
Allows container security context to be applied to the tiller container inside the Armada API pod, and sets the following: run as nobody (uid 65534), read-only root filesystem, deny privilege escalation. Also sets the rest of the armada pod to run as armada (uid 1000). Change-Id: I38eb32f54ca4c0a20c1c63fca2f4927ced6e9e81