Allow setting secret for scimserviceprovider app

CHANGELOG.md

 # Changelog
 
+## Unreleased
+
+* Allow setting SCIM token for use with the `scimserviceprovider` app.
+
 ## [0.15.20] - 2023-12-21
 
 * Fix logic to decide source of nextcloud apps: pinned from upstream repo, or

templates/nextcloud-onlyoffice-config.yaml

@@ -13,6 +13,8 @@ data:
   setup-apps.sh: |
     #!/bin/bash
 
+    set -o errexit
+
     # This script gets executed by the Kubernetes Job `{{ .Release.Name }}-setup-apps`,
     # which gets created by Helm after every chart install and upgrade.
     #
@@ -180,6 +182,10 @@ data:
     run_as "php $occ db:add-missing-primary-keys --no-interaction"
     run_as "php $occ db:convert-filecache-bigint --no-interaction"
 
+    {{- if .Values.scim.token }}
+    set -x
+    run_as "php $occ config:app:set scimserviceprovider jwt-secret --value {{ .Values.scim.token }}"
+    {{- end }}
   #
   # All values in config.json are applied by the nextcloud occ command
   #   config:import.

values-local.yaml.example

@@ -93,3 +93,7 @@ rabbitmq:
 #   # clientSecret: YouReallyNeedToChangeThis
 #   logoutUrl: https://sso.stackspin.example.net/oauth2/sessions/logout
 #   loginButtonText: Log in with OIDC
+
+scim:
+  url: "https://files.example.com/index.php/apps/scimserviceprovider/"
+  token: JWT token

values.yaml

@@ -207,6 +207,10 @@ oidc:
   logoutUrl: https://sso.stackspin.example.net/oauth2/sessions/logout
   loginButtonText: Log in with OIDC
 
+scim: {}
+  # url: ...
+  # token: ...
+
 tests:
   image:
     # https://hub.docker.com/r/cypress/included/tags