Best method for Windows Updates

[Mosby Simmons]

All,

What have you found to be the best way to update Windows using Salt?  I basically just want to get all criticals.

I had found this state file somewhere:

update_critical:

  wua.uptodate:

    - categories:

      - Critical Updates

      - Security Updates

      - Updates

    - severities:

      - Critical

    - skip_reboot: False

but it seems to be missing things like cumulative updates for Windows 2016.

For example after running this I run a:

salt "<minion>" win_wua.available categories=["Updates"]

and it still shows KB4507459, KB4512495, KB890830 as needing to be installed.

I thought having the "-Updates" would have caught this in the state file.

Am I doing something wrong?

[MacBien Rost]

That's a good question, I'm just now coming across this as well. Any updates?

[Mosby Simmons]

Unfortunately not.  I've moved on to tackle other problems, but I would like to get this fixed.

[MacBien Rost]

Here's a basic state I put together that works. Tested on a single minion currently:

windowsupdate:
  wua.uptodate:
    - name: Salt Ver Three Categories Windows Update
    - categories:
      - Updates
      - Security Updates
      - Critical Updates
    - skip_reboot: False

mrostscw@saltydog:~$ sudo salt 'srvjobsv04' win_wua.available categories=["Windows Server 2016"]
[sudo] password for mrostscw:
srvjobsv04:
    Nothing to return
mrostscw@saltydog:~$ sudo salt 'srvjobsv04' win_wua.available categories=["Updates,Security Updates"]
srvjobsv04:
    Nothing to return

--
You received this message because you are subscribed to the Google Groups "Salt-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to salt-users+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/salt-users/5f36117e-9971-43e7-9306-c48c15f09f70%40googlegroups.com.