diff --git a/config/jobs/kubernetes-csi/csi-driver-host-path/csi-driver-host-path-config.yaml b/config/jobs/kubernetes-csi/csi-driver-host-path/csi-driver-host-path-config.yaml
index e3d783cbc343..f72533e68388 100644
--- a/config/jobs/kubernetes-csi/csi-driver-host-path/csi-driver-host-path-config.yaml
+++ b/config/jobs/kubernetes-csi/csi-driver-host-path/csi-driver-host-path-config.yaml
@@ -31,7 +31,7 @@ presubmits:
         # unrelated to the PR. Testing against the latest Kubernetes is covered
         # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
         - name: CSI_PROW_KUBERNETES_VERSION
-          value: "1.14.0"
+          value: "1.14.6"
         - name: CSI_PROW_KUBERNETES_DEPLOYMENT
           value: "1.14"
         - name: CSI_PROW_TESTS
@@ -111,7 +111,7 @@ presubmits:
         # unrelated to the PR. Testing against the latest Kubernetes is covered
         # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
         - name: CSI_PROW_KUBERNETES_VERSION
-          value: "1.15.0"
+          value: "1.15.3"
         - name: CSI_PROW_KUBERNETES_DEPLOYMENT
           value: "1.15"
         - name: CSI_PROW_TESTS
@@ -162,7 +162,87 @@ presubmits:
           memory: "9000Mi"
           # during the tests more like 3-20m is used
           cpu: 2000m
-  - name: pull-kubernetes-csi-csi-driver-host-path-alpha-1-15-on-kubernetes-1-15
+  - name: pull-kubernetes-csi-csi-driver-host-path-1-16-on-kubernetes-1-16
+    always_run: true
+    optional: true
+    decorate: true
+    skip_report: false
+    skip_branches: []
+    labels:
+      preset-service-account: "true"
+      preset-dind-enabled: "true"
+      preset-kind-volume-mounts: "true"
+    annotations:
+      testgrid-dashboards: sig-storage-csi-csi-driver-host-path
+      testgrid-tab-name: 1-16-on-kubernetes-1-16
+      description: Kubernetes-CSI pull job in repo csi-driver-host-path for non-alpha tests, using deployment 1.16 on Kubernetes 1.16
+    spec:
+      containers:
+      # We need this image because it has Docker in Docker and go.
+      - image: gcr.io/k8s-testimages/kubekins-e2e:v20191031-df9cbb4-master
+        command:
+        - runner.sh
+        args:
+        - ./.prow.sh
+        env:
+        # We pick some version for which there are pre-built images for kind.
+        # Update only when the newer version is known to not cause issues,
+        # otherwise presubmit jobs may start to fail for reasons that are
+        # unrelated to the PR. Testing against the latest Kubernetes is covered
+        # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
+        - name: CSI_PROW_KUBERNETES_VERSION
+          value: "1.16.2"
+        - name: CSI_PROW_KUBERNETES_DEPLOYMENT
+          value: "1.16"
+        - name: CSI_PROW_TESTS
+          value: "sanity serial parallel"
+        # docker-in-docker needs privileged mode
+        securityContext:
+          privileged: true
+        resources:
+          requests:
+            cpu: 2000m
+  - name: pull-kubernetes-csi-csi-driver-host-path-1-16-on-kubernetes-master
+    # Explicitly needs to be started with /test.
+    # This cannot be enabled by default because there's always the risk
+    # that something changes in master which breaks the pre-merge check.
+    always_run: false
+    optional: true
+    decorate: true
+    skip_report: false
+    labels:
+      preset-service-account: "true"
+      preset-dind-enabled: "true"
+      preset-bazel-remote-cache-enabled: "true"
+      preset-kind-volume-mounts: "true"
+    annotations:
+      testgrid-dashboards: sig-storage-csi-csi-driver-host-path
+      testgrid-tab-name: 1-16-on-kubernetes-master
+      description: Kubernetes-CSI pull job in repo csi-driver-host-path for non-alpha tests, using deployment 1.16 on Kubernetes master
+    spec:
+      containers:
+      # We need this image because it has Docker in Docker and go.
+      - image: gcr.io/k8s-testimages/kubekins-e2e:v20191031-df9cbb4-master
+        command:
+        - runner.sh
+        args:
+        - ./.prow.sh
+        env:
+        - name: CSI_PROW_KUBERNETES_VERSION
+          value: "latest"
+        - name: CSI_PROW_TESTS
+          value: "sanity serial parallel"
+        # docker-in-docker needs privileged mode
+        securityContext:
+          privileged: true
+      resources:
+        requests:
+          # these are both a bit below peak usage during build
+          # this is mostly for building kubernetes
+          memory: "9000Mi"
+          # during the tests more like 3-20m is used
+          cpu: 2000m
+  - name: pull-kubernetes-csi-csi-driver-host-path-alpha-1-16-on-kubernetes-1-16
     always_run: false
     optional: true
     decorate: true
@@ -174,8 +254,8 @@ presubmits:
       preset-kind-volume-mounts: "true"
     annotations:
       testgrid-dashboards: sig-storage-csi-csi-driver-host-path
-      testgrid-tab-name: alpha-1-15-on-kubernetes-1-15
-      description: Kubernetes-CSI pull job in repo csi-driver-host-path for alpha tests, using deployment 1.15 on Kubernetes 1.15
+      testgrid-tab-name: alpha-1-16-on-kubernetes-1-16
+      description: Kubernetes-CSI pull job in repo csi-driver-host-path for alpha tests, using deployment 1.16 on Kubernetes 1.16
     spec:
       containers:
       # We need this image because it has Docker in Docker and go.
@@ -191,9 +271,9 @@ presubmits:
         # unrelated to the PR. Testing against the latest Kubernetes is covered
         # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
         - name: CSI_PROW_KUBERNETES_VERSION
-          value: "1.15.0"
+          value: "1.16.2"
         - name: CSI_PROW_KUBERNETES_DEPLOYMENT
-          value: "1.15"
+          value: "1.16"
         - name: CSI_PROW_TESTS
           value: "serial-alpha parallel-alpha"
         # docker-in-docker needs privileged mode
@@ -202,7 +282,7 @@ presubmits:
         resources:
           requests:
             cpu: 2000m
-  - name: pull-kubernetes-csi-csi-driver-host-path-alpha-1-15-on-kubernetes-master
+  - name: pull-kubernetes-csi-csi-driver-host-path-alpha-1-16-on-kubernetes-master
     # Explicitly needs to be started with /test.
     # This cannot be enabled by default because there's always the risk
     # that something changes in master which breaks the pre-merge check.
@@ -217,8 +297,8 @@ presubmits:
       preset-kind-volume-mounts: "true"
     annotations:
       testgrid-dashboards: sig-storage-csi-csi-driver-host-path
-      testgrid-tab-name: alpha-1-15-on-kubernetes-master
-      description: Kubernetes-CSI pull job in repo csi-driver-host-path for alpha tests, using deployment 1.15 on Kubernetes master
+      testgrid-tab-name: alpha-1-16-on-kubernetes-master
+      description: Kubernetes-CSI pull job in repo csi-driver-host-path for alpha tests, using deployment 1.16 on Kubernetes master
     spec:
       containers:
       # We need this image because it has Docker in Docker and go.
@@ -365,6 +445,49 @@ periodics:
         resources:
           requests:
             cpu: 2000m
+- interval: 6h
+  name: ci-kubernetes-csi-1-14-on-kubernetes-1-16
+  decorate: true
+  extra_refs:
+  - org: kubernetes-csi
+    repo: csi-driver-host-path
+    base_ref: master
+  labels:
+    preset-service-account: "true"
+    preset-dind-enabled: "true"
+    preset-bazel-remote-cache-enabled: "false"
+    preset-kind-volume-mounts: "true"
+  annotations:
+    testgrid-dashboards: sig-storage-csi-ci
+    testgrid-tab-name: 1.14-on-1.16
+    testgrid-alert-email: kubernetes-sig-storage-test-failures@googlegroups.com
+    description: periodic Kubernetes-CSI job for non-alpha tests, using deployment 1.14 on Kubernetes 1.16
+  spec:
+    containers:
+    # We need this image because it has Docker in Docker and go.
