Remove priviledged mode for nova-api

This only existed to add an iptables rule for nova-net related things.

Change-Id: I4e6c50d0908edde3b3cc68382f4466a828f377a5
Related-Bug: #1687187

ansible/roles/nova/defaults/main.yml

@@ -46,7 +46,6 @@ nova_services:
     group: "nova-api"
     image: "{{ nova_api_image_full }}"
     enabled: True
-    privileged: True
     volumes:
       - "{{ node_config_directory }}/nova-api/:{{ container_config_directory }}/:ro"
       - "/etc/localtime:/etc/localtime:ro"

ansible/roles/nova/handlers/main.yml

@@ -85,7 +85,6 @@
     common_options: "{{ docker_common_options }}"
     name: "{{ service.container_name }}"
     image: "{{ service.image }}"
-    privileged: "{{ service.privileged | default(False) }}"
     volumes: "{{ service.volumes|reject('equalto', '')|list }}"
   when:
     - action != "config"