Add security context from snippet for tungstenfabric container

Change-Id: I4db982e8f600288ec954d4c019f096bd8dcd7e52
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>

nova/templates/daemonset-compute.yaml

@@ -210,8 +210,7 @@ spec:
           image: {{ .Values.images.tags.tf_compute_init }}
           imagePullPolicy: {{ .Values.images.pull_policy }}
 {{ tuple $envAll $envAll.Values.pod.resources.compute | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }}
-          securityContext:
-            runAsUser: {{ .Values.pod.user.nova.uid }}
+{{ dict "envAll" $envAll "application" "nova" "container" "tungstenfabric_compute_init" | include "helm-toolkit.snippets.kubernetes_container_security_context" | indent 10 }}
           volumeMounts:
             - name: tf-plugin-shared
               mountPath: /opt/plugin

nova/values.yaml

@@ -2346,6 +2346,9 @@ pod:
         nova_compute_init:
           readOnlyRootFilesystem: true
           runAsUser: 0
+        tungstenfabric_compute_init:
+          readOnlyRootFilesystem: true
+          allowPrivilegeEscalation: false
         ceph_perms:
           readOnlyRootFilesystem: true
           runAsUser: 0