+    - image: gcr.io/k8s-testimages/kubekins-e2e:v20191031-df9cbb4-master
+      command:
+      - runner.sh
+      args:
+      - ./.prow.sh
+      env:
+      # TODO: https://github.com/kubernetes-csi/csi-release-tools/issues/39
+      - name: CSI_PROW_KIND_VERSION
+        value: "86bc23d84ac12dcb56a0528890736e2c347c2dc3"
+      - name: CSI_PROW_KUBERNETES_VERSION
+        value: "release-1.16"
+      - name: CSI_PROW_BUILD_JOB
+        value: "false"
+      - name: CSI_PROW_DEPLOYMENT
+        value: "kubernetes-1.14"
+      - name: CSI_PROW_TESTS
+        value: "sanity serial parallel"
+      # docker-in-docker needs privileged mode
+      securityContext:
+        privileged: true
+        resources:
+          requests:
+            cpu: 2000m
 - interval: 6h
   name: ci-kubernetes-csi-1-14-on-kubernetes-master
   decorate: true
@@ -494,6 +617,49 @@ periodics:
         resources:
           requests:
             cpu: 2000m
+- interval: 6h
+  name: ci-kubernetes-csi-1-15-on-kubernetes-1-16
+  decorate: true
+  extra_refs:
+  - org: kubernetes-csi
+    repo: csi-driver-host-path
+    base_ref: master
+  labels:
+    preset-service-account: "true"
+    preset-dind-enabled: "true"
+    preset-bazel-remote-cache-enabled: "false"
+    preset-kind-volume-mounts: "true"
+  annotations:
+    testgrid-dashboards: sig-storage-csi-ci
+    testgrid-tab-name: 1.15-on-1.16
+    testgrid-alert-email: kubernetes-sig-storage-test-failures@googlegroups.com
+    description: periodic Kubernetes-CSI job for non-alpha tests, using deployment 1.15 on Kubernetes 1.16
+  spec:
+    containers:
+    # We need this image because it has Docker in Docker and go.
+    - image: gcr.io/k8s-testimages/kubekins-e2e:v20191031-df9cbb4-master
+      command:
+      - runner.sh
+      args:
+      - ./.prow.sh
+      env:
+      # TODO: https://github.com/kubernetes-csi/csi-release-tools/issues/39
+      - name: CSI_PROW_KIND_VERSION
+        value: "86bc23d84ac12dcb56a0528890736e2c347c2dc3"
+      - name: CSI_PROW_KUBERNETES_VERSION
+        value: "release-1.16"
+      - name: CSI_PROW_BUILD_JOB
+        value: "false"
+      - name: CSI_PROW_DEPLOYMENT
+        value: "kubernetes-1.15"
+      - name: CSI_PROW_TESTS
+        value: "sanity serial parallel"
+      # docker-in-docker needs privileged mode
+      securityContext:
+        privileged: true
+        resources:
+          requests:
+            cpu: 2000m
 - interval: 6h
   name: ci-kubernetes-csi-1-15-on-kubernetes-master
   decorate: true
@@ -538,7 +704,7 @@ periodics:
           requests:
             cpu: 2000m
 - interval: 6h
-  name: ci-kubernetes-csi-alpha-1-15-on-kubernetes-1-15
+  name: ci-kubernetes-csi-1-16-on-kubernetes-1-14
   decorate: true
   extra_refs:
   - org: kubernetes-csi
@@ -551,9 +717,52 @@ periodics:
     preset-kind-volume-mounts: "true"
   annotations:
     testgrid-dashboards: sig-storage-csi-ci
-    testgrid-tab-name: alpha-1.15-on-1.15
+    testgrid-tab-name: 1.16-on-1.14
     testgrid-alert-email: kubernetes-sig-storage-test-failures@googlegroups.com
-    description: periodic Kubernetes-CSI job for alpha tests, using deployment 1.15 on Kubernetes 1.15
+    description: periodic Kubernetes-CSI job for non-alpha tests, using deployment 1.16 on Kubernetes 1.14
+  spec:
+    containers:
+    # We need this image because it has Docker in Docker and go.
+    - image: gcr.io/k8s-testimages/kubekins-e2e:v20191031-df9cbb4-master
+      command:
+      - runner.sh
+      args:
+      - ./.prow.sh
+      env:
+      # TODO: https://github.com/kubernetes-csi/csi-release-tools/issues/39
+      - name: CSI_PROW_KIND_VERSION
+        value: "86bc23d84ac12dcb56a0528890736e2c347c2dc3"
+      - name: CSI_PROW_KUBERNETES_VERSION
+        value: "release-1.14"
+      - name: CSI_PROW_BUILD_JOB
+        value: "false"
+      - name: CSI_PROW_DEPLOYMENT
+        value: "kubernetes-1.16"
+      - name: CSI_PROW_TESTS
+        value: "sanity serial parallel"
+      # docker-in-docker needs privileged mode
+      securityContext:
+        privileged: true
+        resources:
+          requests:
+            cpu: 2000m
+- interval: 6h
+  name: ci-kubernetes-csi-1-16-on-kubernetes-1-15
+  decorate: true
+  extra_refs:
+  - org: kubernetes-csi
+    repo: csi-driver-host-path
+    base_ref: master
+  labels:
+    preset-service-account: "true"
+    preset-dind-enabled: "true"
+    preset-bazel-remote-cache-enabled: "false"
+    preset-kind-volume-mounts: "true"
+  annotations:
+    testgrid-dashboards: sig-storage-csi-ci
+    testgrid-tab-name: 1.16-on-1.15
+    testgrid-alert-email: kubernetes-sig-storage-test-failures@googlegroups.com
+    description: periodic Kubernetes-CSI job for non-alpha tests, using deployment 1.16 on Kubernetes 1.15
   spec:
     containers:
     # We need this image because it has Docker in Docker and go.
@@ -571,7 +780,136 @@ periodics:
       - name: CSI_PROW_BUILD_JOB
         value: "false"
       - name: CSI_PROW_DEPLOYMENT
-        value: "kubernetes-1.15"
+        value: "kubernetes-1.16"
+      - name: CSI_PROW_TESTS
+        value: "sanity serial parallel"
+      # docker-in-docker needs privileged mode
+      securityContext:
+        privileged: true
+        resources:
+          requests:
+            cpu: 2000m
+- interval: 6h
+  name: ci-kubernetes-csi-1-16-on-kubernetes-1-16
+  decorate: true
+  extra_refs:
+  - org: kubernetes-csi
+    repo: csi-driver-host-path
+    base_ref: master
+  labels:
+    preset-service-account: "true"
+    preset-dind-enabled: "true"
+    preset-bazel-remote-cache-enabled: "false"
+    preset-kind-volume-mounts: "true"
+  annotations:
+    testgrid-dashboards: sig-storage-csi-ci
+    testgrid-tab-name: 1.16-on-1.16
+    testgrid-alert-email: kubernetes-sig-storage-test-failures@googlegroups.com
+    description: periodic Kubernetes-CSI job for non-alpha tests, using deployment 1.16 on Kubernetes 1.16
+  spec:
+    containers:
+    # We need this image because it has Docker in Docker and go.
+    - image: gcr.io/k8s-testimages/kubekins-e2e:v20191031-df9cbb4-master
+      command:
+      - runner.sh
+      args:
+      - ./.prow.sh
+      env:
+      # TODO: https://github.com/kubernetes-csi/csi-release-tools/issues/39
+      - name: CSI_PROW_KIND_VERSION
+        value: "86bc23d84ac12dcb56a0528890736e2c347c2dc3"
+      - name: CSI_PROW_KUBERNETES_VERSION
+        value: "release-1.16"
+      - name: CSI_PROW_BUILD_JOB
+        value: "false"
+      - name: CSI_PROW_DEPLOYMENT
+        value: "kubernetes-1.16"
+      - name: CSI_PROW_TESTS
+        value: "sanity serial parallel"
+      # docker-in-docker needs privileged mode
+      securityContext:
+        privileged: true
+        resources:
+          requests:
+            cpu: 2000m
+- interval: 6h
+  name: ci-kubernetes-csi-1-16-on-kubernetes-master
+  decorate: true
+  extra_refs:
+  - org: kubernetes-csi
+    repo: csi-driver-host-path
+    base_ref: master
+  labels:
+    preset-service-account: "true"
+    preset-dind-enabled: "true"
+    preset-bazel-remote-cache-enabled: "true"
+    preset-kind-volume-mounts: "true"
+  annotations:
+    testgrid-dashboards: sig-storage-csi-ci
+    testgrid-tab-name: 1.16-on-master
+    testgrid-alert-email: kubernetes-sig-storage-test-failures@googlegroups.com
+    description: periodic Kubernetes-CSI job for non-alpha tests, using deployment 1.16 on Kubernetes master
+  spec:
+    containers:
+    # We need this image because it has Docker in Docker and go.
