CertificateRequest.spec.groups

Groups contains group membership of the user that created the CertificateRequest. Populated by the cert-manager webhook on creation and immutable.