diff --git a/src/oneprovision/lib/provision/provision_config.rb b/src/oneprovision/lib/provision/provision_config.rb
index e82a4e28df..daa37b0a70 100644
--- a/src/oneprovision/lib/provision/provision_config.rb
+++ b/src/oneprovision/lib/provision/provision_config.rb
@@ -243,6 +243,9 @@ module OneProvision
                         # match[2]: attribute
                         match = match.split('.')
 
+                        # don't evaluate ${updates.foo}
+                        next if match.size == 2 && match[0] == 'updates'
+
                         if match.size == 1
                             if @config['provision']
                                 index = @config['provision']['index']