WindowsUpdate.pp

# Check for pending reboots before attempting to update
reboot { 'pre_patch_reboot':
  schedule => 'patch_window',
  when     => 'pending',
  message  => 'Reboot pending. Rebooting before attempting updates...',
}
Reboot['pre_patch_reboot'] -> Reboot['post_patch_reboot']

# Apply allowed/needed updates
$updates.each | $kb | {
  windows_updates::kb { $kb:
    ensure      => 'present',
    maintwindow => 'patch_window',
  }
  
  Reboot['pre_patch_reboot'] -> Windows_Updates::Kb[$kb] -> Reboot['post_patch_reboot']
}

# Reboot after updates if needed
reboot { 'post_patch_reboot':
  schedule => 'patch_window',
  when     => 'pending',
  message  => 'Updates Installed. Rebooting.',
}