changes done to enable br_netfilter and ip_forward for debian packages

[ashwanikhemani]

What this PR does / why we need it:
For any Debian distribution, this will help in loading the br_netfilter module automatically and enable IP
forwarding.

These are required by kubeadm otherwise it fails fatally if this is not configured. As they're mandatory in kubeadm, they should be configured automatically as part of the installation of kubeadm. This would help in improving kubeadm support for any CRI runtime besides Docker (eg. CRI-O)

Which issue(s) this PR fixes *
Fixes # kubernetes/kubeadm#1146

Added functionality to enable br_netfilter and ip_forward for debian packages to improve kubeadm support for CRI runtime besides Docker. 

/kind bug

[k8s-ci-robot]

Thanks for your pull request. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

📝 Please follow instructions at https://git.k8s.io/community/CLA.md#the-contributor-license-agreement to sign the CLA.

It may take a couple minutes for the CLA signature to be fully registered; after that, please reply here with a new comment and we'll verify. Thanks.

---

• If you've already signed a CLA, it's possible we don't have your GitHub username or you're using a different email address. Check your existing CLA data and verify that your email is set on your git commits.
• If you signed the CLA as a corporation, please sign in with your organization's credentials at https://identity.linuxfoundation.org/projects/cncf to be authorized.
• If you have done the above and are still having issues with the CLA being reported as unsigned, please email the CNCF helpdesk: helpdesk@rt.linuxfoundation.org

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

[ashwanikhemani]

I have signed the Contributor License Agreement.

[ashwanikhemani]

/kind bug

[ashwanikhemani]

/sig cluster-lifecycle

[timothysc]

/ok-to-test
/assign @timothysc @ixdy

[timothysc]

@ashwanikhemani please add a release note.

[ashwanikhemani]

/retest

[timothysc]

/test pull-kubernetes-verify

[ashwanikhemani]

/test pull-kubernetes-verify

[ashwanikhemani]

I ran the verification tasks on my local Debian machine and verify-bazel task completed successfully.
Is there a way to check the logs for this script only?

Update: Now the pull-kubernetes-verify is failing at the start only :
Now it is failing with a new error : W1025 05:11:21.830] Unable to find image 'gcr.io/k8s-testimages/kubekins-test:1.13-v20181003-42c05e7e9' locally

[timothysc]

/retest

[rosti]

@ashwanikhemani thanks for this contribution!

As for the broken test, please run ./hack/update-bazel.sh from the k8s source root directory and update the PR with the changes, that the script makes.

[ixdy]

/approve
/retest

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: ashwanikhemani, ixdy

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• build/debs/OWNERS [ixdy]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[ixdy]

/assign @rosti

[ixdy]

As has been noted elsewhere, this is unfortunately not the canonical source of truth for the release debs; those are in https://github.com/kubernetes/release. These are used for CI, however.

[timothysc]

As has been noted elsewhere, this is unfortunately not the canonical source of truth for the release debs; those are in https://github.com/kubernetes/release. These are used for CI, however

... for now.

[timothysc]

/lgtm