API location migration

[phavekes]

Move alle API endpoint that are not used by our own frontend to /api/external/v1/**

This needs to be done in two steps:

1. support both locations to migrate other users
2. disable old path's in Openconext-Invite

[oharsta]

This affects the following API's

"/api/voot/**",
"/api/external/v1/voot/**",

"/api/teams/**",
"/api/external/v1/teams/**",

"/api/profile/**",
"/api/external/v1/profile/**",

"/api/aa/**",
"/api/external/v1/aa/**",

"/api/deprovision/**",
"/api/external/v1/deprovision/**",

[oharsta]

@Tyskai See https://aa.test2.surfconext.nl/authorities for the AA overview

[oharsta]

For the actual values used in the Java apps, you can ssh to [email protected] and see the application.* files in /opt/openconext/

[thijskh]

AA is done

[thijskh]

All apps are done. The /api/voot compat location and the legacy paths in the SecuriyConfig can now be removed

[oharsta]

@Tyskai Can you confirm that the following endpoints are not used by any of external applications identified by the endpoint name?

"/api/voot/**",
"/api/teams/**",
"/api/profile/**",
"/api/aa/**",
"/api/deprovision/**",

Only checking in ansible is not enough, as this does not prove that the actual production instance is not using the old url.

[thijskh]

@Tyskai Just check the haproxy access logs I guess?