Added yum-cron update_cmd option.

ansible/roles/yum-cron/defaults/main.yml

@@ -1,3 +1,4 @@
 ---
 
 yum_cron_enabled: false
+yum_cron_update_cmd: 'security'

ansible/roles/yum-cron/tasks/main.yml

@@ -15,6 +15,15 @@
   notify:
     - Restart yum-cron
 
+- name: Replace | Enable update applying for yum-cron (CentOS)
+  replace:
+    dest: /etc/yum/yum-cron.conf
+    regexp: "^update_cmd = default"
+    replace: "update_cmd = {{ yum_cron_update_cmd }}"
+  when: yum_cron_enabled
+  notify:
+    - Restart yum-cron
+
 - name: Service | Enable yum-cron (CentOS)
   service:
     name: yum-cron

ansible/yum.yml

@@ -4,3 +4,4 @@
   hosts: seed:overcloud
   roles:
     - role: yum
+    - role: yum-cron

etc/kayobe/yum-cron.yml

@@ -0,0 +1,4 @@
+---
+
+#yum_cron_enabled: false
+#yum_cron_update_cmd: 'security'