code: func (r *RoleV3) SetKubeGroups(rct RoleConditionType, groups []string) {
  	lcopy := utils.CopyStrings(groups)
  
  	if rct == Allow {
  		r.Spec.Allow.KubeGroups = lcopy
  	} else {
  		r.Spec.Deny.KubeGroups = lcopy
  	}
  }
docs: // SetKubeGroups sets kubernetes groups for allow or deny condition.