From 7ff004f7752e22bf6248f53e2641ef6f1daffdb8 Mon Sep 17 00:00:00 2001
From: Ryan McKinley <ryantxu@gmail.com>
Date: Mon, 12 Jan 2026 09:37:39 +0300
Subject: [PATCH] dual write secure values for create

---
 pkg/storage/legacysql/dualwrite/dualwriter.go | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/pkg/storage/legacysql/dualwrite/dualwriter.go b/pkg/storage/legacysql/dualwrite/dualwriter.go
index b469ff53b6e..b176c457e7b 100644
--- a/pkg/storage/legacysql/dualwrite/dualwriter.go
+++ b/pkg/storage/legacysql/dualwrite/dualwriter.go
@@ -247,8 +247,10 @@ func (d *dualWriter) Create(ctx context.Context, in runtime.Object, createValida
 	}
 	accCreated.SetResourceVersion("")
 	accCreated.SetUID("")
-	if err = accCreated.SetSecureValues(secure); err != nil {
-		return nil, fmt.Errorf("unable to set secure values on duplicate object %w", err)
+	if secure != nil {
+		if err = accCreated.SetSecureValues(secure); err != nil {
+			return nil, fmt.Errorf("unable to set secure values on duplicate object %w", err)
+		}
 	}
 
 	if readFromUnifiedWriteToBothStorages {