+    - image: gcr.io/k8s-testimages/kubekins-e2e:v20191031-df9cbb4-master
+      command:
+      - runner.sh
+      args:
+      - ./.prow.sh
+      env:
+      # TODO: https://github.com/kubernetes-csi/csi-release-tools/issues/39
+      - name: CSI_PROW_KIND_VERSION
+        value: "86bc23d84ac12dcb56a0528890736e2c347c2dc3"
+      - name: CSI_PROW_KUBERNETES_VERSION
+        value: "latest"
+      - name: CSI_PROW_BUILD_JOB
+        value: "false"
+      - name: CSI_PROW_DEPLOYMENT
+        value: "kubernetes-1.16"
+      - name: CSI_PROW_TESTS
+        value: "sanity serial parallel"
+      # docker-in-docker needs privileged mode
+      securityContext:
+        privileged: true
+        resources:
+          requests:
+            cpu: 2000m
+- interval: 6h
+  name: ci-kubernetes-csi-alpha-1-16-on-kubernetes-1-16
+  decorate: true
+  extra_refs:
+  - org: kubernetes-csi
+    repo: csi-driver-host-path
+    base_ref: master
+  labels:
+    preset-service-account: "true"
+    preset-dind-enabled: "true"
+    preset-bazel-remote-cache-enabled: "false"
+    preset-kind-volume-mounts: "true"
+  annotations:
+    testgrid-dashboards: sig-storage-csi-ci
+    testgrid-tab-name: alpha-1.16-on-1.16
+    testgrid-alert-email: kubernetes-sig-storage-test-failures@googlegroups.com
+    description: periodic Kubernetes-CSI job for alpha tests, using deployment 1.16 on Kubernetes 1.16
+  spec:
+    containers:
+    # We need this image because it has Docker in Docker and go.
+    - image: gcr.io/k8s-testimages/kubekins-e2e:v20191031-df9cbb4-master
+      command:
+      - runner.sh
+      args:
+      - ./.prow.sh
+      env:
+      # TODO: https://github.com/kubernetes-csi/csi-release-tools/issues/39
+      - name: CSI_PROW_KIND_VERSION
+        value: "86bc23d84ac12dcb56a0528890736e2c347c2dc3"
+      - name: CSI_PROW_KUBERNETES_VERSION
+        value: "release-1.16"
+      - name: CSI_PROW_BUILD_JOB
+        value: "false"
+      - name: CSI_PROW_DEPLOYMENT
+        value: "kubernetes-1.16"
       - name: CSI_PROW_TESTS
         value: "serial-alpha parallel-alpha"
       # docker-in-docker needs privileged mode
@@ -610,7 +948,7 @@ periodics:
       - name: CSI_PROW_KIND_VERSION
         value: "86bc23d84ac12dcb56a0528890736e2c347c2dc3"
       - name: CSI_PROW_KUBERNETES_VERSION
-        value: "1.14.0"
+        value: "1.14.6"
       - name: CSI_PROW_BUILD_JOB
         value: "false"
       # Replace images....
@@ -659,7 +997,56 @@ periodics:
       - name: CSI_PROW_KIND_VERSION
         value: "86bc23d84ac12dcb56a0528890736e2c347c2dc3"
       - name: CSI_PROW_KUBERNETES_VERSION
-        value: "1.15"
+        value: "1.15.3"
+      - name: CSI_PROW_BUILD_JOB
+        value: "false"
+      # Replace images....
+      - name: CSI_PROW_HOSTPATH_CANARY
+        value: "canary"
+      # ... but the RBAC rules only when testing on master.
+      # The other jobs test against the unmodified deployment for
+      # that Kubernetes version, i.e. with the original RBAC rules.
+      - name: UPDATE_RBAC_RULES
+        value: "false"
+      - name: CSI_PROW_TESTS
+        value: "sanity serial parallel"
+      # docker-in-docker needs privileged mode
+      securityContext:
+        privileged: true
+        resources:
+          requests:
+            cpu: 2000m
+- interval: 6h
+  name: ci-kubernetes-csi-canary-on-kubernetes-1-16
+  decorate: true
+  extra_refs:
+  - org: kubernetes-csi
+    repo: csi-driver-host-path
+    base_ref: master
+  labels:
+    preset-service-account: "true"
+    preset-dind-enabled: "true"
+    preset-bazel-remote-cache-enabled: "true"
+    preset-kind-volume-mounts: "true"
+  annotations:
+    testgrid-dashboards: sig-storage-csi-ci
+    testgrid-tab-name: canary-on-1.16
+    testgrid-alert-email: kubernetes-sig-storage-test-failures@googlegroups.com
+    description: periodic Kubernetes-CSI job for non-alpha tests, using deployment canary on Kubernetes 1.16
+  spec:
+    containers:
+    # We need this image because it has Docker in Docker and go.
+    - image: gcr.io/k8s-testimages/kubekins-e2e:v20191031-df9cbb4-master
+      command:
+      - runner.sh
+      args:
+      - ./.prow.sh
+      env:
+      # TODO: https://github.com/kubernetes-csi/csi-release-tools/issues/39
+      - name: CSI_PROW_KIND_VERSION
+        value: "86bc23d84ac12dcb56a0528890736e2c347c2dc3"
+      - name: CSI_PROW_KUBERNETES_VERSION
+        value: "1.16.2"
       - name: CSI_PROW_BUILD_JOB
         value: "false"
       # Replace images....
diff --git a/config/jobs/kubernetes-csi/external-attacher/external-attacher-config.yaml b/config/jobs/kubernetes-csi/external-attacher/external-attacher-config.yaml
index 3ab0e360c6ed..209f1e39cce8 100644
--- a/config/jobs/kubernetes-csi/external-attacher/external-attacher-config.yaml
+++ b/config/jobs/kubernetes-csi/external-attacher/external-attacher-config.yaml
@@ -31,7 +31,7 @@ presubmits:
         # unrelated to the PR. Testing against the latest Kubernetes is covered
         # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
         - name: CSI_PROW_KUBERNETES_VERSION
-          value: "1.14.0"
+          value: "1.14.6"
         - name: CSI_PROW_KUBERNETES_DEPLOYMENT
           value: "1.14"
         - name: CSI_PROW_TESTS
@@ -111,7 +111,7 @@ presubmits:
         # unrelated to the PR. Testing against the latest Kubernetes is covered
         # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
         - name: CSI_PROW_KUBERNETES_VERSION
-          value: "1.15.0"
+          value: "1.15.3"
         - name: CSI_PROW_KUBERNETES_DEPLOYMENT
           value: "1.15"
         - name: CSI_PROW_TESTS
@@ -162,7 +162,87 @@ presubmits:
           memory: "9000Mi"
           # during the tests more like 3-20m is used
           cpu: 2000m
-  - name: pull-kubernetes-csi-external-attacher-alpha-1-15-on-kubernetes-1-15
+  - name: pull-kubernetes-csi-external-attacher-1-16-on-kubernetes-1-16
+    always_run: true
+    optional: true
+    decorate: true
+    skip_report: false
+    skip_branches: ["^(release-0.2.0|release-0.3.0|release-0.4|release-1.0|v0.1.0)$"]
+    labels:
+      preset-service-account: "true"
+      preset-dind-enabled: "true"
+      preset-kind-volume-mounts: "true"
+    annotations:
+      testgrid-dashboards: sig-storage-csi-external-attacher
+      testgrid-tab-name: 1-16-on-kubernetes-1-16
+      description: Kubernetes-CSI pull job in repo external-attacher for non-alpha tests, using deployment 1.16 on Kubernetes 1.16
+    spec:
+      containers:
+      # We need this image because it has Docker in Docker and go.
+      - image: gcr.io/k8s-testimages/kubekins-e2e:v20191031-df9cbb4-master
+        command:
+        - runner.sh
+        args:
+        - ./.prow.sh
+        env:
+        # We pick some version for which there are pre-built images for kind.
+        # Update only when the newer version is known to not cause issues,
+        # otherwise presubmit jobs may start to fail for reasons that are
+        # unrelated to the PR. Testing against the latest Kubernetes is covered
+        # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
+        - name: CSI_PROW_KUBERNETES_VERSION
+          value: "1.16.2"
+        - name: CSI_PROW_KUBERNETES_DEPLOYMENT
+          value: "1.16"
+        - name: CSI_PROW_TESTS
+          value: "sanity serial parallel"
+        # docker-in-docker needs privileged mode
+        securityContext:
+          privileged: true
+        resources:
+          requests:
+            cpu: 2000m
+  - name: pull-kubernetes-csi-external-attacher-1-16-on-kubernetes-master
+    # Explicitly needs to be started with /test.
+    # This cannot be enabled by default because there's always the risk
+    # that something changes in master which breaks the pre-merge check.
+    always_run: false
+    optional: true
+    decorate: true
+    skip_report: false
+    labels:
+      preset-service-account: "true"
+      preset-dind-enabled: "true"
+      preset-bazel-remote-cache-enabled: "true"
+      preset-kind-volume-mounts: "true"
+    annotations:
+      testgrid-dashboards: sig-storage-csi-external-attacher
+      testgrid-tab-name: 1-16-on-kubernetes-master
+      description: Kubernetes-CSI pull job in repo external-attacher for non-alpha tests, using deployment 1.16 on Kubernetes master
+    spec:
+      containers:
+      # We need this image because it has Docker in Docker and go.
