Add pr jobs

Signed-off-by: Arthur She <arthur.she@linaro.org>
Change-Id: I7e8d57933c05a7393c8fb68551b551786769e589
diff --git a/mbed-tls-restricted-pr.yaml b/mbed-tls-restricted-pr.yaml
new file mode 100644
index 0000000..e0cc7d9
--- /dev/null
+++ b/mbed-tls-restricted-pr.yaml
@@ -0,0 +1,51 @@
+- job:
+    name: mbed-tls-restricted-pr
+    description: 'mbedtls restricted PR job'
+    project-type: multibranch
+    prune-dead-branches: true
+    days-to-keep: -1
+    num-to-keep: -1
+    script-path: tests/.jenkins/Jenkinsfile
+    properties:
+      - raw:
+          xml: |
+            <org.jenkinsci.plugins.workflow.libs.FolderLibraries plugin="workflow-cps-global-lib@2.9">
+              <libraries>
+                <org.jenkinsci.plugins.workflow.libs.LibraryConfiguration>
+                  <name>mbedtls-test</name>
+                  <retriever class="org.jenkinsci.plugins.workflow.libs.SCMSourceRetriever">
+                    <scm class="org.jenkinsci.plugins.github_branch_source.GitHubSCMSource" plugin="github-branch-source@2.9.1">
+                      <repoOwner>Mbed-TLS</repoOwner>
+                      <repository>mbedtls-test</repository>
+                      <repositoryUrl>https://github.com/Mbed-TLS/mbedtls-test.git</repositoryUrl>
+                    </scm>
+                  </retriever>
+                  <defaultVersion>master</defaultVersion>
+                  <implicit>true</implicit>
+                  <allowVersionOverride>true</allowVersionOverride>
+                  <includeInChangesets>true</includeInChangesets>
+                </org.jenkinsci.plugins.workflow.libs.LibraryConfiguration>
+              </libraries>
+            </org.jenkinsci.plugins.workflow.libs.FolderLibraries>
+    scm:
+    - github:
+        api-uri: https://api.github.com
+        credentials-id: mbedtls-github-token
+        repo-owner: Mbed-TLS
+        repo: mbedtls-restricted
+        repository-url: ssh://git@github.com/Mbed-TLS/mbedtls-restricted.git
+        branch-discovery: no-pr
+        discover-pr-forks-strategy: both
+        discover-pr-forks-trust: permission
+        discover-pr-origin: both
+        head-filter-regex: '(?!^PR-(758|759|850|906|916|919)-(merge|head)$)(PR-\d+-(merge|head))'
+        property-strategies:
+          all-branches:
+          - pipeline-branch-durability-override: performance-optimized
+        submodule:
+          disable: false
+          recursive: true
+          tracking: false
+          parent-credentials: false
+        ssh-checkout:
+          credentials: mbedtls-github-ssh