debug

eng/common/TestResources/New-TestResources.ps1

@@ -205,11 +205,17 @@ function ShouldMarkValueAsSecret([string]$serviceDirectoryPrefix, [string]$key,
     $suffix1 = $key -replace $serviceDirectoryPrefix, ""
     $suffix2 = $key -replace "AZURE_", ""
     $variants = @($key, $suffix1, $suffix2)
+    Write-Host "non secret"
+    Write-Host "$serviceDirectoryPrefix"
+    Write-Host "$key $suffix1 $suffix2"
+    Write-Host "$($allowedValues | ConvertTo-Json)"
     if ($variants | Where-Object { $logOutputNonSecret -contains $_ }) {
+        Write-Host "false for variant"
         return $false
     }
 
     if ($allowedValues -contains $value) {
+        Write-Host "false for allowed"
         return $false
     }
 
@@ -252,11 +258,12 @@ function SetDeploymentOutputs([string]$serviceName, [object]$azContext, [object]
                 if (ShouldMarkValueAsSecret $serviceDirectoryPrefix $key $value $notSecretValues) {
                     # Treat all ARM template output variables as secrets since "SecureString" variables do not set values.
                     # In order to mask secrets but set environment variables for any given ARM template, we set variables twice as shown below.
+                    Write-Host "Setting variable as secret '$key': $value"
                     Write-Host "##vso[task.setvariable variable=_$key;issecret=true;]$value"
                 } else {
+                    Write-Host "Setting variable '$key': $value"
                     $notSecretValues += $value
                 }
-                Write-Host "Setting variable '$key': $value"
                 Write-Host "##vso[task.setvariable variable=$key;]$value"
             } else {
                 Write-Host ($shellExportFormat -f $key, $value)