Set ulimit 16384 for Neutron SR-IOV container

Same a in [1], rootwrap takes too much time if ulimit is the
default value. In the related bug, the execution time drops
from 800ms to 30ms if ulimit is set to 16384.

[1] https://review.openstack.org/#/c/559268/

Change-Id: I18de5b733066853a8c057596e85299048cee8604
Closes-Bug: #1823385

deployment/neutron/neutron-sriov-agent-container-puppet.yaml

@@ -10,6 +10,10 @@ parameters:
   DockerNeutronConfigImage:
     description: The container image to use for the neutron config_volume
     type: string
+  DockerSRIOVUlimit:
+    default: ['nofile=16384']
+    description: ulimit for SR-IOV Container
+    type: comma_delimited_list
   ServiceData:
     default: {}
     description: Dictionary packing service data
@@ -170,6 +174,7 @@ outputs:
                         expression: str($.data.port)
                         data:
                           port: {get_param: RpcPort}
+            ulimit: {get_param: DockerSRIOVUlimit}
             volumes:
               list_concat:
                 - {get_attr: [ContainersCommon, volumes]}