Containerd: when deploying with containerd we need to ensure iptables and ipset are in place or risk breaking things like weave

Author: cristicalin

roles/container-engine/containerd-common/defaults/main.yml

@@ -15,3 +15,8 @@ containerd_ubuntu_repo_component: "stable"
 # Debian docker-ce repo
 containerd_debian_repo_base_url: "https://download.docker.com/linux/debian"
 containerd_debian_repo_component: "stable"
+
+# Mandatory packages
+containerd_mandatory_packages:
+  - iptables
+  - ipset

roles/container-engine/containerd-common/tasks/main.yml

@@ -29,3 +29,11 @@
       skip: true
   tags:
     - facts
+
+- name: containerd-common | ensure mandatory packages are present
+  package:
+    name: "{{ containerd_mandatory_packages }}"
+    state: present
+  when:
+    - not is_ostree
+    - ansible_distribution not in ["Flatcar Container Linux by Kinvolk", "Flatcar"]