diff --git a/roles/ipa/service/tasks/main.yml b/roles/ipa/service/tasks/main.yml
index 846ee5869c..9b0ab60511 100644
--- a/roles/ipa/service/tasks/main.yml
+++ b/roles/ipa/service/tasks/main.yml
@@ -28,3 +28,6 @@
   when:
     - ipa_service_defined is failed
     - "\"'krbprincipalname' already contains one or more values\" not in ipa_service_defined.msg"
+  tags:
+  - config
+  - krb5