Update LIGO.yaml to add LIGO Caltech AP issuer to auth OSDF origins

This PR updates the LIGO.yaml VO to add the CIT HTCondor access point issuer (`https://osdf.igwn.org/cit`) to all of our production authenticated OSDF origins, in addition to the two test origins that already supported it. The base path on those test origins has also been updated to include the production Namespace paths, as those now need to agree since the base path is per-issuer.

virtual-organizations/LIGO.yaml

@@ -92,6 +92,9 @@ DataFederations:
           - SciTokens:
               Issuer: https://test.cilogon.org/igwn
               Base Path: /user/ligo,/igwn,/igwn/cit,/igwn/test,/igwn/test-write
+          - SciTokens:
+              Issuer: https://osdf.igwn.org/cit
+              Base Path: /user/ligo,/igwn,/igwn/cit,/igwn/test,/igwn/test-write
         AllowedOrigins:
           - CIT_LIGO_ORIGIN
           - LIGO-StashCache-Origin
@@ -137,6 +140,9 @@ DataFederations:
           - SciTokens:
               Issuer: https://test.cilogon.org/igwn
               Base Path: /user/ligo,/igwn,/igwn/cit,/igwn/test,/igwn/test-write
+          - SciTokens:
+              Issuer: https://osdf.igwn.org/cit
+              Base Path: /user/ligo,/igwn,/igwn/cit,/igwn/test,/igwn/test-write
         AllowedOrigins:
           - UCL-Virgo-StashCache-Origin
         AllowedCaches: *ligo-allowed-caches
@@ -152,6 +158,9 @@ DataFederations:
           - SciTokens:
               Issuer: https://test.cilogon.org/igwn
               Base Path: /user/ligo,/igwn,/igwn/cit,/igwn/test,/igwn/test-write
+          - SciTokens:
+              Issuer: https://osdf.igwn.org/cit
+              Base Path: /user/ligo,/igwn,/igwn/cit,/igwn/test,/igwn/test-write
         AllowedOrigins:
           - CIT_LIGO_ORIGIN_IFO
         AllowedCaches: *ligo-allowed-caches
@@ -167,6 +176,9 @@ DataFederations:
           - SciTokens:
               Issuer: https://test.cilogon.org/igwn
               Base Path: /user/ligo,/igwn,/igwn/cit,/igwn/test,/igwn/test-write
+          - SciTokens:
+              Issuer: https://osdf.igwn.org/cit
+              Base Path: /user/ligo,/igwn,/igwn/cit,/igwn/test,/igwn/test-write
         AllowedOrigins:
           - KAGRA_OSDF_ORIGIN
         AllowedCaches: *ligo-allowed-caches
@@ -182,6 +194,9 @@ DataFederations:
           - SciTokens:
               Issuer: https://test.cilogon.org/igwn
               Base Path: /user/ligo,/igwn,/igwn/cit,/igwn/test,/igwn/test-write
+          - SciTokens:
+              Issuer: https://osdf.igwn.org/cit
+              Base Path: /user/ligo,/igwn,/igwn/cit,/igwn/test,/igwn/test-write
         AllowedOrigins:
           - CIT_LIGO_ORIGIN_SHARED
         AllowedCaches: *ligo-allowed-caches
@@ -197,6 +212,9 @@ DataFederations:
           - SciTokens:
               Issuer: https://test.cilogon.org/igwn
               Base Path: /user/ligo,/igwn,/igwn/cit,/igwn/test,/igwn/test-write
+          - SciTokens:
+              Issuer: https://osdf.igwn.org/cit
+              Base Path: /user/ligo,/igwn,/igwn/cit,/igwn/test,/igwn/test-write
         AllowedOrigins:
           - CIT_LIGO_ORIGIN_STAGING
         AllowedCaches: *ligo-allowed-caches
@@ -215,7 +233,7 @@ DataFederations:
               Base Path: /user/ligo,/igwn,/igwn/cit,/igwn/test,/igwn/test-write
           - SciTokens:
               Issuer: https://osdf.igwn.org/cit
-              Base Path: /igwn/test,/igwn/test-write
+              Base Path: /user/ligo,/igwn,/igwn/cit,/igwn/test,/igwn/test-write
         AllowedOrigins:
           - CIT_LIGO_ORIGIN_TEST
         AllowedCaches: *ligo-allowed-caches
@@ -233,7 +251,7 @@ DataFederations:
               Base Path: /user/ligo,/igwn,/igwn/cit,/igwn/test,/igwn/test-write
           - SciTokens:
               Issuer: https://osdf.igwn.org/cit
-              Base Path: /igwn/test,/igwn/test-write
+              Base Path: /user/ligo,/igwn,/igwn/cit,/igwn/test,/igwn/test-write
         AllowedOrigins:
           - CIT_LIGO_ORIGIN_TEST_WRITE
         AllowedCaches: *ligo-allowed-caches