// signerName indicates the associated signer, if any.
  //
  // In order to create or update a ClusterTrustBundle that sets signerName,
  // you must have the following cluster-scoped permission:
  // group=certificates.k8s.io resource=signers resourceName=<the signer name>
  // verb=attest.
  //
  // If signerName is not empty, then the ClusterTrustBundle object must be

  optional bool readOnly = 3;

  // user to map volume access to
  // Defaults to serivceaccount user
  // +optional
  optional string user = 4;

  // group to map volume access to
  // Default is no group
  // +optional
  optional string group = 5;

  // tenant owning the given Quobyte volume in the Backend
  // Used with dynamically provisioned Quobyte volumes, value is set by the plugin
  // +optional