diff --git a/cmd/mesh-controller/compose_perform.go b/cmd/mesh-controller/compose_perform.go index c71c4bfe..930d6634 100644 --- a/cmd/mesh-controller/compose_perform.go +++ b/cmd/mesh-controller/compose_perform.go @@ -204,9 +204,7 @@ func prepareSend(ctx context.Context, open *stores, node string) ([]string, erro if n.SealingKey != "" { held := map[string]bool{} for _, r := range in.OwnSecrets { - // Held only when sealed to the key the machine has now, or given by a person (which is not the mesh's - // to make again): a made row under an old key is re-made, as SecretForModule did. - if r.Node == node && (r.SealedTo == n.SealingKey || r.Origin == inventory.OriginAccepted) { + if r.Node == node { held[r.Module+"/"+r.Name] = true } }