CertificateSigningRequestList.items.spec.groups

groups contains group membership of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.