From 10e54eca26faa6f3e19c825e068ff54e6b6a0e3a Mon Sep 17 00:00:00 2001
From: mohsen <32030892+mohsenmottaghi@users.noreply.github.com>
Date: Tue, 16 Jun 2020 12:04:06 +0430
Subject: [PATCH] make better condition for applying nf_conntrack kernel tweak 
 (#6267)

* MINOR: Check kernel version before enable modprobe nf_conntrack

* CLEANUP: no more need to ignore error of this task

* MINOR: Fixing yaml and ansible lint error - remove trailling-space
---
 roles/kubernetes/node/tasks/main.yml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/roles/kubernetes/node/tasks/main.yml b/roles/kubernetes/node/tasks/main.yml
index bf7d51262..2c54100d9 100644
--- a/roles/kubernetes/node/tasks/main.yml
+++ b/roles/kubernetes/node/tasks/main.yml
@@ -108,8 +108,9 @@
     name: nf_conntrack_ipv4
     state: present
   register: enable_nf_conntrack
-  ignore_errors: yes
-  when: kube_proxy_mode == 'ipvs'
+  when:
+    - ansible_kernel.split('.')[0:3] | join('.')  < '4.19'
+    - kube_proxy_mode == 'ipvs'
   tags:
     - kube-proxy
 
@@ -118,7 +119,7 @@
     name: nf_conntrack
     state: present
   when:
-    - enable_nf_conntrack is failed
+    - ansible_kernel.split('.')[0:3] | join('.')  >= '4.19'
     - kube_proxy_mode == 'ipvs'
   tags:
     - kube-proxy