vmm-ui: Update allowed_envs when secrets updated

Author: kvinwang

vmm/src/console.html

@@ -2188,6 +2188,9 @@ <h3>Derive VM</h3>
                         }
                     }
                     app_compose.pre_launch_script = upgradeDialog.value.preLaunchScript?.trim();
+                    if (upgradeDialog.value.resetSecrets) {
+                        app_compose.allowed_envs = upgradeDialog.value.encryptedEnvs.map(env => env.key);
+                    }
 
                     const swapBytes = Math.max(0, Math.round(upgradeDialog.value.swap_size || 0));
                     if (swapBytes > 0) {
@@ -2218,15 +2221,18 @@ <h3>Derive VM</h3>
                         const body = {
                             id: upgradeDialog.value.vm.id,
                         };
+                        const composeWasExplicitlyUpdated = upgradeDialog.value.updateCompose;
+                        let composeNeedsUpdate = composeWasExplicitlyUpdated;
 
                         if (upgradeDialog.value.resetSecrets) {
                             body.encrypted_env = await makeEncryptedEnv(
                                 upgradeDialog.value.encryptedEnvs,
                                 kmsEnabled(upgradeDialog.value.vm),
                                 upgradeDialog.value.vm.app_id
                             );
+                            composeNeedsUpdate = true;
                         }
-                        if (upgradeDialog.value.updateCompose) {
+                        if (composeNeedsUpdate) {
                             body.compose_file = await updatedCompose();
                         }
 
@@ -2249,7 +2255,7 @@ <h3>Derive VM</h3>
                         const data = await response.json();
                         upgradeDialog.value.encryptedEnvs = [];
                         upgradeDialog.value.show = false;
-                        if (body.compose_file) {
+                        if (composeWasExplicitlyUpdated) {
                             upgradeMessage.value = `✅ Compose file updated!`;
                         }
                         loadVMList();