+      - image: gcr.io/k8s-testimages/kubekins-e2e:v20191031-df9cbb4-master
+        command:
+        - runner.sh
+        args:
+        - ./.prow.sh
+        env:
+        - name: CSI_PROW_KUBERNETES_VERSION
+          value: "latest"
+        - name: CSI_PROW_TESTS
+          value: "sanity serial parallel"
+        # docker-in-docker needs privileged mode
+        securityContext:
+          privileged: true
+      resources:
+        requests:
+          # these are both a bit below peak usage during build
+          # this is mostly for building kubernetes
+          memory: "9000Mi"
+          # during the tests more like 3-20m is used
+          cpu: 2000m
+  - name: pull-kubernetes-csi-external-attacher-alpha-1-16-on-kubernetes-1-16
     always_run: false
     optional: true
     decorate: true
@@ -174,8 +254,8 @@ presubmits:
       preset-kind-volume-mounts: "true"
     annotations:
       testgrid-dashboards: sig-storage-csi-external-attacher
-      testgrid-tab-name: alpha-1-15-on-kubernetes-1-15
-      description: Kubernetes-CSI pull job in repo external-attacher for alpha tests, using deployment 1.15 on Kubernetes 1.15
+      testgrid-tab-name: alpha-1-16-on-kubernetes-1-16
+      description: Kubernetes-CSI pull job in repo external-attacher for alpha tests, using deployment 1.16 on Kubernetes 1.16
     spec:
       containers:
       # We need this image because it has Docker in Docker and go.
@@ -191,9 +271,9 @@ presubmits:
         # unrelated to the PR. Testing against the latest Kubernetes is covered
         # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
         - name: CSI_PROW_KUBERNETES_VERSION
-          value: "1.15.0"
+          value: "1.16.2"
         - name: CSI_PROW_KUBERNETES_DEPLOYMENT
-          value: "1.15"
+          value: "1.16"
         - name: CSI_PROW_TESTS
           value: "serial-alpha parallel-alpha"
         # docker-in-docker needs privileged mode
@@ -202,7 +282,7 @@ presubmits:
         resources:
           requests:
             cpu: 2000m
-  - name: pull-kubernetes-csi-external-attacher-alpha-1-15-on-kubernetes-master
+  - name: pull-kubernetes-csi-external-attacher-alpha-1-16-on-kubernetes-master
     # Explicitly needs to be started with /test.
     # This cannot be enabled by default because there's always the risk
     # that something changes in master which breaks the pre-merge check.
@@ -217,8 +297,8 @@ presubmits:
       preset-kind-volume-mounts: "true"
     annotations:
       testgrid-dashboards: sig-storage-csi-external-attacher
-      testgrid-tab-name: alpha-1-15-on-kubernetes-master
-      description: Kubernetes-CSI pull job in repo external-attacher for alpha tests, using deployment 1.15 on Kubernetes master
+      testgrid-tab-name: alpha-1-16-on-kubernetes-master
+      description: Kubernetes-CSI pull job in repo external-attacher for alpha tests, using deployment 1.16 on Kubernetes master
     spec:
       containers:
       # We need this image because it has Docker in Docker and go.
diff --git a/config/jobs/kubernetes-csi/external-provisioner/external-provisioner-config.yaml b/config/jobs/kubernetes-csi/external-provisioner/external-provisioner-config.yaml
index a962ef831ae0..ec59db3b0e47 100644
--- a/config/jobs/kubernetes-csi/external-provisioner/external-provisioner-config.yaml
+++ b/config/jobs/kubernetes-csi/external-provisioner/external-provisioner-config.yaml
@@ -31,7 +31,7 @@ presubmits:
         # unrelated to the PR. Testing against the latest Kubernetes is covered
         # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
         - name: CSI_PROW_KUBERNETES_VERSION
-          value: "1.14.0"
+          value: "1.14.6"
         - name: CSI_PROW_KUBERNETES_DEPLOYMENT
           value: "1.14"
         - name: CSI_PROW_TESTS
@@ -111,7 +111,7 @@ presubmits:
         # unrelated to the PR. Testing against the latest Kubernetes is covered
         # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
         - name: CSI_PROW_KUBERNETES_VERSION
-          value: "1.15.0"
+          value: "1.15.3"
         - name: CSI_PROW_KUBERNETES_DEPLOYMENT
           value: "1.15"
         - name: CSI_PROW_TESTS
@@ -162,7 +162,87 @@ presubmits:
           memory: "9000Mi"
           # during the tests more like 3-20m is used
           cpu: 2000m
-  - name: pull-kubernetes-csi-external-provisioner-alpha-1-15-on-kubernetes-1-15
+  - name: pull-kubernetes-csi-external-provisioner-1-16-on-kubernetes-1-16
+    always_run: true
+    optional: true
+    decorate: true
+    skip_report: false
+    skip_branches: ["^(release-0.2.0|release-0.3.0|release-0.4|release-1.0|v0.1.0)$"]
+    labels:
+      preset-service-account: "true"
+      preset-dind-enabled: "true"
+      preset-kind-volume-mounts: "true"
+    annotations:
+      testgrid-dashboards: sig-storage-csi-external-provisioner
+      testgrid-tab-name: 1-16-on-kubernetes-1-16
+      description: Kubernetes-CSI pull job in repo external-provisioner for non-alpha tests, using deployment 1.16 on Kubernetes 1.16
+    spec:
+      containers:
+      # We need this image because it has Docker in Docker and go.
+      - image: gcr.io/k8s-testimages/kubekins-e2e:v20191031-df9cbb4-master
+        command:
+        - runner.sh
+        args:
+        - ./.prow.sh
+        env:
+        # We pick some version for which there are pre-built images for kind.
+        # Update only when the newer version is known to not cause issues,
+        # otherwise presubmit jobs may start to fail for reasons that are
+        # unrelated to the PR. Testing against the latest Kubernetes is covered
+        # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
+        - name: CSI_PROW_KUBERNETES_VERSION
+          value: "1.16.2"
+        - name: CSI_PROW_KUBERNETES_DEPLOYMENT
+          value: "1.16"
+        - name: CSI_PROW_TESTS
+          value: "sanity serial parallel"
+        # docker-in-docker needs privileged mode
+        securityContext:
+          privileged: true
+        resources:
+          requests:
+            cpu: 2000m
+  - name: pull-kubernetes-csi-external-provisioner-1-16-on-kubernetes-master
+    # Explicitly needs to be started with /test.
+    # This cannot be enabled by default because there's always the risk
+    # that something changes in master which breaks the pre-merge check.
+    always_run: false
+    optional: true
+    decorate: true
+    skip_report: false
+    labels:
+      preset-service-account: "true"
+      preset-dind-enabled: "true"
+      preset-bazel-remote-cache-enabled: "true"
+      preset-kind-volume-mounts: "true"
+    annotations:
+      testgrid-dashboards: sig-storage-csi-external-provisioner
+      testgrid-tab-name: 1-16-on-kubernetes-master
+      description: Kubernetes-CSI pull job in repo external-provisioner for non-alpha tests, using deployment 1.16 on Kubernetes master
+    spec:
+      containers:
+      # We need this image because it has Docker in Docker and go.
+      - image: gcr.io/k8s-testimages/kubekins-e2e:v20191031-df9cbb4-master
+        command:
+        - runner.sh
+        args:
+        - ./.prow.sh
+        env:
+        - name: CSI_PROW_KUBERNETES_VERSION
+          value: "latest"
+        - name: CSI_PROW_TESTS
+          value: "sanity serial parallel"
+        # docker-in-docker needs privileged mode
+        securityContext:
+          privileged: true
+      resources:
+        requests:
+          # these are both a bit below peak usage during build
+          # this is mostly for building kubernetes
+          memory: "9000Mi"
+          # during the tests more like 3-20m is used
+          cpu: 2000m
+  - name: pull-kubernetes-csi-external-provisioner-alpha-1-16-on-kubernetes-1-16
     always_run: false
     optional: true
     decorate: true
@@ -174,8 +254,8 @@ presubmits:
       preset-kind-volume-mounts: "true"
     annotations:
       testgrid-dashboards: sig-storage-csi-external-provisioner
-      testgrid-tab-name: alpha-1-15-on-kubernetes-1-15
-      description: Kubernetes-CSI pull job in repo external-provisioner for alpha tests, using deployment 1.15 on Kubernetes 1.15
+      testgrid-tab-name: alpha-1-16-on-kubernetes-1-16
+      description: Kubernetes-CSI pull job in repo external-provisioner for alpha tests, using deployment 1.16 on Kubernetes 1.16
     spec:
       containers:
       # We need this image because it has Docker in Docker and go.
@@ -191,9 +271,9 @@ presubmits:
         # unrelated to the PR. Testing against the latest Kubernetes is covered
         # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
         - name: CSI_PROW_KUBERNETES_VERSION
-          value: "1.15.0"
+          value: "1.16.2"
         - name: CSI_PROW_KUBERNETES_DEPLOYMENT
-          value: "1.15"
+          value: "1.16"
         - name: CSI_PROW_TESTS
           value: "serial-alpha parallel-alpha"
         # docker-in-docker needs privileged mode
@@ -202,7 +282,7 @@ presubmits:
         resources:
           requests:
             cpu: 2000m
-  - name: pull-kubernetes-csi-external-provisioner-alpha-1-15-on-kubernetes-master
+  - name: pull-kubernetes-csi-external-provisioner-alpha-1-16-on-kubernetes-master
