add known k8s service accounts

[sboschman]

/kind rule-update
/area rules

What this PR does / why we need it:

Add namespace-controller, statefulset-controller, disruption-controller, job-controller, horizontal-pod-autoscaler and persistent-volume-binder as additional default k8s controller service accounts to the known_sa_list list. This addition prevents these controllers from triggering a warning as they are created in the kube-system namespace.

These controllers are default k8s controllers according to the docs (https://kubernetes.io/docs/reference/command-line-tools-reference/kube-controller-manager/)

--controllers strings     Default: "*"

A list of controllers to enable. '*' enables all on-by-default controllers, 'foo' enables the controller named 'foo', '-foo' disables the controller named 'foo'.All controllers: attachdetach, bootstrapsigner, cloud-node-lifecycle, clusterrole-aggregation, cronjob, csrapproving, csrcleaner, csrsigning, daemonset, deployment, disruption, endpoint, endpointslice, endpointslicemirroring, ephemeral-volume, garbagecollector, horizontalpodautoscaling, job, namespace, nodeipam, nodelifecycle, persistentvolume-binder, persistentvolume-expander, podgc, pv-protection, pvc-protection, replicaset, replicationcontroller, resourcequota, root-ca-cert-publisher, route, service, serviceaccount, serviceaccount-token, statefulset, tokencleaner, ttl, ttl-after-finishedDisabled-by-default controllers: bootstrapsigner, tokencleaner

rule(list known_sa_list): add namespace-controller, statefulset-controller, disruption-controller, job-controller, horizontal-pod-autoscaler and persistent-volume-binder as allowed service accounts in the kube-system namespace

[poiana]

Welcome @sboschman! It looks like this is your first PR to falcosecurity/falco 🎉

[leogr]

/milestone 0.29.0

[Kaizhe]

/lgtm

[poiana]

LGTM label has been added.

Git tree hash: af48f3e2e92b9194331f67c93a99e5cc75a21ec5

[Kaizhe]

Thanks for the contribution!

[leogr]

/approve
/milestone 0.29.0

[poiana]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: Kaizhe, leogr

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• rules/OWNERS [Kaizhe,leogr]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment