 | Volumes Web App | apps/volumes-web-app/upstream | [v1.3.0-rc.1](https://github.com/kubeflow/kubeflow/tree/v1.3.0-rc.1/components/crud-web-apps/volumes/manifests) |
 | Katib | apps/katib/upstream | [origin/release-0.11 (7d7c34c72ab8bce74262c7abbe55ef9312291219)](https://github.com/kubeflow/katib/tree/7d7c34c72ab8bce74262c7abbe55ef9312291219/manifests/v1beta1) |
 | KFServing | apps/kfserving/upstream | [origin/release-0.5 (e189a510121c09f764f749143b80f6ee6baaf48b)](https://github.com/kubeflow/kfserving/tree/e189a510121c09f764f749143b80f6ee6baaf48b/config) |
-| Kubeflow Pipelines | apps/pipeline/upstream | [1.5.0-rc.2](https://github.com/kubeflow/pipelines/tree/1.5.0-rc.2/manifests/kustomize) |
+| Kubeflow Pipelines | apps/pipeline/upstream | [1.5.0](https://github.com/kubeflow/pipelines/tree/1.5.0/manifests/kustomize) |
 | Kubeflow Tekton Pipelines | apps/kfp-tekton/upstream | [v0.8.0-rc0](https://github.com/kubeflow/kfp-tekton/tree/v0.8.0-rc0/manifests/kustomize) |
 
 ## Installation
diff --git a/apps/pipeline/upstream/base/cache-deployer/kustomization.yaml b/apps/pipeline/upstream/base/cache-deployer/kustomization.yaml
index e3dace8c88..7f44d93fd3 100644
--- a/apps/pipeline/upstream/base/cache-deployer/kustomization.yaml
+++ b/apps/pipeline/upstream/base/cache-deployer/kustomization.yaml
@@ -8,4 +8,4 @@ commonLabels:
   app: cache-deployer
 images:
   - name: gcr.io/ml-pipeline/cache-deployer
-    newTag: 1.5.0-rc.2
+    newTag: 1.5.0
diff --git a/apps/pipeline/upstream/base/cache/kustomization.yaml b/apps/pipeline/upstream/base/cache/kustomization.yaml
index 323a3da5b3..ecaa5a919b 100644
--- a/apps/pipeline/upstream/base/cache/kustomization.yaml
+++ b/apps/pipeline/upstream/base/cache/kustomization.yaml
@@ -10,4 +10,4 @@ commonLabels:
   app: cache-server
 images:
   - name: gcr.io/ml-pipeline/cache-server
-    newTag: 1.5.0-rc.2
+    newTag: 1.5.0
diff --git a/apps/pipeline/upstream/base/installs/generic/pipeline-install-config.yaml b/apps/pipeline/upstream/base/installs/generic/pipeline-install-config.yaml
index 729c42b713..e85e16a294 100644
--- a/apps/pipeline/upstream/base/installs/generic/pipeline-install-config.yaml
+++ b/apps/pipeline/upstream/base/installs/generic/pipeline-install-config.yaml
@@ -4,7 +4,7 @@ metadata:
   name: pipeline-install-config
 data:
   appName: pipeline
-  appVersion: 1.5.0-rc.2
+  appVersion: 1.5.0
   dbHost: mysql
   dbPort: "3306"
   mlmdDb: metadb
diff --git a/apps/pipeline/upstream/base/installs/multi-user/istio-authorization-config.yaml b/apps/pipeline/upstream/base/installs/multi-user/istio-authorization-config.yaml
index a988072b4f..a9a45e5eb1 100644
--- a/apps/pipeline/upstream/base/installs/multi-user/istio-authorization-config.yaml
+++ b/apps/pipeline/upstream/base/installs/multi-user/istio-authorization-config.yaml
@@ -70,19 +70,6 @@ spec:
   rules:
   - {}
 
----
-apiVersion: security.istio.io/v1beta1
-kind: AuthorizationPolicy
-metadata:
-  name: metadata-grpc-service
-spec:
-  action: ALLOW
-  selector:
-    matchLabels:
-      component: metadata-grpc-server
-  rules:
-  - {}
-
 ---
 apiVersion: "networking.istio.io/v1alpha3"
 kind: DestinationRule
diff --git a/apps/pipeline/upstream/base/installs/multi-user/virtual-service.yaml b/apps/pipeline/upstream/base/installs/multi-user/virtual-service.yaml
index d82e06e29c..2b7991a9a0 100644
--- a/apps/pipeline/upstream/base/installs/multi-user/virtual-service.yaml
+++ b/apps/pipeline/upstream/base/installs/multi-user/virtual-service.yaml
