From 8331c1f858f635b8836c9c55a4ee7d148735f601 Mon Sep 17 00:00:00 2001
From: Sander Klein <github@roedie.nl>
Date: Sat, 5 Dec 2020 03:21:25 +0100
Subject: [PATCH] Hold the docker-ce-cli (#6995)

This will make sure an upgrade doesn't upgrade the docker cli.
---
 roles/container-engine/docker/tasks/main.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/roles/container-engine/docker/tasks/main.yml b/roles/container-engine/docker/tasks/main.yml
index 67a22b42d..94d314f32 100644
--- a/roles/container-engine/docker/tasks/main.yml
+++ b/roles/container-engine/docker/tasks/main.yml
@@ -207,9 +207,12 @@
 # This is required to ensure any apt upgrade will not break kubernetes
 - name: Tell Debian hosts not to change the docker version with apt upgrade
   dpkg_selections:
-    name: docker-ce
+    name: "{{ item }}"
     selection: hold
   when: ansible_os_family in ["Debian"]
+  with_items:
+    - docker-ce
+    - docker-ce-cli
 
 - name: Ensure latest version of libseccomp installed  # noqa 403
   package: