[internal] fix container readable root (#137)

Signed-off-by: v.oleynikov <vasily.oleynikov@flant.com>

Author: duckhawk

templates/controller/deployment.yaml

@@ -91,6 +91,7 @@ spec:
               {{- include "sds_local_volume_controller_resources" . | nindent 14 }}
 {{- end }}
           securityContext:
+            readOnlyRootFilesystem: true
             privileged: true
             seLinuxOptions:
               level: s0