@@ -19,27 +19,3 @@ spec:
         port:
           number: 80
     timeout: 300s
-
----
-
-apiVersion: networking.istio.io/v1alpha3
-kind: VirtualService
-metadata:
-  name: metadata-grpc
-  namespace: kubeflow
-spec:
-  gateways:
-  - kubeflow-gateway
-  hosts:
-  - '*'
-  http:
-  - match:
-    - uri:
-        prefix: /ml_metadata
-    rewrite:
-      uri: /ml_metadata
-    route:
-    - destination:
-        host: ml-pipeline-ui.$(kfp-namespace).svc.cluster.local
-        port:
-          number: 80
diff --git a/apps/pipeline/upstream/base/metadata/base/kustomization.yaml b/apps/pipeline/upstream/base/metadata/base/kustomization.yaml
index bd9dcd1620..70aed653b1 100644
--- a/apps/pipeline/upstream/base/metadata/base/kustomization.yaml
+++ b/apps/pipeline/upstream/base/metadata/base/kustomization.yaml
@@ -9,4 +9,4 @@ resources:
   - metadata-grpc-sa.yaml
 images:
   - name: gcr.io/ml-pipeline/metadata-envoy
-    newTag: 1.5.0-rc.2
+    newTag: 1.5.0
diff --git a/apps/pipeline/upstream/base/metadata/options/istio/destination-rule.yaml b/apps/pipeline/upstream/base/metadata/options/istio/destination-rule.yaml
new file mode 100644
index 0000000000..e2ce8ca972
--- /dev/null
+++ b/apps/pipeline/upstream/base/metadata/options/istio/destination-rule.yaml
@@ -0,0 +1,9 @@
+apiVersion: networking.istio.io/v1alpha3
+kind: DestinationRule
+metadata:
+  name: metadata-grpc-service
+spec:
+  host: metadata-grpc-service.kubeflow.svc.cluster.local
+  trafficPolicy:
+    tls:
+      mode: ISTIO_MUTUAL
diff --git a/apps/pipeline/upstream/base/metadata/options/istio/istio-authorization-policy.yaml b/apps/pipeline/upstream/base/metadata/options/istio/istio-authorization-policy.yaml
new file mode 100644
index 0000000000..8f41789e8e
--- /dev/null
+++ b/apps/pipeline/upstream/base/metadata/options/istio/istio-authorization-policy.yaml
@@ -0,0 +1,11 @@
+apiVersion: security.istio.io/v1beta1
+kind: AuthorizationPolicy
+metadata:
+  name: metadata-grpc-service
+spec:
+  action: ALLOW
+  selector:
+    matchLabels:
+      component: metadata-grpc-server
+  rules:
+  - {}
diff --git a/apps/pipeline/upstream/base/metadata/options/istio/kustomization.yaml b/apps/pipeline/upstream/base/metadata/options/istio/kustomization.yaml
new file mode 100644
index 0000000000..029a6937ca
--- /dev/null
+++ b/apps/pipeline/upstream/base/metadata/options/istio/kustomization.yaml
@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+- istio-authorization-policy.yaml
+- destination-rule.yaml
+- virtual-service.yaml
diff --git a/apps/pipeline/upstream/base/metadata/options/istio/virtual-service.yaml b/apps/pipeline/upstream/base/metadata/options/istio/virtual-service.yaml
new file mode 100644
index 0000000000..01e000b65c
--- /dev/null
+++ b/apps/pipeline/upstream/base/metadata/options/istio/virtual-service.yaml
@@ -0,0 +1,21 @@
+apiVersion: networking.istio.io/v1alpha3
+kind: VirtualService
+metadata:
+  name: metadata-grpc
+  namespace: kubeflow
+spec:
+  gateways:
+  - kubeflow-gateway
+  hosts:
+  - '*'
+  http:
+  - match:
+    - uri:
+        prefix: /ml_metadata
+    rewrite:
+      uri: /ml_metadata
+    route:
+    - destination:
+        host: metadata-envoy-service.kubeflow.svc.cluster.local
+        port:
+          number: 9090
diff --git a/apps/pipeline/upstream/base/pipeline/kustomization.yaml b/apps/pipeline/upstream/base/pipeline/kustomization.yaml
index cd9c2efa9b..a2255c21f6 100644
--- a/apps/pipeline/upstream/base/pipeline/kustomization.yaml
