Currently in our workplace all patches are managed by WSUS and applied manually through traditional tools such as Solarwinds Patchmanager or BatchPatch. This tool has worked well enough so far. However, the manual steps and inconsistencies are a real pain.
I am currently looking into the automation options that chef can offer. Chef seems to offer an excellent solution to our patching pains. I would like to use chef in combination with our WSUS server to automate our patch scheduling and installs/reboots. As well as ensure compliance across our network.
I am looking for recommendations as far as resources to study as well as cookbooks I should look into. I would also love any advice on this topic from others experienced with this. I would like to know the best way to approach and implement this.
Thank you for your time,