Yum Repo Updates pattern in Puppet

updates.pp

class updates (
  $update_repo = 'patchlevel',
  $enforce     = false,
) {

  yumrepo { 'patchlevel':
    baseurl  => "http://${::servername}/patches",
    descr    => 'Patch Level Repo',
    enabled  => 1,
    gpgcheck => 1,
    gpgkey   => 'file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6',
  }

  exec { 'yum-updates':
    command   => "yum --disablerepo '*' --enablerepo '${update_repo}' update -y",
    unless    => "yum --disablerepo '*' --enablerepo '${update_repo}' check-update",
    logoutput => true,
    path      => '/usr/bin',
    noop      => !$enforce,
    require   => Yumrepo['patchlevel'],
  }

}