source:
  kind: ServiceAccount
  version: v1
  fieldPath: metadata.namespace
targets:
- select:
    kind: ClusterRoleBinding
    group: rbac.authorization.k8s.io
    version: v1
  fieldPaths:
  - subjects.0.namespace
- select:
    kind: RoleBinding
    group: rbac.authorization.k8s.io
    version: v1
  fieldPaths:
  - subjects.0.namespace