openstack-ansible-security/doc/source/developer-notes/V-38481.rst

Exception

Operating system patching is left up to the deployer to configure based on their business requirements and toleration for risk. Enabling automated updates in Ubuntu can be done with changes to the apt configuration.

Ubuntu's documentation on automatic updates covers a few options for configuring apt.