     # Explicitly needs to be started with /test.
     # This cannot be enabled by default because there's always the risk
     # that something changes in master which breaks the pre-merge check.
@@ -217,8 +297,8 @@ presubmits:
       preset-kind-volume-mounts: "true"
     annotations:
       testgrid-dashboards: sig-storage-csi-external-provisioner
-      testgrid-tab-name: alpha-1-15-on-kubernetes-master
-      description: Kubernetes-CSI pull job in repo external-provisioner for alpha tests, using deployment 1.15 on Kubernetes master
+      testgrid-tab-name: alpha-1-16-on-kubernetes-master
+      description: Kubernetes-CSI pull job in repo external-provisioner for alpha tests, using deployment 1.16 on Kubernetes master
     spec:
       containers:
       # We need this image because it has Docker in Docker and go.
diff --git a/config/jobs/kubernetes-csi/external-resizer/external-resizer-config.yaml b/config/jobs/kubernetes-csi/external-resizer/external-resizer-config.yaml
index 1645cf5422e3..418dd5dd59c6 100644
--- a/config/jobs/kubernetes-csi/external-resizer/external-resizer-config.yaml
+++ b/config/jobs/kubernetes-csi/external-resizer/external-resizer-config.yaml
@@ -31,7 +31,7 @@ presubmits:
         # unrelated to the PR. Testing against the latest Kubernetes is covered
         # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
         - name: CSI_PROW_KUBERNETES_VERSION
-          value: "1.14.0"
+          value: "1.14.6"
         - name: CSI_PROW_KUBERNETES_DEPLOYMENT
           value: "1.14"
         - name: CSI_PROW_TESTS
@@ -111,7 +111,7 @@ presubmits:
         # unrelated to the PR. Testing against the latest Kubernetes is covered
         # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
         - name: CSI_PROW_KUBERNETES_VERSION
-          value: "1.15.0"
+          value: "1.15.3"
         - name: CSI_PROW_KUBERNETES_DEPLOYMENT
           value: "1.15"
         - name: CSI_PROW_TESTS
@@ -162,7 +162,87 @@ presubmits:
           memory: "9000Mi"
           # during the tests more like 3-20m is used
           cpu: 2000m
-  - name: pull-kubernetes-csi-external-resizer-alpha-1-15-on-kubernetes-1-15
+  - name: pull-kubernetes-csi-external-resizer-1-16-on-kubernetes-1-16
+    always_run: true
+    optional: true
+    decorate: true
+    skip_report: false
+    skip_branches: []
+    labels:
+      preset-service-account: "true"
+      preset-dind-enabled: "true"
+      preset-kind-volume-mounts: "true"
+    annotations:
+      testgrid-dashboards: sig-storage-csi-external-resizer
+      testgrid-tab-name: 1-16-on-kubernetes-1-16
+      description: Kubernetes-CSI pull job in repo external-resizer for non-alpha tests, using deployment 1.16 on Kubernetes 1.16
+    spec:
+      containers:
+      # We need this image because it has Docker in Docker and go.
+      - image: gcr.io/k8s-testimages/kubekins-e2e:v20191031-df9cbb4-master
+        command:
+        - runner.sh
+        args:
+        - ./.prow.sh
+        env:
+        # We pick some version for which there are pre-built images for kind.
+        # Update only when the newer version is known to not cause issues,
+        # otherwise presubmit jobs may start to fail for reasons that are
+        # unrelated to the PR. Testing against the latest Kubernetes is covered
+        # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
+        - name: CSI_PROW_KUBERNETES_VERSION
+          value: "1.16.2"
+        - name: CSI_PROW_KUBERNETES_DEPLOYMENT
+          value: "1.16"
+        - name: CSI_PROW_TESTS
+          value: "sanity serial parallel"
+        # docker-in-docker needs privileged mode
+        securityContext:
+          privileged: true
+        resources:
+          requests:
+            cpu: 2000m
+  - name: pull-kubernetes-csi-external-resizer-1-16-on-kubernetes-master
+    # Explicitly needs to be started with /test.
+    # This cannot be enabled by default because there's always the risk
+    # that something changes in master which breaks the pre-merge check.
+    always_run: false
+    optional: true
+    decorate: true
+    skip_report: false
+    labels:
+      preset-service-account: "true"
+      preset-dind-enabled: "true"
+      preset-bazel-remote-cache-enabled: "true"
+      preset-kind-volume-mounts: "true"
+    annotations:
+      testgrid-dashboards: sig-storage-csi-external-resizer
+      testgrid-tab-name: 1-16-on-kubernetes-master
+      description: Kubernetes-CSI pull job in repo external-resizer for non-alpha tests, using deployment 1.16 on Kubernetes master
+    spec:
+      containers:
+      # We need this image because it has Docker in Docker and go.
+      - image: gcr.io/k8s-testimages/kubekins-e2e:v20191031-df9cbb4-master
+        command:
+        - runner.sh
+        args:
+        - ./.prow.sh
+        env:
+        - name: CSI_PROW_KUBERNETES_VERSION
+          value: "latest"
+        - name: CSI_PROW_TESTS
+          value: "sanity serial parallel"
+        # docker-in-docker needs privileged mode
+        securityContext:
+          privileged: true
+      resources:
+        requests:
+          # these are both a bit below peak usage during build
+          # this is mostly for building kubernetes
+          memory: "9000Mi"
+          # during the tests more like 3-20m is used
+          cpu: 2000m
+  - name: pull-kubernetes-csi-external-resizer-alpha-1-16-on-kubernetes-1-16
     always_run: false
     optional: true
     decorate: true
@@ -174,8 +254,8 @@ presubmits:
       preset-kind-volume-mounts: "true"
     annotations:
       testgrid-dashboards: sig-storage-csi-external-resizer
-      testgrid-tab-name: alpha-1-15-on-kubernetes-1-15
-      description: Kubernetes-CSI pull job in repo external-resizer for alpha tests, using deployment 1.15 on Kubernetes 1.15
+      testgrid-tab-name: alpha-1-16-on-kubernetes-1-16
+      description: Kubernetes-CSI pull job in repo external-resizer for alpha tests, using deployment 1.16 on Kubernetes 1.16
     spec:
       containers:
       # We need this image because it has Docker in Docker and go.
@@ -191,9 +271,9 @@ presubmits:
         # unrelated to the PR. Testing against the latest Kubernetes is covered
         # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
         - name: CSI_PROW_KUBERNETES_VERSION
-          value: "1.15.0"
+          value: "1.16.2"
         - name: CSI_PROW_KUBERNETES_DEPLOYMENT
-          value: "1.15"
+          value: "1.16"
         - name: CSI_PROW_TESTS
           value: "serial-alpha parallel-alpha"
         # docker-in-docker needs privileged mode
@@ -202,7 +282,7 @@ presubmits:
         resources:
           requests:
             cpu: 2000m
-  - name: pull-kubernetes-csi-external-resizer-alpha-1-15-on-kubernetes-master
+  - name: pull-kubernetes-csi-external-resizer-alpha-1-16-on-kubernetes-master
     # Explicitly needs to be started with /test.
     # This cannot be enabled by default because there's always the risk
     # that something changes in master which breaks the pre-merge check.
@@ -217,8 +297,8 @@ presubmits:
       preset-kind-volume-mounts: "true"
     annotations:
       testgrid-dashboards: sig-storage-csi-external-resizer
-      testgrid-tab-name: alpha-1-15-on-kubernetes-master
-      description: Kubernetes-CSI pull job in repo external-resizer for alpha tests, using deployment 1.15 on Kubernetes master
+      testgrid-tab-name: alpha-1-16-on-kubernetes-master
+      description: Kubernetes-CSI pull job in repo external-resizer for alpha tests, using deployment 1.16 on Kubernetes master
     spec:
       containers:
