diff --git a/docs/ansible/ansible.md b/docs/ansible/ansible.md
index 43769e0d92e8201bb7a1881d77bd1918048ac46c..40d52f9c3345e626a31573a016268712147e2c4b 100644
--- a/docs/ansible/ansible.md
+++ b/docs/ansible/ansible.md
@@ -231,6 +231,7 @@ The following tags are defined in playbooks:
 | services                       | Remove services (etcd, kubelet etc...) when resetting |
 | snapshot                       | Enabling csi snapshot                                 |
 | snapshot-controller            | Configuring csi snapshot controller                   |
+| system-packages                | Install packages using OS package manager             |
 | upgrade                        | Upgrading, f.e. container images/binaries             |
 | upload                         | Distributing images/binaries across hosts             |
 | vsphere-csi-driver             | Configuring csi driver: vsphere                       |
diff --git a/docs/operations/offline-environment.md b/docs/operations/offline-environment.md
index bbd412c5359994acb49a67d42c2101a929d2e9ed..0c5e1bf9e3f7826e4f7e8693906c5128b8708f3f 100644
--- a/docs/operations/offline-environment.md
+++ b/docs/operations/offline-environment.md
@@ -103,7 +103,9 @@ If you use the settings like the one above, you'll need to define in your invent
   can store them anywhere as long as it's accessible by kubespray. It's recommended to use `*_version` in the path so
   that you don't need to modify this setting everytime kubespray upgrades one of these components.
 * `yum_repo`/`debian_repo`/`ubuntu_repo`: OS package repository depending on your OS, should point to your internal
-  repository. Adjust the path accordingly.
+  repository. Adjust the path accordingly. Used only for Docker/Containerd packages (if needed); other packages might
+  be installed from other repositories. You might disable installing packages from other repositories by skipping
+  the `system-packages` tag
 
 ## Install Kubespray Python Packages
 
diff --git a/roles/kubernetes/preinstall/tasks/main.yml b/roles/kubernetes/preinstall/tasks/main.yml
index ee4de5d50a0588584c8a84a237141c01d127c812..ee846f8ba02c8cbf80160100a6224270e013cbf2 100644
--- a/roles/kubernetes/preinstall/tasks/main.yml
+++ b/roles/kubernetes/preinstall/tasks/main.yml
@@ -68,6 +68,7 @@
     - not dns_late
   tags:
     - bootstrap-os
+    - system-packages
 
 - name: Apply system configurations
   import_tasks: 0080-system-configurations.yml