This updates the Nova chart to include the pod security context on the pod template. This also adds the container security context to set readOnlyRootFilesystem flag to true Change-Id: I3ba6fcf0cc6ff97a306866f2d2b408635519ff02