Set package on hold after installation

tasks/main.yml

@@ -13,6 +13,13 @@
 - name: "Opensearch | Install opensearch"
   ansible.builtin.apt:
     name: opensearch
+    allow_change_held_packages: true
+
+- name: Opensearch | Hold package
+  ansible.builtin.dpkg_selections:
+    name: opensearch
+    selection: hold
+  when: opensearch_plugins is defined
 
 - name: "Opensearch | Install plugins"
   ansible.builtin.command: