add teardown tags

ansible/playbooks/openstack-security-groups.yml

@@ -7,6 +7,7 @@
   - name: Load variables (Standard vs protected)
     include_vars:
       file: ../vars/{{ project_zone }}.yml
+    tags: always
 
   - name: Create security groups
     os_security_group:
@@ -14,6 +15,7 @@
       state: "{{ state }}"
       name: "{{ item }}"
     with_items: "{{ security_groups }}"
+    tags: teardown
 
   - name: Remove default egress rules (protected only)
     os_security_group:
@@ -24,6 +26,7 @@
     with_items:
       - user_vms
       - domain_member
+      # temporary
     when: project_zone == "protected"
 
   - name: Set remote group rules for security groups