source:
  kind: ServiceAccount
  version: v1
targets:
- select:
    kind: DaemonSet
    version: v1
  fieldPaths:
  - spec.template.spec.serviceAccountName
- select:
    kind: ClusterRoleBinding
    group: rbac.authorization.k8s.io
    version: v1
  fieldPaths:
  - subjects.0.name
- select:
    kind: RoleBinding
    group: rbac.authorization.k8s.io
    version: v1
  fieldPaths:
  - subjects.0.name