Enable CONFIG_NF_CONNTRACK_ZONES

[jojimt]

This commit enables CONNTRACK_ZONES in the VM's kernel (#3731)
Additionally, the Makefile is updated to reflect the correct kernel version per #2986

[k8s-ci-robot]

Thanks for your pull request. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

📝 Please follow instructions at https://git.k8s.io/community/CLA.md#the-contributor-license-agreement to sign the CLA.

It may take a couple minutes for the CLA signature to be fully registered; after that, please reply here with a new comment and we'll verify. Thanks.

---

• If you've already signed a CLA, it's possible we don't have your GitHub username or you're using a different email address. Check your existing CLA data and verify that your email is set on your git commits.
• If you signed the CLA as a corporation, please sign in with your organization's credentials at https://identity.linuxfoundation.org/projects/cncf to be authorized.
• If you have done the above and are still having issues with the CLA being reported as unsigned, please email the CNCF helpdesk: helpdesk@rt.linuxfoundation.org

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

[minikube-bot]

Can one of the admins verify this patch?

[jojimt]

fyi, I am working on the CLA.

[tstromberg]

/approve

(assuming CLA is submitted)

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: jojimt, tstromberg

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [tstromberg]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[jojimt]

I have an ETA of mid next week for the CLA.

[tstromberg]

Any chance to get the CLA signed?

[jojimt]

Unfortunately, this is taking longer than anticipated. Lawyers are citing slow response from CNCF as the reason. I will keep pushing and provide an update in a week. Thanks for bearing with this.

[jojimt]

I was informed that the CLA is officially in place for me. Do I need to push something to retrigger the check?

[jojimt]

@tstromberg The CLA part is now taken care of. I'm assuming nothing else is pending from my side.

[tstromberg]

Why the kernel downgrade?

[jojimt]

There is no kernel downgrade in this PR. The kernel change was by #2986. I just updated the Makefile to reflect the correct kernel version. Please see the comments at the end of #3731 for more details.

[jojimt]

@tstromberg Is the explanation satisfactory? Do you still need me to revert the change in the Makefile?

[jojimt]

@tstromberg any update?

[tstromberg]

Looks great! Thanks for sticking through this process. It will be part of the next release.