I don’t think there is, unless you go through the trouble to make a custom image, and do all of the installation at build time. I’ve made updating work for me by manually importing the GPG keys and then doing rpm-ostree install with the yum repo enabled. If I don’t import the keys ahead of time, Chrome won’t install due to signature failures (see above).
Unfortunately, the reason I have to do that at container build time is because you can’t install the keys while the system is running.