feat: add support crio additional mounts (#12561)

removed default since it's already set in variables

fix pre commit issue in the pipeline

roles/container-engine/cri-o/defaults/main.yml

@@ -112,3 +112,4 @@ crio_default_capabilities:
   - SETPCAP
   - NET_BIND_SERVICE
   - KILL
+crio_additional_mounts: []

roles/container-engine/cri-o/files/mounts.conf

@@ -1 +0,0 @@
-/usr/share/rhel/secrets:/run/secrets

roles/container-engine/cri-o/tasks/main.yaml

@@ -184,8 +184,8 @@
   notify: Restart crio
 
 - name: Cri-o | copy mounts.conf
-  copy:
-    src: mounts.conf
+  template:
+    src: mounts.conf.j2
     dest: /etc/containers/mounts.conf
     mode: "0644"
   when:

roles/container-engine/cri-o/templates/mounts.conf.j2

@@ -0,0 +1,4 @@
+/usr/share/rhel/secrets:/run/secrets
+{% for mount in crio_additional_mounts %}
+{{ mount }}
+{% endfor %}