Add a parameter to package mark hold

manifests/init.pp

@@ -178,6 +178,9 @@
 #   For http, https, and ftp downloads, you may set how long the exec resource
 #   may take.
 #
+# @param package_hold
+#   Set to hold to tell Debian apt/Solaris pkg to hold the package version.
+#
 # @param package_name
 #   Name Of the package to install.
 #
@@ -403,11 +406,12 @@
   String                                          $default_logging_level     = $logging_level,
   Optional[String]                                $keystore_password         = undef,
   Optional[Stdlib::Absolutepath]                  $keystore_path             = undef,
+  Stdlib::Filemode                                $logdir_mode               = '2750',
+  Boolean                                         $package_hold              = false,
   Optional[Stdlib::Absolutepath]                  $private_key               = undef,
   Boolean                                         $restart_config_change     = $restart_on_change,
   Boolean                                         $restart_package_change    = $restart_on_change,
   Boolean                                         $restart_plugin_change     = $restart_on_change,
-  Stdlib::Filemode                                $logdir_mode               = '2750',
 ) {
   #### Validate parameters
 

manifests/package.pp

@@ -153,9 +153,19 @@
   }
 
   if ($elasticsearch::package_provider == 'package') {
-    package { 'elasticsearch':
-      ensure => $package_ensure,
-      name   => $elasticsearch::_package_name,
+    # You cannot use "mark" property while "ensure" is one of ["absent", "purged", "held"]
+    if $package_ensure in ['absent', 'purged', 'held'] {
+      package { 'elasticsearch':
+        ensure => $package_ensure,
+        name   => $elasticsearch::_package_name,
+      }
+    } else {
+      # https://puppet.com/docs/puppet/7/types/package.html#package-attribute-mark
+      package { 'elasticsearch':
+        ensure => $package_ensure,
+        name   => $elasticsearch::_package_name,
+        mark   => ($elasticsearch::package_hold ? { true  => 'hold', false => 'none', }),
+      }
     }
 
     exec { 'remove_plugin_dir':

spec/classes/000_elasticsearch_init_spec.rb

@@ -381,6 +381,19 @@
               with(ensure: 'latest')
           }
         end
+
+        describe 'with hold enabled' do
+          let(:params) do
+            default_params.merge(
+              package_hold: true
+            )
+          end
+
+          it {
+            expect(subject).to contain_package('elasticsearch').
+              with(mark: 'hold')
+          }
+        end
       end
 
       describe 'running a a different user' do