Started working with Ansible. Added some playbooks.

apt_upgrade.yml

@@ -0,0 +1,14 @@
+- name: Upgrade packages
+  hosts: vms
+  become: true
+
+  tasks:
+   - name: Update cache 
+     ansible.builtin.apt:
+      update_cache: true
+     register: cache_updated
+
+   - name: Upgrade packages if something is changed
+     ansible.builtin.apt:
+      upgrade: "yes"
+     when: cache_updated.changed

zabbix_agent_upgrade.yml

@@ -0,0 +1,16 @@
+- name: Upgrade zabbix agent
+  hosts: zagents
+  become: true
+
+  tasks:
+   - name: Ensure that Zabbix agent is at the latest version 
+     ansible.builtin.apt:
+      name: zabbix-agent2
+      state: latest
+     register: zabbix_agent2_status
+
+   - name: Upgrade Zabbix agent if not latest
+     ansible.builtin.apt:
+      name: zabbix-agent2
+      upgrade: yes
+     when: zabbix_agent2_status.changed