improve sysctl-setup for Ubuntu

tasks/sysctl-setup.yml

@@ -1,21 +1,33 @@
 ---
-- name: Ensure procps is installed.
-  package:
-    name: "{{ procps_package }}"
-    state: present
-  when: >
-    ansible_distribution != 'Debian'
-    or ansible_distribution_major_version | int < 10
+- block:
+  
+  - name: Enable br_netfilter module
+    modprobe:
+      name: br_netfilter
+      state: present
+  
+  - name: Ensure procps is installed.
+    package:
+      name: "{{ procps_package }}"
+      state: present
+    when: >
+      ansible_distribution != 'Debian'
+      or ansible_distribution_major_version | int < 10
 
-# See: https://kubernetes.io/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#letting-iptables-see-bridged-traffic
-- name: Let iptables see bridged traffic.
-  sysctl:
-    name: "{{ item }}"
-    value: '1'
-    state: present
-  loop:
-    - net.bridge.bridge-nf-call-iptables
-    - net.bridge.bridge-nf-call-ip6tables
-  when: >
-    ansible_distribution != 'Debian'
-    or ansible_distribution_major_version | int < 10
+  # See: https://kubernetes.io/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#letting-iptables-see-bridged-traffic
+  - name: Let iptables see bridged traffic.
+    sysctl:
+      name: "{{ item }}"
+      value: '1'
+      state: present
+    loop:
+      - net.ipv4.ip_forward
+      - net.bridge.bridge-nf-call-iptables
+      - net.bridge.bridge-nf-call-ip6tables
+    when: >
+      ansible_distribution != 'Debian'
+      or ansible_distribution_major_version | int < 10
+      
+  become: yes
+  become_user: root
+  become_method: sudo