[containerd] Add Configuration option for Node Resource Interface

Node Resource Interface (NRI) is a common is a common framework for
plugging domain or vendor-specific custom logic into container
runtime like containerd. With this commit, we introduce the
containerd_disable_nri configuration flag, providing cluster
administrators the flexibility to opt in or out (defaulted to 'out')
of this feature in containerd. In line with containerd's default
configuration, NRI is disabled by default in this containerd role
defaults.

Signed-off-by: Feruzjon Muyassarov <[email protected]>

roles/container-engine/containerd/defaults/main.yml

@@ -64,6 +64,9 @@ containerd_enable_unprivileged_ports: false
 # If enabled it will allow non root users to use icmp sockets
 containerd_enable_unprivileged_icmp: false
 
+# If enabled, it will activate the NRI support in containerd
+containerd_disable_nri: true
+
 containerd_cfg_dir: /etc/containerd
 
 # Extra config to be put in {{ containerd_cfg_dir }}/config.toml literally

roles/container-engine/containerd/templates/config.toml.j2

@@ -81,3 +81,6 @@ oom_score = {{ containerd_oom_score }}
 {% if containerd_extra_args is defined %}
 {{ containerd_extra_args }}
 {% endif %}
+
+[plugins."io.containerd.nri.v1.nri"]
+  disable = {{ containerd_disable_nri | default(true) | lower }}