Add nftables tag to clickhouse role nftables section

Author: LDiazN

ansible/roles/oonidata_clickhouse/tasks/main.yml

@@ -8,21 +8,29 @@
   set_fact:
     ch_nft_rule: '{{ ch_nft_rule | default([]) + [''add rule inet filter input ip saddr '' + item.ip + '' tcp dport 9000 counter accept comment "incoming clickhouse from '' + item.fqdn + ''"''] }}'
   loop: "{{ nftables_clickhouse_allow | rejectattr('fqdn', 'eq', inventory_hostname) | list }}"
+  tags:
+     - nftables
 
 - name: Create nftables rule for clickhouse inter-server communication
   set_fact:
     is_nft_rule: '{{ is_nft_rule | default([]) + [''add rule inet filter input ip saddr '' + item.ip + '' tcp dport 9009 counter accept comment "incoming clickhouse from '' + item.fqdn + ''"''] }}'
   loop: "{{ nftables_clickhouse_allow | rejectattr('fqdn', 'eq', inventory_hostname) | list }}"
+  tags:
+     - nftables
 
 - name: Create nftables rule for zookeeper
   set_fact:
     zk_nft_rule: '{{ zk_nft_rule | default([]) + [''add rule inet filter input ip saddr '' + item.ip + '' tcp dport 9181 counter accept comment "incoming zookeeper from '' + item.fqdn + ''"''] }}'
   loop: "{{ nftables_zookeeper_allow | rejectattr('fqdn', 'eq', inventory_hostname) | list }}"
+  tags:
+     - nftables
 
 - name: Create nftables rule for raft port
   set_fact:
     raft_nft_rule: '{{ raft_nft_rule | default([]) + [''add rule inet filter input ip saddr '' + item.ip + '' tcp dport 9234 counter accept comment "incoming raft from '' + item.fqdn + ''"''] }}'
   loop: "{{ nftables_zookeeper_allow | rejectattr('fqdn', 'eq', inventory_hostname) | list }}"
+  tags:
+     - nftables
 
 - ansible.builtin.include_role:
     name: nftables