+++ b/apps/pipeline/upstream/base/pipeline/kustomization.yaml
@@ -36,14 +36,14 @@ resources:
   - viewer-sa.yaml
 images:
   - name: gcr.io/ml-pipeline/api-server
-    newTag: 1.5.0-rc.2
+    newTag: 1.5.0
   - name: gcr.io/ml-pipeline/persistenceagent
-    newTag: 1.5.0-rc.2
+    newTag: 1.5.0
   - name: gcr.io/ml-pipeline/scheduledworkflow
-    newTag: 1.5.0-rc.2
+    newTag: 1.5.0
   - name: gcr.io/ml-pipeline/frontend
-    newTag: 1.5.0-rc.2
+    newTag: 1.5.0
   - name: gcr.io/ml-pipeline/viewer-crd-controller
-    newTag: 1.5.0-rc.2
+    newTag: 1.5.0
   - name: gcr.io/ml-pipeline/visualization-server
-    newTag: 1.5.0-rc.2
+    newTag: 1.5.0
diff --git a/apps/pipeline/upstream/base/pipeline/metadata-writer/kustomization.yaml b/apps/pipeline/upstream/base/pipeline/metadata-writer/kustomization.yaml
index 478c1910c7..c9baea3db0 100644
--- a/apps/pipeline/upstream/base/pipeline/metadata-writer/kustomization.yaml
+++ b/apps/pipeline/upstream/base/pipeline/metadata-writer/kustomization.yaml
@@ -7,4 +7,4 @@ resources:
   - metadata-writer-sa.yaml
 images:
   - name: gcr.io/ml-pipeline/metadata-writer
-    newTag: 1.5.0-rc.2
+    newTag: 1.5.0
diff --git a/apps/pipeline/upstream/env/gcp/inverse-proxy/kustomization.yaml b/apps/pipeline/upstream/env/gcp/inverse-proxy/kustomization.yaml
index 8a369d191b..0d4b29ebc9 100644
--- a/apps/pipeline/upstream/env/gcp/inverse-proxy/kustomization.yaml
+++ b/apps/pipeline/upstream/env/gcp/inverse-proxy/kustomization.yaml
@@ -2,7 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 images:
   - name: gcr.io/ml-pipeline/inverse-proxy-agent
-    newTag: 1.5.0-rc.2
+    newTag: 1.5.0
 resources:
   - proxy-configmap.yaml
   - proxy-deployment.yaml
diff --git a/apps/pipeline/upstream/env/platform-agnostic-multi-user-legacy/kustomization.yaml b/apps/pipeline/upstream/env/platform-agnostic-multi-user-legacy/kustomization.yaml
index 0726f51629..6800d9e010 100644
--- a/apps/pipeline/upstream/env/platform-agnostic-multi-user-legacy/kustomization.yaml
+++ b/apps/pipeline/upstream/env/platform-agnostic-multi-user-legacy/kustomization.yaml
@@ -4,6 +4,7 @@ kind: Kustomization
 bases:
   - ../../base/installs/multi-user
   - ../../base/metadata/overlays/db
+  - ../../base/metadata/options/istio
   - ../../third-party/argo/installs/cluster
   - ../../third-party/mysql/base
   - ../../third-party/mysql/options/istio
diff --git a/apps/pipeline/upstream/env/platform-agnostic-multi-user/kustomization.yaml b/apps/pipeline/upstream/env/platform-agnostic-multi-user/kustomization.yaml
index fad0d8290e..1ea99e57ee 100644
--- a/apps/pipeline/upstream/env/platform-agnostic-multi-user/kustomization.yaml
+++ b/apps/pipeline/upstream/env/platform-agnostic-multi-user/kustomization.yaml
@@ -4,6 +4,7 @@ kind: Kustomization
 bases:
   - ../../base/installs/multi-user
   - ../../base/metadata/base
+  - ../../base/metadata/options/istio
   - ../../third-party/argo/installs/cluster
   - ../../third-party/mysql/base
   - ../../third-party/mysql/options/istio
diff --git a/apps/pipeline/upstream/third-party/minio/options/istio/istio-authorization-policy.yaml b/apps/pipeline/upstream/third-party/minio/options/istio/istio-authorization-policy.yaml
index 4c2fdf708b..7247cd34f9 100644
--- a/apps/pipeline/upstream/third-party/minio/options/istio/istio-authorization-policy.yaml
+++ b/apps/pipeline/upstream/third-party/minio/options/istio/istio-authorization-policy.yaml
@@ -1,4 +1,3 @@
-
 apiVersion: security.istio.io/v1beta1
 kind: AuthorizationPolicy
 metadata: