diff --git a/.ansible-lint b/.ansible-lint
index 547441059b749b5718848ffc357ea5cefe677696..91d8f45e5fcf23c005d636eeb42ce191fa901da6 100644
--- a/.ansible-lint
+++ b/.ansible-lint
@@ -14,7 +14,6 @@ skip_list:
   - '303'
   - '305'
   - '306'
-  - '403'
   - '404'
   - '502'
   - '503'
diff --git a/contrib/kvm-setup/roles/kvm-setup/tasks/main.yml b/contrib/kvm-setup/roles/kvm-setup/tasks/main.yml
index e1df16ad2a2ad6a2381e20f40ade93b2288fa36a..543fee5a025d49a3d81d4d1a9fd985897a3a30ff 100644
--- a/contrib/kvm-setup/roles/kvm-setup/tasks/main.yml
+++ b/contrib/kvm-setup/roles/kvm-setup/tasks/main.yml
@@ -1,15 +1,9 @@
 ---
 
-- name: Upgrade all packages to the latest version (yum)
-  yum:
-    name: '*'
-    state: latest
-  when: ansible_os_family == "RedHat"
-
 - name: Install required packages
   yum:
     name: "{{ item }}"
-    state: latest
+    state: present
   with_items:
     - bind-utils
     - ntp
@@ -21,23 +15,13 @@
     update_cache: yes
     cache_valid_time: 3600
     name: "{{ item }}"
-    state: latest
+    state: present
     install_recommends: no
   with_items:
     - dnsutils
     - ntp
   when: ansible_os_family == "Debian"
 
-- name: Upgrade all packages to the latest version (apt)
-  shell: apt-get -o \
-       Dpkg::Options::=--force-confdef -o \
-       Dpkg::Options::=--force-confold -q -y \
-       dist-upgrade
-  environment:
-    DEBIAN_FRONTEND: noninteractive
-  when: ansible_os_family == "Debian"
-
-
 # Create deployment user if required
 - include: user.yml
   when: k8s_deployment_user is defined
diff --git a/roles/kubernetes/preinstall/tasks/0120-growpart-azure-centos-7.yml b/roles/kubernetes/preinstall/tasks/0120-growpart-azure-centos-7.yml
index 3e737fea3b4d9cf42fc6dc890603a42d4b165feb..b00c576eda82fbbfcff77a7f160ebc5fd736bb4a 100644
--- a/roles/kubernetes/preinstall/tasks/0120-growpart-azure-centos-7.yml
+++ b/roles/kubernetes/preinstall/tasks/0120-growpart-azure-centos-7.yml
@@ -5,7 +5,7 @@
 - name: install growpart
   package:
     name: cloud-utils-growpart
-    state: latest
+    state: present
 
 - name: check if growpart needs to be run
   command: growpart -N /dev/sda 1