Patch Puppet Enterprise 2016.2 to allow Debian-based pe_repo-managed agent repositories to ignore expired GPG key

gpg_ignore.pp

# remove after PE 2016.4 or later is deployed
if $pe_build == '2016.2.1' {
  file_line { 'Allow PE 2016.2.1 Debian pe_repos to ignore old GPG key':
    ensure  => 'present',
    path    => '/opt/puppetlabs/puppet/modules/pe_repo/templates/deb.bash.erb',
    replace => true,
    match   => "  DEBIAN_FRONTEND=noninteractive apt-get install -y -o Apt::Get::Purge=false -o Dpkg::Options::='--force-confold' -o Dpkg::Options::='--force-confdef' --no-install-recommends puppet-agent",
    line    => "  DEBIAN_FRONTEND=noninteractive apt-get install -y -o Apt::Get::Purge=false -o Dpkg::Options::='--force-confold' -o Dpkg::Options::='--force-confdef' --no-install-recommends --allow-unauthenticated puppet-agent",
  }
}