Android presubmit test failing due to key deletion

[ericgribkoff]

The oauth_token.txt file was removed grpc/grpc#17746 - core isn't using it anymore, but it is (was) still in use in this repository for setting a PR status message, see here

@jtattermusch Our Android presubmit tests are now failing. Can the key temporarily be restored to GCS? If there's a preferred way of authentication that supersedes the auth token, I can follow up by migrating but it would be nice to have the presubmit working in the meantime.

[jtattermusch]

Ah, I'm sorry, I didn't realize you're still using it and deleted the file from GCS. I'll try to restore it.

The replacement is to fetch a key from keystore: https://github.com/grpc/grpc/pull/17505/files#diff-4ca5ec08fe49e392fa9e4399a56d07e8R20

[jtattermusch]

I restored the file, hopefully it's the right one.

Please try migrating to using the key stored in keystore. If the key used by #17505 doesn't work for you, we could also store the original token as a separate keystore entry.

[ericgribkoff]

Thanks @jtattermusch. The restored key works (#5284); trying out the existing keystore token in #5285 and will update here if oauth_token.txt can either be re-deleted or if it will require a new keystore entry.

[ericgribkoff]

Using the same key from keystore as grpc/grpc uses for the checks API fails with a 401 Unauthorized error. It looks like the check API (i.e., when authenticated as a github app, https://developer.github.com/v3/checks/runs/) and status API (https://developer.github.com/v3/repos/statuses/) use different permissions and so will require a separate keystore entry. I didn't dig too deeply, but updating a PR status is not on the list of allowable API access when authenticated as a github app: https://developer.github.com/v3/apps/available-endpoints/

@jtattermusch do you what is involved in "moving" oauth_token.txt into keystore?

[jtattermusch]

@ericgribkoff responded offline.