diff --git a/ci/run_envoy_docker.sh b/ci/run_envoy_docker.sh
index c73222a24f587..be76a7a593505 100755
--- a/ci/run_envoy_docker.sh
+++ b/ci/run_envoy_docker.sh
@@ -80,7 +80,6 @@ docker run --rm \
        -e GCP_SERVICE_ACCOUNT_KEY \
        -e NUM_CPUS \
        -e ENVOY_RBE \
-       -e FUZZIT_API_KEY \
        -e ENVOY_BUILD_IMAGE \
        -e ENVOY_SRCDIR \
        -e ENVOY_BUILD_TARGET \
diff --git a/ci/upload_gcs_artifact.sh b/ci/upload_gcs_artifact.sh
index aea9dbc3f24fe..a1e90d798ae54 100755
--- a/ci/upload_gcs_artifact.sh
+++ b/ci/upload_gcs_artifact.sh
@@ -42,4 +42,8 @@ if [[ "$BUILD_REASON" == "PullRequest" ]]; then
     gsutil -h "Cache-Control:no-cache,max-age=0" -mq rsync -dr "${TMP_REDIRECT}" "gs://${GCS_REDIRECT}"
 fi
 
+if [[ "${COVERAGE_FAILED}" -eq 1 ]]; then
+  echo "##vso[task.logissue type=error]Coverage failed, check artifact at: https://storage.googleapis.com/${GCS_LOCATION}/index.html"
+fi
+
 echo "Artifacts uploaded to: https://storage.googleapis.com/${GCS_LOCATION}/index.html"
diff --git a/test/run_envoy_bazel_coverage.sh b/test/run_envoy_bazel_coverage.sh
index 5e99411773c2a..6221cbd0d1b06 100755
--- a/test/run_envoy_bazel_coverage.sh
+++ b/test/run_envoy_bazel_coverage.sh
@@ -93,6 +93,7 @@ if [[ "$VALIDATE_COVERAGE" == "true" ]]; then
   fi
   COVERAGE_FAILED=$(echo "${COVERAGE_VALUE}<${COVERAGE_THRESHOLD}" | bc)
   if [[ "${COVERAGE_FAILED}" -eq 1 ]]; then
+      echo "##vso[task.setvariable variable=COVERAGE_FAILED]${COVERAGE_FAILED}"
       echo "Code coverage ${COVERAGE_VALUE} is lower than limit of ${COVERAGE_THRESHOLD}"
       exit 1
   else
@@ -109,6 +110,8 @@ if [[ "$VALIDATE_COVERAGE" == "true" ]] && [[ "${FUZZ_COVERAGE}" == "false" ]];
   if [ $? -eq 1 ]; then
     echo Per-extension coverage failed:
     echo "$output"
+    COVERAGE_FAILED=1
+    echo "##vso[task.setvariable variable=COVERAGE_FAILED]${COVERAGE_FAILED}"
     exit 1
   fi
   echo Per-extension coverage passed.