diff --git a/tripleo_ansible/roles/tripleo_bootstrap/tasks/main.yml b/tripleo_ansible/roles/tripleo_bootstrap/tasks/main.yml
index 4dd8e688c..d63c5a36f 100644
--- a/tripleo_ansible/roles/tripleo_bootstrap/tasks/main.yml
+++ b/tripleo_ansible/roles/tripleo_bootstrap/tasks/main.yml
@@ -110,7 +110,7 @@
 
 - name: Create empty ruleset in /etc/sysconfig/iptables and /etc/sysconfig/ip6tables
   become: true
-  ignore_errors: "{{ (((ansible_facts['os_family'] | lower) ~ '-' ~ ansible_distribution_major_version) == 'redhat-7') | bool }}"
+  ignore_errors: "{{ (((ansible_facts['os_family'] | lower) ~ '-' ~ ansible_facts['distribution_major_version']) == 'redhat-7') | bool }}"
   copy:
     dest: "{{ item }}"
     content: "# empty ruleset created by deployed-server bootstrap"