service: Improve additional container support

roles/service/meta/argument_specs.yaml

@@ -362,6 +362,11 @@ argument_specs:
             type: str
             required: false
             default: "{{ service_container_image }}"
+          user:
+            description: The UID to run as inside the container
+            type: str
+            required: false
+            default: "{{ service_container_user }}"
           command:
             description: Command to start the container with.
             type: list
@@ -406,6 +411,22 @@ argument_specs:
                   - Defaults to false for volume and bind, true for template
                 type: bool
                 required: false
+              user:
+                description: Volume owner uid. Only applicable if mount type is volume.
+                type: str
+                required: false
+                default: ""
+              group:
+                description: Volume owner gid. Only applicable if mount type is volume.
+                type: str
+                required: false
+                default: ""
+              mode:
+                description:
+                  - Templated file or copied directory/file permissions.
+                  - Defaults to 0644 for files, 0755 for directories
+                type: str
+                required: false
               volume_device:
                 description: >-
                   The path of a device which is mounted for the volume.
@@ -428,6 +449,21 @@ argument_specs:
                 elements: str
                 required: false
                 default: []
+          devices:
+            description: List of devices to be added inside the container.
+            type: list
+            required: false
+            default: "{{ service_container_devices }}"
+            elements: dict
+            options:
+              source:
+                description: Device path on host
+                type: str
+                required: true
+              destination:
+                description: Device path inside the container. Defaults to same as host.
+                type: str
+                required: false
           publish_ports:
             description: A list of ports to publish outside the container
             type: list