switch-secret-uuid.sh

#!/bin/bash

if ! command -v virsh; then
  echo "virsh  could not be found"
  exit
fi

SECRET_UUID=$(virsh secret-list | grep 'client.cinder' | cut -d' ' -f2)
SECRET_VALUE=$(cat /etc/ceph/ceph.client.cinder.keyring | grep 'key' | cut -d'=' -f2 | cut -d' ' -f2)

virsh secret-undefine ${SECRET_UUID}
virsh secret-define --file /dev/stdin <<EOF
<secret ephemeral='no' private='no'>
  <uuid>457eb676-33da-42ec-9a8c-9293d545c337</uuid>
  <usage type='ceph'>
    <name>client.cinder secret</name>
  </usage>
</secret>
EOF

virsh secret-set-value --secret 457eb676-33da-42ec-9a8c-9293d545c337 --base64 ${SECRET_VALUE}

sed -i 's/^rbd_secret_uuid.*/rbd_secret_uuid = 457eb676-33da-42ec-9a8c-9293d545c337/' /etc/nova/nova.conf
systemctl restart nova-compute || systemctl restart openstack-nova-compute