Add header configuration in containerd hosts.toml.

[hylowaker]

What would you like to be added

https://github.com/kubernetes-sigs/kubespray/blob/v2.27.0/roles/container-engine/containerd/templates/hosts.toml.j2

I need to set custom authorization header for the registry mirror. containerd_registry_auth does not work for the mirrors.

For workaround, I can add some lines in hosts.toml.j2 file.

server = "https://{{ item.prefix }}"
{% for mirror in item.mirrors %}
[host."{{ mirror.host }}"]
  capabilities = ["{{ ([ mirror.capabilities ] | flatten ) | join('","') }}"]
  skip_verify = {{ mirror.skip_verify | default('false') | string | lower }}
  override_path = {{ mirror.override_path | default('false') | string | lower }}
{% if mirror.header is defined %}
  [host."{{ mirror.host }}".header]
{% for key, value in mirror.header.items() %}
    {{ key }} = ["{{ ([ value ] | flatten ) | join('","') }}"]
{% endfor %}
{% endif %}
{% endfor %}

Then I can set my inventory like this:

containerd_registries_mirrors:
  - prefix: registry.foobar.io
    mirrors:
      - host: https://127.0.0.1:8443/v2
        capabilities: ["pull", "resolve"]
        override_path: true
        header:                       # <-- This is added
          authorization: "Basic xxx"  #

Why is this needed

Currently there is no way to add custom headers for registry mirrors.

[VannTen]

At some point we're gonna have to do a conversion to_toml instead of special casing settings, but apart from that, yeah, we should have that.

/triage accepted