Push TAL-calendar instead of pulling (due to network switch)

manifests/aes_sw.pp

@@ -87,17 +87,19 @@ class aes::aes_sw {
     group  => $examadm_group,
   }
 
+  # Push TAL-calendar file to UPP-server (replaces old pull solution)
   # lint:ignore:140chars
-  file { "${examadm_home}/.ssh/authorized_keys":
+  file { '/etc/cron.daily/tal-access' :
     ensure  => file,
-    mode    => '0600',
-    owner   => $examadm_user,
-    group   => $examadm_group,
-    # lint:ignore:strict_indent heredoc failing...
-    content => @(SSHPUBKEY),
-      command="/home/examadm/tal-cli/source/scripts/tal-export.py --format ics --lookback 90 --lookahead 180",no-pty,no-user-rc,no-port-forwarding,no-agent-forwarding,no-X11-forwarding ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJW4LP0av20r7lPXNgsftF9oaAXK41AvHyuHwybciZC/QBfTcmYif83563cTg0OzR/p+OSobiDM0odaaFYtP/8xbuVRz87X5bGYm2m8yHHqPxobHkT5g/faMkl9Fef+Al4EsT5tiaYMOhG2lj8XRYuwAb7qjoz3FFbs8TEPE7Sv+4BUCCH94taCuNYLXSxN1EXvw7VW6Ld5QXRFP53l2QUeTqE9oSii3BVrXlqqrLvNV/7nwdwyse4uhff4QrM9o4oc9FaQr8PLlPGxdlbSfIQJMVzHGpeDu0WLw+NqtLO1hsdlvQm7GrT/v8N7GJNKlsvhwnwUuMhTrB0yPMbbub1 klaar36@upp
-      command="/home/examadm/tal-cli/source/scripts/tal-export.py --written --format ics --lookback 90 --lookahead 180",no-pty,no-user-rc,no-port-forwarding,no-agent-forwarding,no-X11-forwarding ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILZ8aEAXw0tRcYrk1aqldepuC6tmdUYZuM270QdDF79o tal written exams to ics
-    | SSHPUBKEY
+    owner   => 'root',
+    group   => 'root',
+    mode    => '0700',
+    # lint:ignore:strict_indent
+    content => @(END),
+    #!/bin/bash
+    sudo -u examadm /home/examadm/tal-cli/source/scripts/tal-export.py --format ics --lookback 90 --lookahead 180 | sudo -u klaar36 ssh upp.ida.liu.se "cat >| /projects/upp/www/tal/tal-${environment}.ics"
+    sudo -u examadm /home/examadm/tal-cli/source/scripts/tal-export.py --written --format ics --lookback 90 --lookahead 180 | sudo -u klaar36 ssh upp.ida.liu.se "cat >| /projects/upp/www/tal/tal_written-${environment}.ics"
+    | END
     # lint:endignore:strict_indent
   }
   # lint:endignore:140chars

scripts/eyaml_encrypt.sh

 #! /bin/sh -eu
 
+# Either pass -s <string> for a string, or -f <file> for a file.
+
 exec eyaml encrypt --pkcs7-public-key "puppet_public_key.pkcs7.pem" "$@"