diff --git a/roles/base_config/tasks/main.yaml b/roles/base_config/tasks/main.yaml
index ab737b7..0837c64 100644
--- a/roles/base_config/tasks/main.yaml
+++ b/roles/base_config/tasks/main.yaml
@@ -1,10 +1,12 @@
 # Ensure the ssh module is disabled, so a cloud-init config change doesn't regenerate the host keys for no reason.
 - name: check if cloud-init config file exists
+  tags: [ "base_config" ]
   ansible.builtin.stat:
     path: /etc/cloud/cloud.cfg
   register: base_config__stat_cloud_cfg
 
 - name: ensure the cloud-init ssh module is disabled
+  tags: [ "base_config" ]
   ansible.builtin.replace:
     path: /etc/cloud/cloud.cfg
     regexp: " - ssh$"
@@ -14,6 +16,7 @@
 
 # Ensure a base set of admin tools is installed.
 - name: ensure a base set of admin tools is installed
+  tags: [ "base_config" ]
   ansible.builtin.apt:
     name:
       - vim