Automated Package Updates

The automatic updates are controlled in Hiera:

Hiera key	default	comments
`base::automatic_updates::interval`	`weekly`	valid are `daily`, `weekly` and `never` which disables the automatic updates
`base::automatic_updates::type`	`security`	`security` installs only security updates whereas `all` installs all updates
`base::automatic_updates::exclude`	`[]`	list of packages not to update, wildcards like "*" are allowed
`base::automatic_updates::kernel`	`false`	define if new kernel packages also should be installed automatically

Note that the updates run on midnight, for weekly from Sunday to Monday. There is no automatic reboot, e.g. for kernel updates.