       # We need this image because it has Docker in Docker and go.
diff --git a/config/jobs/kubernetes-csi/external-snapshotter/external-snapshotter-config.yaml b/config/jobs/kubernetes-csi/external-snapshotter/external-snapshotter-config.yaml
index 3c37c68b1b32..810f18774d0f 100644
--- a/config/jobs/kubernetes-csi/external-snapshotter/external-snapshotter-config.yaml
+++ b/config/jobs/kubernetes-csi/external-snapshotter/external-snapshotter-config.yaml
@@ -31,7 +31,7 @@ presubmits:
         # unrelated to the PR. Testing against the latest Kubernetes is covered
         # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
         - name: CSI_PROW_KUBERNETES_VERSION
-          value: "1.14.0"
+          value: "1.14.6"
         - name: CSI_PROW_KUBERNETES_DEPLOYMENT
           value: "1.14"
         - name: CSI_PROW_TESTS
@@ -111,7 +111,7 @@ presubmits:
         # unrelated to the PR. Testing against the latest Kubernetes is covered
         # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
         - name: CSI_PROW_KUBERNETES_VERSION
-          value: "1.15.0"
+          value: "1.15.3"
         - name: CSI_PROW_KUBERNETES_DEPLOYMENT
           value: "1.15"
         - name: CSI_PROW_TESTS
@@ -162,7 +162,87 @@ presubmits:
           memory: "9000Mi"
           # during the tests more like 3-20m is used
           cpu: 2000m
-  - name: pull-kubernetes-csi-external-snapshotter-alpha-1-15-on-kubernetes-1-15
+  - name: pull-kubernetes-csi-external-snapshotter-1-16-on-kubernetes-1-16
+    always_run: true
+    optional: true
+    decorate: true
+    skip_report: false
+    skip_branches: ["^(k8s_1.12.0-beta.1|release-0.4|release-1.0)$"]
+    labels:
+      preset-service-account: "true"
+      preset-dind-enabled: "true"
+      preset-kind-volume-mounts: "true"
+    annotations:
+      testgrid-dashboards: sig-storage-csi-external-snapshotter
+      testgrid-tab-name: 1-16-on-kubernetes-1-16
+      description: Kubernetes-CSI pull job in repo external-snapshotter for non-alpha tests, using deployment 1.16 on Kubernetes 1.16
+    spec:
+      containers:
+      # We need this image because it has Docker in Docker and go.
+      - image: gcr.io/k8s-testimages/kubekins-e2e:v20191031-df9cbb4-master
+        command:
+        - runner.sh
+        args:
+        - ./.prow.sh
+        env:
+        # We pick some version for which there are pre-built images for kind.
+        # Update only when the newer version is known to not cause issues,
+        # otherwise presubmit jobs may start to fail for reasons that are
+        # unrelated to the PR. Testing against the latest Kubernetes is covered
+        # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
+        - name: CSI_PROW_KUBERNETES_VERSION
+          value: "1.16.2"
+        - name: CSI_PROW_KUBERNETES_DEPLOYMENT
+          value: "1.16"
+        - name: CSI_PROW_TESTS
+          value: "sanity serial parallel"
+        # docker-in-docker needs privileged mode
+        securityContext:
+          privileged: true
+        resources:
+          requests:
+            cpu: 2000m
+  - name: pull-kubernetes-csi-external-snapshotter-1-16-on-kubernetes-master
+    # Explicitly needs to be started with /test.
+    # This cannot be enabled by default because there's always the risk
+    # that something changes in master which breaks the pre-merge check.
+    always_run: false
+    optional: true
+    decorate: true
+    skip_report: false
+    labels:
+      preset-service-account: "true"
+      preset-dind-enabled: "true"
+      preset-bazel-remote-cache-enabled: "true"
+      preset-kind-volume-mounts: "true"
+    annotations:
+      testgrid-dashboards: sig-storage-csi-external-snapshotter
+      testgrid-tab-name: 1-16-on-kubernetes-master
+      description: Kubernetes-CSI pull job in repo external-snapshotter for non-alpha tests, using deployment 1.16 on Kubernetes master
+    spec:
+      containers:
+      # We need this image because it has Docker in Docker and go.
+      - image: gcr.io/k8s-testimages/kubekins-e2e:v20191031-df9cbb4-master
+        command:
+        - runner.sh
+        args:
+        - ./.prow.sh
+        env:
+        - name: CSI_PROW_KUBERNETES_VERSION
+          value: "latest"
+        - name: CSI_PROW_TESTS
+          value: "sanity serial parallel"
+        # docker-in-docker needs privileged mode
+        securityContext:
+          privileged: true
+      resources:
+        requests:
+          # these are both a bit below peak usage during build
+          # this is mostly for building kubernetes
+          memory: "9000Mi"
+          # during the tests more like 3-20m is used
+          cpu: 2000m
+  - name: pull-kubernetes-csi-external-snapshotter-alpha-1-16-on-kubernetes-1-16
     always_run: false
     optional: true
     decorate: true
@@ -174,8 +254,8 @@ presubmits:
       preset-kind-volume-mounts: "true"
     annotations:
       testgrid-dashboards: sig-storage-csi-external-snapshotter
-      testgrid-tab-name: alpha-1-15-on-kubernetes-1-15
-      description: Kubernetes-CSI pull job in repo external-snapshotter for alpha tests, using deployment 1.15 on Kubernetes 1.15
+      testgrid-tab-name: alpha-1-16-on-kubernetes-1-16
+      description: Kubernetes-CSI pull job in repo external-snapshotter for alpha tests, using deployment 1.16 on Kubernetes 1.16
     spec:
       containers:
       # We need this image because it has Docker in Docker and go.
@@ -191,9 +271,9 @@ presubmits:
         # unrelated to the PR. Testing against the latest Kubernetes is covered
         # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
         - name: CSI_PROW_KUBERNETES_VERSION
-          value: "1.15.0"
+          value: "1.16.2"
         - name: CSI_PROW_KUBERNETES_DEPLOYMENT
-          value: "1.15"
+          value: "1.16"
         - name: CSI_PROW_TESTS
           value: "serial-alpha parallel-alpha"
         # docker-in-docker needs privileged mode
@@ -202,7 +282,7 @@ presubmits:
         resources:
           requests:
             cpu: 2000m
-  - name: pull-kubernetes-csi-external-snapshotter-alpha-1-15-on-kubernetes-master
+  - name: pull-kubernetes-csi-external-snapshotter-alpha-1-16-on-kubernetes-master
     # Explicitly needs to be started with /test.
     # This cannot be enabled by default because there's always the risk
     # that something changes in master which breaks the pre-merge check.
@@ -217,8 +297,8 @@ presubmits:
       preset-kind-volume-mounts: "true"
     annotations:
       testgrid-dashboards: sig-storage-csi-external-snapshotter
-      testgrid-tab-name: alpha-1-15-on-kubernetes-master
-      description: Kubernetes-CSI pull job in repo external-snapshotter for alpha tests, using deployment 1.15 on Kubernetes master
+      testgrid-tab-name: alpha-1-16-on-kubernetes-master
+      description: Kubernetes-CSI pull job in repo external-snapshotter for alpha tests, using deployment 1.16 on Kubernetes master
     spec:
       containers:
       # We need this image because it has Docker in Docker and go.
diff --git a/config/jobs/kubernetes-csi/gen-jobs.sh b/config/jobs/kubernetes-csi/gen-jobs.sh
index 4bf47bbf82bb..a9f3c46210e5 100755
--- a/config/jobs/kubernetes-csi/gen-jobs.sh
+++ b/config/jobs/kubernetes-csi/gen-jobs.sh
@@ -21,11 +21,11 @@
 base="$(dirname $0)"
 
 # The latest stable Kubernetes version for testing alpha repos
-latest_stable_k8s_version="1.15.0"
-latest_stable_k8s_minor_version="1.15"
+latest_stable_k8s_version="1.16.2"
+latest_stable_k8s_minor_version="1.16"
 
 # We need this image because it has Docker in Docker and go.
-dind_image="gcr.io/k8s-testimages/kubekins-e2e:v20191021-b891e54-master"
+dind_image="gcr.io/k8s-testimages/kubekins-e2e:v20191031-df9cbb4-master"
 
 # All kubernetes-csi repos which are part of the hostpath driver example.
 # For these repos we generate the full test matrix. For each entry here
@@ -137,6 +137,17 @@ job_name () {
     echo "$name"
 }
 
+# Given a X.Y.Z version string, returns the minor version.
+get_minor_version() {
+    local ver="$1"
+    local minor="$ver"
+
+    if [ "$ver" != "master" ]; then
+      ver="$(echo "${ver}" | sed -e 's/\([0-9]*\)\.\([0-9]*\).*/\1\.\2/')"
+    fi
+    echo "$ver"
+}
+
 # Generates the testgrid annotations. "ci" jobs all land in the same
 # "sig-storage-csi-ci" and send alert emails, "pull" jobs land in "sig-storage-csi-<repo>"
 # and don't alert. Some repos only have a single pull job. Those
@@ -151,10 +162,7 @@ annotations () {
     local kubernetes="$5"
     local description
 
-    # We only care about major.minor version numbers here.
