tag plays in playbooks (instead of tasks in roles)

roles/deploy_systemd_resolved_config/handlers/main.yaml

@@ -1,6 +1,5 @@
 ---
 - name: "reload systemd-resolved"
-  tags: [ "deploy_systemd_resolved_config" ]
   become: true
   ansible.builtin.systemd:
     name: "systemd-resolved.service"

roles/deploy_systemd_resolved_config/tasks/disable.yaml

@@ -1,13 +1,11 @@
 ---
 - name: Ensure /etc/resolv.conf is a plain file
-  tags: [ "deploy_systemd_resolved_config" ]
   become: true
   ansible.builtin.file:
     path: "/etc/resolv.conf"
     state: file
 
 - name: Write nameserver config directly into /etc/resolv.conf
-  tags: [ "deploy_systemd_resolved_config" ]
   become: true
   ansible.builtin.template:
     src: "resolv.conf.j2"
@@ -17,7 +15,6 @@
     mode: u=rw,g=r,o=r
 
 - name: Disable systemd-resolved
-  tags: [ "deploy_systemd_resolved_config" ]
   become: true
   ansible.builtin.systemd:
     name: "systemd-resolved.service"

roles/deploy_systemd_resolved_config/tasks/enable.yaml

@@ -1,13 +1,11 @@
 ---
 - name: Ensure systemd-resolved is installed
-  tags: [ "deploy_systemd_resolved_config" ]
   become: true
   when: ansible_facts["distribution"] == "Debian"
   ansible.builtin.package:
     name: [ "systemd-resolved" ]
 
 - name: Deploy systemd-resolved config
-  tags: [ "deploy_systemd_resolved_config" ]
   become: true
   notify: "reload systemd-resolved"
   ansible.builtin.template:
@@ -18,7 +16,6 @@
     mode: u=rw,g=r,o=r
 
 - name: Make /etc/resolv.conf points to systemd-resolved
-  tags: [ "deploy_systemd_resolved_config" ]
   become: true
   when: deploy_systemd_resolved_config__mode != "extern"
   ansible.builtin.file: # noqa: jinja
@@ -35,7 +32,6 @@
       {%- endif -%}
 
 - name: Ensure systemd-resolved is running and enabled
-  tags: [ "deploy_systemd_resolved_config" ]
   become: true
   ansible.builtin.systemd:
     name: systemd-resolved.service

roles/deploy_systemd_resolved_config/tasks/main.yaml

@@ -1,10 +1,8 @@
 ---
 - name: Include enable.yaml
-  tags: [ "deploy_systemd_resolved_config" ]
   ansible.builtin.include_tasks: enable.yaml
   when: deploy_systemd_resolved_config__enable
 
 - name: Include disable.yaml
-  tags: [ "deploy_systemd_resolved_config" ]
   ansible.builtin.include_tasks: disable.yaml
   when: not deploy_systemd_resolved_config__enable

roles/knot/handlers/main.yaml

@@ -1,19 +1,16 @@
 ---
 - name: reload knot
-  tags: [ auth-dns ]
   become: true
   ansible.builtin.systemd:
     name: knot.service
     state: reloaded
 
 - name: netplan apply
-  tags: [ auth-dns ]
   become: true
   changed_when: true
   ansible.builtin.command: "netplan apply"
 
 - name: restart knot-exporter
-  tags: [ auth-dns ]
   become: true
   ansible.builtin.systemd:
     name: knot-exporter.service

roles/knot/tasks/01-install.yaml

@@ -1,6 +1,5 @@
 ---
 - name: Install knot
-  tags: [ auth-dns ]
   become: true
   ansible.builtin.package:
     name:

roles/knot/tasks/02-configure.yaml

@@ -1,6 +1,5 @@
 ---
 - name: Ensure required directories exist
-  tags: [ auth-dns ]
   become: true
   loop: [ "/etc/knot", "/etc/knot/zones" ]
   ansible.builtin.file:
@@ -11,7 +10,6 @@
     mode: u=rwx,g=rx,o=
 
 - name: Deploy knot configuration file
-  tags: [ auth-dns ]
   become: true
   notify: reload knot
   ansible.builtin.template:
@@ -22,7 +20,6 @@
     mode: u=rw,g=r,o=
 
 - name: Deploy configured zones
-  tags: [ auth-dns ]
   become: true
   notify: reload knot
   loop: "{{ knot__zones }}"
@@ -42,7 +39,6 @@
 # this results in outgoing zone transfers failing because knot will prefer to use the dynamic address over the statically configured one.
 # so because we are configuring a DNS Nameserver where known IP-Addresses are actually important for ACL reasons, SLAAC is disabled
 - name: Disable IPv6 SLAAC
-  tags: [ auth-dns ]
   become: true
   notify: netplan apply
   ansible.builtin.template:

roles/knot/tasks/03-configure-exporter.yaml

@@ -1,5 +1,4 @@
 - name: Deploy knot-exporter systemd unit
-  tags: [ auth-dns ]
   become: true
   register: knot_deploy_service_file
   notify: restart knot-exporter
@@ -11,7 +10,6 @@
     mode: u=rw,g=r,o=r
 
 - name: Ensure knot-exporter is running and enabled
-  tags: [ auth-dns ]
   become: true
   ansible.builtin.systemd:
     name: knot-exporter.service