feat: use kubernetes device ownership setting

Author: vigh-m

packages/containerd/containerd-config-toml_k8s_containerd_sock

@@ -2,7 +2,7 @@
 container-registry = "v1"
 container-runtime = "v1"
 kubernetes = "v1"
-std = { version = "v1", helpers = ["join_array"]}
+std = { version = "v1", helpers = ["join_array", "default"]}
 +++
 version = 2
 root = "/var/lib/containerd"
@@ -19,6 +19,7 @@ disabled_plugins = [
 address = "/run/containerd/containerd.sock"
 
 [plugins."io.containerd.grpc.v1.cri"]
+device_ownership_from_security_context = {{default false settings.kubernetes.device-ownership-from-security-context}}
 enable_selinux = true
 # Pause container image is specified here, shares the same image as kubelet's pod-infra-container-image
 sandbox_image = "localhost/kubernetes/pause:0.1.0"

sources/Cargo.lock

@@ -211,13 +211,13 @@ base64 = "0.22"
 
 [workspace.dependencies.bottlerocket-modeled-types]
 git = "https://github.com/bottlerocket-os/bottlerocket-settings-sdk"
-tag = "bottlerocket-settings-models-v0.6.0"
-version = "0.6.0"
+tag = "bottlerocket-settings-models-v0.7.0"
+version = "0.7.0"
 
 [workspace.dependencies.bottlerocket-settings-models]
 git = "https://github.com/bottlerocket-os/bottlerocket-settings-sdk"
-tag = "bottlerocket-settings-models-v0.6.0"
-version = "0.6.0"
+tag = "bottlerocket-settings-models-v0.7.0"
+version = "0.7.0"
 
 [workspace.dependencies.bottlerocket-settings-plugin]
 git = "https://github.com/bottlerocket-os/bottlerocket-settings-sdk"
@@ -226,7 +226,7 @@ version = "0.1.0"
 
 [workspace.dependencies.settings-extension-oci-defaults]
 git = "https://github.com/bottlerocket-os/bottlerocket-settings-sdk"
-tag = "bottlerocket-settings-models-v0.6.0"
+tag = "bottlerocket-settings-models-v0.7.0"
 version = "0.1.0"
 
 [profile.release]