-    if [ "$kubernetes" != "master" ]; then
-      kubernetes="$(echo "${kubernetes}" | sed -e 's/\([0-9]*\)\.\([0-9]*\).*/\1\.\2/')"
-    fi
+    kubernetes="$(get_minor_version "$kubernetes")"
 
     echo "annotations:"
     case "$type" in
@@ -224,7 +232,15 @@ expand_tests () {
 # "alpha" features can be breaking across releases and
 # therefore cannot be a required job
 pull_optional() {
-    if [ "$1" == "alpha" ]; then
+    local tests="$1"
+    local kubernetes="$2"
+
+    if [ "$tests" == "alpha" ]; then
+        echo "true"
+    elif [ "$kubernetes" == "1.16.2" ]; then
+        # Testing 1.16 requires release-tools to be updated in all
+        # kubernetes-csi repos. Once that is done, and tests
+        # are passing, this can be removed.
         echo "true"
     else
         echo "false"
@@ -249,8 +265,8 @@ presubmits:
 EOF
 
     for tests in non-alpha alpha; do
-        for deployment in 1.14 1.15; do # must have a deploy/kubernetes-<version> dir in csi-driver-host-path
-            for kubernetes in 1.14.0 1.15.0; do # these versions must have pre-built kind images (see https://hub.docker.com/r/kindest/node/tags)
+        for deployment in 1.14 1.15 1.16; do # must have a deploy/kubernetes-<version> dir in csi-driver-host-path
+            for kubernetes in 1.14.6 1.15.3 1.16.2; do # these versions must have pre-built kind images (see https://hub.docker.com/r/kindest/node/tags)
                 # We could generate these pre-submit jobs for all combinations, but to save resources in the Prow
                 # cluster we only do it for those cases where the deployment matches the Kubernetes version.
                 # Once we have more than two supported Kubernetes releases we should limit this to the most
@@ -265,7 +281,7 @@ EOF
                         cat >>"$base/$repo/$repo-config.yaml" <<EOF
   - name: $(job_name "pull" "$repo" "$tests" "$deployment" "$kubernetes")
     always_run: $(pull_alwaysrun "$tests")
-    optional: $(pull_optional "$tests")
+    optional: $(pull_optional "$tests" "$kubernetes")
     decorate: true
     skip_report: false
     skip_branches: [$(skip_branches $repo)]
@@ -469,8 +485,8 @@ periodics:
 EOF
 
 for tests in non-alpha alpha; do
-    for deployment in 1.14 1.15; do
-        for kubernetes in 1.14 1.15 master; do
+    for deployment in 1.14 1.15 1.16; do
+        for kubernetes in 1.14 1.15 1.16 master; do
             if [ "$tests" = "alpha" ]; then
                 # No version skew testing of alpha features, deployment has to match Kubernetes.
                 if ! echo "$kubernetes" | grep -q "^$deployment"; then
@@ -529,7 +545,7 @@ done
 # The canary builds use the latest sidecars from master and run them on
 # specific Kubernetes versions, using the default deployment for that Kubernetes
 # release.
-for kubernetes in 1.14.0 1.15 master; do
+for kubernetes in 1.14.6 1.15.3 1.16.2 master; do
     actual="${kubernetes/master/latest}"
 
     for tests in non-alpha alpha; do
@@ -540,7 +556,7 @@ for kubernetes in 1.14.0 1.15 master; do
         alpha_testgrid_prefix="$(if [ "$tests" = "alpha" ]; then echo alpha-; fi)"
         cat >>"$base/csi-driver-host-path/csi-driver-host-path-config.yaml" <<EOF
 - interval: 6h
-  name: $(job_name "ci" "" "$tests" "canary" "$kubernetes")
+  name: $(job_name "ci" "" "$tests" "canary" "$(get_minor_version "$kubernetes")")
   decorate: true
   extra_refs:
   - org: kubernetes-csi
diff --git a/config/jobs/kubernetes-csi/livenessprobe/livenessprobe-config.yaml b/config/jobs/kubernetes-csi/livenessprobe/livenessprobe-config.yaml
index fc1e5a562155..98f9b65e572f 100644
--- a/config/jobs/kubernetes-csi/livenessprobe/livenessprobe-config.yaml
+++ b/config/jobs/kubernetes-csi/livenessprobe/livenessprobe-config.yaml
@@ -31,7 +31,7 @@ presubmits:
         # unrelated to the PR. Testing against the latest Kubernetes is covered
         # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
         - name: CSI_PROW_KUBERNETES_VERSION
-          value: "1.14.0"
+          value: "1.14.6"
         - name: CSI_PROW_KUBERNETES_DEPLOYMENT
           value: "1.14"
         - name: CSI_PROW_TESTS
@@ -111,7 +111,7 @@ presubmits:
         # unrelated to the PR. Testing against the latest Kubernetes is covered
         # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
         - name: CSI_PROW_KUBERNETES_VERSION
-          value: "1.15.0"
+          value: "1.15.3"
         - name: CSI_PROW_KUBERNETES_DEPLOYMENT
           value: "1.15"
         - name: CSI_PROW_TESTS
@@ -162,7 +162,87 @@ presubmits:
           memory: "9000Mi"
           # during the tests more like 3-20m is used
           cpu: 2000m
-  - name: pull-kubernetes-csi-livenessprobe-alpha-1-15-on-kubernetes-1-15
+  - name: pull-kubernetes-csi-livenessprobe-1-16-on-kubernetes-1-16
+    always_run: true
+    optional: true
+    decorate: true
+    skip_report: false
+    skip_branches: ["^(release-0.4|release-1.0)$"]
+    labels:
+      preset-service-account: "true"
+      preset-dind-enabled: "true"
+      preset-kind-volume-mounts: "true"
+    annotations:
+      testgrid-dashboards: sig-storage-csi-livenessprobe
+      testgrid-tab-name: 1-16-on-kubernetes-1-16
+      description: Kubernetes-CSI pull job in repo livenessprobe for non-alpha tests, using deployment 1.16 on Kubernetes 1.16
+    spec:
+      containers:
+      # We need this image because it has Docker in Docker and go.
+      - image: gcr.io/k8s-testimages/kubekins-e2e:v20191031-df9cbb4-master
+        command:
+        - runner.sh
+        args:
+        - ./.prow.sh
+        env:
+        # We pick some version for which there are pre-built images for kind.
+        # Update only when the newer version is known to not cause issues,
+        # otherwise presubmit jobs may start to fail for reasons that are
+        # unrelated to the PR. Testing against the latest Kubernetes is covered
+        # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
+        - name: CSI_PROW_KUBERNETES_VERSION
+          value: "1.16.2"
+        - name: CSI_PROW_KUBERNETES_DEPLOYMENT
+          value: "1.16"
+        - name: CSI_PROW_TESTS
+          value: "sanity serial parallel"
+        # docker-in-docker needs privileged mode
+        securityContext:
+          privileged: true
+        resources:
+          requests:
+            cpu: 2000m
+  - name: pull-kubernetes-csi-livenessprobe-1-16-on-kubernetes-master
+    # Explicitly needs to be started with /test.
+    # This cannot be enabled by default because there's always the risk
+    # that something changes in master which breaks the pre-merge check.
+    always_run: false
+    optional: true
+    decorate: true
+    skip_report: false
+    labels:
+      preset-service-account: "true"
+      preset-dind-enabled: "true"
+      preset-bazel-remote-cache-enabled: "true"
+      preset-kind-volume-mounts: "true"
+    annotations:
+      testgrid-dashboards: sig-storage-csi-livenessprobe
+      testgrid-tab-name: 1-16-on-kubernetes-master
+      description: Kubernetes-CSI pull job in repo livenessprobe for non-alpha tests, using deployment 1.16 on Kubernetes master
+    spec:
+      containers:
+      # We need this image because it has Docker in Docker and go.
+      - image: gcr.io/k8s-testimages/kubekins-e2e:v20191031-df9cbb4-master
+        command:
+        - runner.sh
+        args:
+        - ./.prow.sh
+        env:
+        - name: CSI_PROW_KUBERNETES_VERSION
+          value: "latest"
+        - name: CSI_PROW_TESTS
+          value: "sanity serial parallel"
+        # docker-in-docker needs privileged mode
+        securityContext:
+          privileged: true
+      resources:
+        requests:
+          # these are both a bit below peak usage during build
+          # this is mostly for building kubernetes
+          memory: "9000Mi"
+          # during the tests more like 3-20m is used
+          cpu: 2000m
+  - name: pull-kubernetes-csi-livenessprobe-alpha-1-16-on-kubernetes-1-16
     always_run: false
     optional: true
     decorate: true
@@ -174,8 +254,8 @@ presubmits:
       preset-kind-volume-mounts: "true"
     annotations:
       testgrid-dashboards: sig-storage-csi-livenessprobe
-      testgrid-tab-name: alpha-1-15-on-kubernetes-1-15
-      description: Kubernetes-CSI pull job in repo livenessprobe for alpha tests, using deployment 1.15 on Kubernetes 1.15
+      testgrid-tab-name: alpha-1-16-on-kubernetes-1-16
+      description: Kubernetes-CSI pull job in repo livenessprobe for alpha tests, using deployment 1.16 on Kubernetes 1.16
     spec:
       containers:
