# Use include_role instead of roles: so that we can late-bind the roles list
- include_role:
    name: iptables
- include_role:
    name: puppet-install
- include_role:
    name: disable-puppet-agent
- include_role:
    name: puppet