ansible-lint: E403 Package installs should not use latest

.ansible-lint

@@ -15,7 +15,6 @@ skip_list:
   - '303'
   - '305'
   - '306'
-  - '403'
   - '404'
   - '502'
   - '503'

contrib/kvm-setup/roles/kvm-setup/tasks/main.yml

@@ -1,15 +1,9 @@
 ---
 
-- name: Upgrade all packages to the latest version (yum)
-  yum:
-    name: '*'
-    state: latest
-  when: ansible_os_family == "RedHat"
-
 - name: Install required packages
   yum:
     name: "{{ item }}"
-    state: latest
+    state: present
   with_items:
     - bind-utils
     - ntp
@@ -21,23 +15,13 @@
     update_cache: yes
     cache_valid_time: 3600
     name: "{{ item }}"
-    state: latest
+    state: present
     install_recommends: no
   with_items:
     - dnsutils
     - ntp
   when: ansible_os_family == "Debian"
 
-- name: Upgrade all packages to the latest version (apt)
-  shell: apt-get -o \
-       Dpkg::Options::=--force-confdef -o \
-       Dpkg::Options::=--force-confold -q -y \
-       dist-upgrade
-  environment:
-    DEBIAN_FRONTEND: noninteractive
-  when: ansible_os_family == "Debian"
-
-
 # Create deployment user if required
 - include: user.yml
   when: k8s_deployment_user is defined

roles/kubernetes/preinstall/tasks/0120-growpart-azure-centos-7.yml

@@ -5,7 +5,7 @@
 - name: install growpart
   package:
     name: cloud-utils-growpart
-    state: latest
+    state: present
 
 - name: check if growpart needs to be run
   command: growpart -N /dev/sda 1