Overcloud RPM security updates

Issue

• Could you please confirm if it is advisable/supported to update the operating system's packages on the overcloud independent from the "stack update"?

• Do we need to sync the container's update (via director) with the operating system's update or can we apply "yum update" on the nodes anytime an update is provided?

• The main reason for this is security, as the container's update causes downtime and/or some sort of disruption on the environment, we would like to apply security patches more often (like weekly) into the nodes (not on the containers), and then apply the container's update less often (monthly).

• Is this a supported scenario?