       # We need this image because it has Docker in Docker and go.
@@ -191,9 +271,9 @@ presubmits:
         # unrelated to the PR. Testing against the latest Kubernetes is covered
         # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
         - name: CSI_PROW_KUBERNETES_VERSION
-          value: "1.15.0"
+          value: "1.16.2"
         - name: CSI_PROW_KUBERNETES_DEPLOYMENT
-          value: "1.15"
+          value: "1.16"
         - name: CSI_PROW_TESTS
           value: "serial-alpha parallel-alpha"
         # docker-in-docker needs privileged mode
@@ -202,7 +282,7 @@ presubmits:
         resources:
           requests:
             cpu: 2000m
-  - name: pull-kubernetes-csi-livenessprobe-alpha-1-15-on-kubernetes-master
+  - name: pull-kubernetes-csi-livenessprobe-alpha-1-16-on-kubernetes-master
     # Explicitly needs to be started with /test.
     # This cannot be enabled by default because there's always the risk
     # that something changes in master which breaks the pre-merge check.
@@ -217,8 +297,8 @@ presubmits:
       preset-kind-volume-mounts: "true"
     annotations:
       testgrid-dashboards: sig-storage-csi-livenessprobe
-      testgrid-tab-name: alpha-1-15-on-kubernetes-master
-      description: Kubernetes-CSI pull job in repo livenessprobe for alpha tests, using deployment 1.15 on Kubernetes master
+      testgrid-tab-name: alpha-1-16-on-kubernetes-master
+      description: Kubernetes-CSI pull job in repo livenessprobe for alpha tests, using deployment 1.16 on Kubernetes master
     spec:
       containers:
       # We need this image because it has Docker in Docker and go.
diff --git a/config/jobs/kubernetes-csi/node-driver-registrar/node-driver-registrar-config.yaml b/config/jobs/kubernetes-csi/node-driver-registrar/node-driver-registrar-config.yaml
index 76c33fe73bf2..9f76502e88b7 100644
--- a/config/jobs/kubernetes-csi/node-driver-registrar/node-driver-registrar-config.yaml
+++ b/config/jobs/kubernetes-csi/node-driver-registrar/node-driver-registrar-config.yaml
@@ -31,7 +31,7 @@ presubmits:
         # unrelated to the PR. Testing against the latest Kubernetes is covered
         # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
         - name: CSI_PROW_KUBERNETES_VERSION
-          value: "1.14.0"
+          value: "1.14.6"
         - name: CSI_PROW_KUBERNETES_DEPLOYMENT
           value: "1.14"
         - name: CSI_PROW_TESTS
@@ -111,7 +111,7 @@ presubmits:
         # unrelated to the PR. Testing against the latest Kubernetes is covered
         # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
         - name: CSI_PROW_KUBERNETES_VERSION
-          value: "1.15.0"
+          value: "1.15.3"
         - name: CSI_PROW_KUBERNETES_DEPLOYMENT
           value: "1.15"
         - name: CSI_PROW_TESTS
@@ -162,7 +162,87 @@ presubmits:
           memory: "9000Mi"
           # during the tests more like 3-20m is used
           cpu: 2000m
-  - name: pull-kubernetes-csi-node-driver-registrar-alpha-1-15-on-kubernetes-1-15
+  - name: pull-kubernetes-csi-node-driver-registrar-1-16-on-kubernetes-1-16
+    always_run: true
+    optional: true
+    decorate: true
+    skip_report: false
+    skip_branches: ["^(release-1.0)$"]
+    labels:
+      preset-service-account: "true"
+      preset-dind-enabled: "true"
+      preset-kind-volume-mounts: "true"
+    annotations:
+      testgrid-dashboards: sig-storage-csi-node-driver-registrar
+      testgrid-tab-name: 1-16-on-kubernetes-1-16
+      description: Kubernetes-CSI pull job in repo node-driver-registrar for non-alpha tests, using deployment 1.16 on Kubernetes 1.16
+    spec:
+      containers:
+      # We need this image because it has Docker in Docker and go.
+      - image: gcr.io/k8s-testimages/kubekins-e2e:v20191031-df9cbb4-master
+        command:
+        - runner.sh
+        args:
+        - ./.prow.sh
+        env:
+        # We pick some version for which there are pre-built images for kind.
+        # Update only when the newer version is known to not cause issues,
+        # otherwise presubmit jobs may start to fail for reasons that are
+        # unrelated to the PR. Testing against the latest Kubernetes is covered
+        # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
+        - name: CSI_PROW_KUBERNETES_VERSION
+          value: "1.16.2"
+        - name: CSI_PROW_KUBERNETES_DEPLOYMENT
+          value: "1.16"
+        - name: CSI_PROW_TESTS
+          value: "sanity serial parallel"
+        # docker-in-docker needs privileged mode
+        securityContext:
+          privileged: true
+        resources:
+          requests:
+            cpu: 2000m
+  - name: pull-kubernetes-csi-node-driver-registrar-1-16-on-kubernetes-master
+    # Explicitly needs to be started with /test.
+    # This cannot be enabled by default because there's always the risk
+    # that something changes in master which breaks the pre-merge check.
+    always_run: false
+    optional: true
+    decorate: true
+    skip_report: false
+    labels:
+      preset-service-account: "true"
+      preset-dind-enabled: "true"
+      preset-bazel-remote-cache-enabled: "true"
+      preset-kind-volume-mounts: "true"
+    annotations:
+      testgrid-dashboards: sig-storage-csi-node-driver-registrar
+      testgrid-tab-name: 1-16-on-kubernetes-master
+      description: Kubernetes-CSI pull job in repo node-driver-registrar for non-alpha tests, using deployment 1.16 on Kubernetes master
+    spec:
+      containers:
+      # We need this image because it has Docker in Docker and go.
+      - image: gcr.io/k8s-testimages/kubekins-e2e:v20191031-df9cbb4-master
+        command:
+        - runner.sh
+        args:
+        - ./.prow.sh
+        env:
+        - name: CSI_PROW_KUBERNETES_VERSION
+          value: "latest"
+        - name: CSI_PROW_TESTS
+          value: "sanity serial parallel"
+        # docker-in-docker needs privileged mode
+        securityContext:
+          privileged: true
+      resources:
+        requests:
+          # these are both a bit below peak usage during build
+          # this is mostly for building kubernetes
+          memory: "9000Mi"
+          # during the tests more like 3-20m is used
+          cpu: 2000m
+  - name: pull-kubernetes-csi-node-driver-registrar-alpha-1-16-on-kubernetes-1-16
     always_run: false
     optional: true
     decorate: true
@@ -174,8 +254,8 @@ presubmits:
       preset-kind-volume-mounts: "true"
     annotations:
       testgrid-dashboards: sig-storage-csi-node-driver-registrar
-      testgrid-tab-name: alpha-1-15-on-kubernetes-1-15
-      description: Kubernetes-CSI pull job in repo node-driver-registrar for alpha tests, using deployment 1.15 on Kubernetes 1.15
+      testgrid-tab-name: alpha-1-16-on-kubernetes-1-16
+      description: Kubernetes-CSI pull job in repo node-driver-registrar for alpha tests, using deployment 1.16 on Kubernetes 1.16
     spec:
       containers:
       # We need this image because it has Docker in Docker and go.
@@ -191,9 +271,9 @@ presubmits:
         # unrelated to the PR. Testing against the latest Kubernetes is covered
         # by periodic jobs (see https://k8s-testgrid.appspot.com/sig-storage-csi-ci#Summary).
         - name: CSI_PROW_KUBERNETES_VERSION
-          value: "1.15.0"
+          value: "1.16.2"
         - name: CSI_PROW_KUBERNETES_DEPLOYMENT
-          value: "1.15"
+          value: "1.16"
         - name: CSI_PROW_TESTS
           value: "serial-alpha parallel-alpha"
         # docker-in-docker needs privileged mode
@@ -202,7 +282,7 @@ presubmits:
         resources:
           requests:
             cpu: 2000m
-  - name: pull-kubernetes-csi-node-driver-registrar-alpha-1-15-on-kubernetes-master
+  - name: pull-kubernetes-csi-node-driver-registrar-alpha-1-16-on-kubernetes-master
     # Explicitly needs to be started with /test.
     # This cannot be enabled by default because there's always the risk
     # that something changes in master which breaks the pre-merge check.
@@ -217,8 +297,8 @@ presubmits:
       preset-kind-volume-mounts: "true"
     annotations:
       testgrid-dashboards: sig-storage-csi-node-driver-registrar
-      testgrid-tab-name: alpha-1-15-on-kubernetes-master
-      description: Kubernetes-CSI pull job in repo node-driver-registrar for alpha tests, using deployment 1.15 on Kubernetes master
+      testgrid-tab-name: alpha-1-16-on-kubernetes-master
+      description: Kubernetes-CSI pull job in repo node-driver-registrar for alpha tests, using deployment 1.16 on Kubernetes master
     spec:
       containers:
       # We need this image because it has Docker in Docker and go.