improve sysctl-setup for Ubuntu

tasks/sysctl-setup.yml

@@ -1,5 +1,12 @@
 ---
-- name: Ensure procps is installed.
+- block:
+  
+  - name: Enable br_netfilter module
+    modprobe:
+      name: br_netfilter
+      state: present
+  
+  - name: Ensure procps is installed.
     package:
       name: "{{ procps_package }}"
       state: present
@@ -7,15 +14,20 @@
       ansible_distribution != 'Debian'
       or ansible_distribution_major_version | int < 10
 
-# See: https://kubernetes.io/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#letting-iptables-see-bridged-traffic
+  # See: https://kubernetes.io/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#letting-iptables-see-bridged-traffic
-- name: Let iptables see bridged traffic.
+  - name: Let iptables see bridged traffic.
     sysctl:
       name: "{{ item }}"
       value: '1'
       state: present
     loop:
+      - net.ipv4.ip_forward
       - net.bridge.bridge-nf-call-iptables
       - net.bridge.bridge-nf-call-ip6tables
     when: >
       ansible_distribution != 'Debian'
       or ansible_distribution_major_version | int < 10
+      
+  become: yes
+  become_user: root
+  become_method: sudo