Automated Package Updates

The automatic updates are controlled in Hiera:

Hiera key	default	comments
base::automatic_updates::interval	weekly	valid are `daily`, `weekly` and `never` which disables the automatic updates
base::automatic_updates::type	security	`security` installs only security updates whereas `all` installs all updates
base::automatic_updates::exclude	[]	list of packages not to update, wildcards like "*" are allowed
base::automatic_updates::kernel	false	define if new kernel packages also should be installed automatically

Note that the updates run on midnight, for weekly from Sunday to Monday. There is no automatic reboot, e.g. for kernel updates.