gleep fixes mtls and stuff

app/apps/keys/models.py

@@ -107,7 +107,15 @@ class SSHCertificateAuthority(models.Model):
         self.revoked_at = timezone.now()
 
     def get_private_key(self) -> str:
-        file_payload = read_secret_ref(self.private_key, label="User CA private key")
+        try:
+            file_payload = read_secret_ref(self.private_key, label="User CA private key")
+        except RuntimeError as exc:
+            # Recover gracefully when a secret-file reference points to a
+            # deleted key file (for example after volume resets).
+            if "file missing:" in str(exc):
+                file_payload = ""
+            else:
+                raise
         if file_payload:
             return file_payload
         inline_payload = (self.private_key or "").strip()