Comment 1 for bug 1862640

This isn't a bug, but perhaps a misunderstanding about hyper-convergence and co-locating services.

The OpenStack api and service packages are PER host, not per unit. Thus if two charms are co-located on a host and they rely on common packages (or even if packages are just "apt upgrade"d) then the packages WILL be updated.

Marking as invalid as this is how the packaging distribution for OpenStack works. To obtain isolation, LXD or other separated hypervisor units should be used for units that don't need kernel packages, with the bare metal being reserved for ceph-osd and nova-compute nodes.