application-cookbook-attributes.rb

override['unattended-upgrades']['allowed_origins']['add-this-one'] = true

application2-cookbook-attributes.rb

override['unattended-upgrades']['allowed_origins']['security'] = false # Turn off the default value

library-cookbook-attributes.rb

default['unattended-upgrades']['allowed_origins'] = {
  'security'  => true,
  'updates'   => false,
  'proposed'  => false,
  'backports' => false
}

lol fuck this

I typically would alter the defaults as shown above with an override statement either in an attribute or recipe file of an 'application' cookbook.The same should also work, altering the defaults via a role or environment too.

this is why we can't have nice things