Description of problem:
Add a new master/node to existed cluster, docker-excluder did not protect docker installed at a right version.

# rpm -qa|grep excluder
atomic-openshift-excluder-3.3.1.46-1.git.0.c15d151.el7.noarch
atomic-openshift-docker-excluder-3.3.1.46-1.git.0.c15d151.el7.noarch

# docker --version
Docker version 1.12.6, build 88a4867/1.12.6

# cat /etc/yum.conf |grep exclude
exclude= tuned-profiles-atomic-openshift-node  atomic-openshift-tests  atomic-openshift-sdn-ovs  atomic-openshift-recycle  atomic-openshift-pod  atomic-openshift-node  atomic-openshift-master  atomic-openshift-dockerregistry  atomic-openshift-clients-redistributable  atomic-openshift-clients  atomic-openshift  docker*1.20*  docker*1.19*  docker*1.18*  docker*1.17*  docker*1.16*  docker*1.15*  docker*1.14*  docker*1.13*  docker*1.12* 



Version-Release number of selected component (if applicable):
atomic-openshift-utils-3.3.101-1.git.0.abe8fc6.el7.noarch

How reproducible:
always

Steps to Reproduce:
1. Rpm install ocp 3.3 ha env.
2. Prepare a fresh host enabled 3.3 latest repo. 
3. Edit inventory file to add following info:
[OSEv3:children]
...
new_masters
...
[new_masters]
...
[new_nodes]

3. Add a new master to the cluster
# ansible-playbook -i hosts /usr/share/ansible/openshift-ansible/playbooks/byo/openshift-master/scaleup.yml

4. After add new master succeed, add a new node to the cluster
# ansible-playbook -i hosts /usr/share/ansible/openshift-ansible/playbooks/byo/openshift-node/scaleup.yml

Actual results:
Scaleup succeed and both of excluders installed on the new host, but docker version is out of excluded package lists.

Expected results:
Docker should be installed with right version when scaleup master/node.

Additional info:
The root cause should be docker was installed before docker-excluder. I think 3.4 should have the same issue, but not like 3.3, it would not get any bad influence till now, because the latest version is docker-1.12, just below docker-excluder's excluded package lists.