Security: Enable automatic updates as an option

[Major Hayden]

Automatic updates are not included in openstack-ansible-security. This could potentially cause issues in some environments, but some deployers may want to enable automatic updates.

We should add the Ansible tasks to get this done, but make it optional.

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/304096
Committed: https://git.openstack.org/cgit/openstack/openstack-ansible-security/commit/?id=d1ca8dbaa752703eee2c68e33aade87223602415
Submitter: Jenkins
Branch: master

commit d1ca8dbaa752703eee2c68e33aade87223602415
Author: Matt Thompson <email address hidden>
Date: Mon Apr 11 13:22:08 2016 +0100

    Add ability to enable unattended upgrades

    This commit adds the ability to enable automatic package upgrades via
    openstack-ansible-security. To enable, add the following variable to
    your /etc/openstack_deploy/user_variables.yml file:

    unattended_upgrades_enabled: true

    To have the unattended upgrades system send e-mail notifications
    when packages need updating or errors are encountered, add the
    following to user_variables.yml:

    unattended_upgrades_notifications: true

    As many organisations do not subscribe to auto updates, this
    functionality will remain disabled by default.

    Note that the first iteration of this change does not allow deep
    customisation of unatteded-upgrades. This means that as it stands
    only trusty-security (or $distro-security) updates will be applied.

    Closes-Bug: #1568075

    Change-Id: I22ba1a02acfbe2befb601af6a4099d53d988d856

[Thierry Carrez (ttx)]

This issue was fixed in the openstack/openstack-ansible-security 14.0.0.0b1 development milestone.