diff --git a/.kokoro/build.sh b/.kokoro/build.sh
index 342c7692a26c..13e4bf27e214 100755
--- a/.kokoro/build.sh
+++ b/.kokoro/build.sh
@@ -31,6 +31,7 @@ fi
 case $JOB_TYPE in
 test)
     mvn test -B
+    bash $KOKORO_GFILE_DIR/codecov.sh
     ;;
 javadoc)
     mvn javadoc:javadoc javadoc:test-javadoc
diff --git a/.kokoro/continuous/common.cfg b/.kokoro/continuous/common.cfg
index 6a6b94a4cb4a..38724a8c1c58 100644
--- a/.kokoro/continuous/common.cfg
+++ b/.kokoro/continuous/common.cfg
@@ -28,8 +28,6 @@ before_action {
     keystore_resource {
       keystore_config_id: 73713
       keyname: "java_it_service_account"
-      # TODO(chingor): remove this after secrets have globally propagated
-      backend_type: FASTCONFIGPUSH
     }
   }
 }
@@ -39,8 +37,16 @@ before_action {
     keystore_resource {
       keystore_config_id: 73713
       keyname: "java_firestore_it_service_account"
-      # TODO(chingor): remove this after secrets have globally propagated
-      backend_type: FASTCONFIGPUSH
+    }
+  }
+}
+
+# Request the codecov master token
+before_action {
+  fetch_keystore {
+    keystore_resource {
+      keystore_config_id: 73713
+      keyname: "dpebot_codecov_token"
     }
   }
 }
diff --git a/.kokoro/presubmit/common.cfg b/.kokoro/presubmit/common.cfg
index 6a6b94a4cb4a..772a5bee1b2f 100644
--- a/.kokoro/presubmit/common.cfg
+++ b/.kokoro/presubmit/common.cfg
@@ -28,8 +28,6 @@ before_action {
     keystore_resource {
       keystore_config_id: 73713
       keyname: "java_it_service_account"
-      # TODO(chingor): remove this after secrets have globally propagated
-      backend_type: FASTCONFIGPUSH
     }
   }
 }
@@ -39,8 +37,17 @@ before_action {
     keystore_resource {
       keystore_config_id: 73713
       keyname: "java_firestore_it_service_account"
-      # TODO(chingor): remove this after secrets have globally propagated
-      backend_type: FASTCONFIGPUSH
     }
   }
 }
+
+# Request the codecov master token
+before_action {
+  fetch_keystore {
+    keystore_resource {
+      keystore_config_id: 73713
+      keyname: "dpebot_codecov_token"
+    }
+  }
+}
+
diff --git a/codecov.yaml b/codecov.yaml
new file mode 100644
index 000000000000..5724ea9478d7
--- /dev/null
+++ b/codecov.yaml
@@ -0,0 +1,4 @@
+---
+codecov:
+  ci:
+    - source.cloud.google.com
diff --git a/google-api-grpc/pom.xml b/google-api-grpc/pom.xml
index c87df227d158..b42e62a2a8a0 100644
--- a/google-api-grpc/pom.xml
+++ b/google-api-grpc/pom.xml
@@ -788,6 +788,25 @@
           </reportPlugins>
         </configuration>
       </plugin>
+      <plugin>
+        <groupId>org.jacoco</groupId>
+        <artifactId>jacoco-maven-plugin</artifactId>
+        <version>0.8.2</version>
+        <executions>
+          <execution>
+            <goals>
+              <goal>prepare-agent</goal>
+            </goals>
+          </execution>
+          <execution>
+            <id>report</id>
+            <phase>test</phase>
+            <goals>
+              <goal>report</goal>
+            </goals>
+          </execution>
+        </executions>
+      </plugin>
     </plugins>
   </build>
   <reporting>
diff --git a/google-cloud-bom/pom.xml b/google-cloud-bom/pom.xml
index f4038062d6a6..36b336077758 100644
--- a/google-cloud-bom/pom.xml
+++ b/google-cloud-bom/pom.xml
@@ -1127,6 +1127,25 @@
           </reportPlugins>
         </configuration>
       </plugin>
+      <plugin>
+        <groupId>org.jacoco</groupId>
+        <artifactId>jacoco-maven-plugin</artifactId>
+        <version>0.8.2</version>
+        <executions>
+          <execution>
+            <goals>
+              <goal>prepare-agent</goal>
+            </goals>
+          </execution>
+          <execution>
+            <id>report</id>
+            <phase>test</phase>
+            <goals>
+              <goal>report</goal>
+            </goals>
+          </execution>
+        </executions>
+      </plugin>
     </plugins>
   </build>
 
diff --git a/google-cloud-clients/pom.xml b/google-cloud-clients/pom.xml
index 30e9657eba7e..45dc9dc9d0db 100644
--- a/google-cloud-clients/pom.xml
+++ b/google-cloud-clients/pom.xml
@@ -765,6 +765,25 @@
           </reportPlugins>
         </configuration>
       </plugin>
+      <plugin>
+        <groupId>org.jacoco</groupId>
+        <artifactId>jacoco-maven-plugin</artifactId>
+        <version>0.8.2</version>
+        <executions>
+          <execution>
+            <goals>
+              <goal>prepare-agent</goal>
+            </goals>
+          </execution>
+          <execution>
+            <id>report</id>
+            <phase>test</phase>
+            <goals>
+              <goal>report</goal>
+            </goals>
+          </execution>
+        </executions>
+      </plugin>
     </plugins>
   </build>