Description of problem:
The user has several RHOSP deployments that involve dozens of overcloud nodes. At the same time the security policy is very tight and only allows a few days lead time to patch a high/critical severity vulnerability. Therefore running a full minor update of the overcloud is not efficient if the need is only to patch a specific package/component in every overcloud node.

The user suggested to have an option in Director similar to the regular overcloud minor update but only to apply security errata.