diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 1126caf..7696ec6 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -28,6 +28,10 @@ variables:
 
 validate-authentik:       # This job runs in the build stage, which runs first.
   stage: validate
+  tags:
+    - k3s
+    - ccowley
+    - lab
   before_script:
     - wget https://github.com/opentofu/opentofu/releases/download/v1.7.2/tofu_1.7.2_amd64.apk -O /tmp/tofu_1.7.2_amd64.apk
     - apk add --allow-untrusted '/tmp/tofu_1.7.2_amd64.apk'
@@ -36,4 +40,4 @@ validate-authentik:       # This job runs in the build stage, which runs first.
   script:
     - cd authentik/
     - tofu init
-    - tofu validate
\ No newline at end of file
+    - tofu validate