[nerdctl] upgrade to 0.16.0 (#8484)

* [nerdctl] upgrade nerdctl to 0.16.0

* [nerdctl] add configuration file

roles/container-engine/nerdctl/tasks/main.yml

@@ -10,6 +10,27 @@
     dest: "{{ bin_dir }}/nerdctl"
     mode: 0755
     remote_src: true
+    owner: root
+    group: root
+  become: true
   notify:
     - Get nerdctl completion
     - Install nerdctl completion
+
+- name: nerdctl | Create configuration dir
+  file:
+    path: /etc/nerdctl
+    state: directory
+    mode: 0755
+    owner: root
+    group: root
+  become: true
+
+- name: nerdctl | Install nerdctl configuration
+  template:
+    src: nerdctl.toml.j2
+    dest: /etc/nerdctl/nerdctl.toml
+    mode: 0644
+    owner: root
+    group: root
+  become: true

roles/container-engine/nerdctl/templates/nerdctl.toml.j2

@@ -0,0 +1,10 @@
+debug             = false
+debug_full        = false
+address           = "unix://{{ cri_socket }}"
+namespace         = "k8s.io"
+snapshotter       = "native"
+cni_path          = "/opt/cni/bin"
+cni_netconfpath   = "/etc/cni/net.d"
+cgroup_manager    = "{{ kubelet_cgroup_driver | default('systemd') }}"
+insecure_registry = {{ (containerd_insecure_registries is defined and containerd_insecure_registries|length>0) | bool | lower }}
+hosts_dir         = ["/etc/containerd/certs.d"]