nomad support

[pipethedev]

Summary

Add Nomad CSI support for k8s-csi-s3 using the maintained Yandex driver image (.../csi-s3-driver:0.43.7) instead of the unmaintained ctrox/csi-s3 image.

Why

ctrox/csi-s3:v1.2.0-rc.2 is stale (2021). We need a maintained CSI S3 plugin for Nomad deployments.

Implementation Notes

• Added Nomad controller/node CSI job specs and a sample Nomad CSI volume registration.
• Node plugin runs privileged for mount propagation.
• Corrected endpoint format to unix:///csi/csi.sock (triple slash), which fixes the probe/socket-not-found failure.
• Default volume options include --no-systemd for safer Nomad operation unless host systemd integration is explicitly configured.

How To Validate

1. Run controller and node jobs.
2. Confirm nomad plugin status s3 is healthy.
3. Register the sample volume (with real S3 secrets/endpoint).
4. Schedule a workload using that CSI volume and verify mount/read/write.

Risk

Low-to-moderate: deployment/runtime integration only; no core driver logic changes.