kubespray/roles/bootstrap-os/tasks/ubuntu.yml

---
- name: Import Debian bootstrap
  import_tasks: debian.yml

- name: Check unattended-upgrades file exist
  stat:
    path: /etc/apt/apt.conf.d/50unattended-upgrades
  register: unattended_upgrades_file_stat
  when:
    - ubuntu_kernel_unattended_upgrades_disabled

- name: Disable kernel unattended-upgrades
  lineinfile:
    path: "{{ unattended_upgrades_file_stat.stat.path }}"
    insertafter: "Unattended-Upgrade::Package-Blacklist"
    line: '"linux-";'
    state: present
  become: true
  when:
    - ubuntu_kernel_unattended_upgrades_disabled
    - unattended_upgrades_file_stat.stat.exists