diff --git a/config/v1alpha1/types.go b/config/v1alpha1/types.go
index 9acd2b9..247f3fc 100644
--- a/config/v1alpha1/types.go
+++ b/config/v1alpha1/types.go
@@ -193,8 +193,8 @@ type CSRSigningControllerConfiguration struct {
 	// legacyUnknownSignerConfiguration holds the certificate and key used to issue certificates for the kubernetes.io/legacy-unknown
 	LegacyUnknownSignerConfiguration CSRSigningConfiguration
 
-	// clusterSigningDuration is the length of duration signed certificates
-	// will be given.
+	// clusterSigningDuration is the max length of duration signed certificates will be given.
+	// Individual CSRs may request shorter certs by setting spec.expirationSeconds.
 	ClusterSigningDuration metav1.Duration
 }
 
diff --git a/go.mod b/go.mod
index cde105d..617f9c8 100644
--- a/go.mod
+++ b/go.mod
@@ -11,11 +11,11 @@ require (
 )
 
 replace (
-	k8s.io/api => k8s.io/api v0.0.0-20210701054328-f75dde501d56
+	k8s.io/api => k8s.io/api v0.0.0-20210702094336-49e8721f8489
 	k8s.io/apimachinery => k8s.io/apimachinery v0.0.0-20210701054147-830375057167
-	k8s.io/apiserver => k8s.io/apiserver v0.0.0-20210701055507-8d4ac24e5b70
-	k8s.io/client-go => k8s.io/client-go v0.0.0-20210701054555-843bb800b12a
+	k8s.io/apiserver => k8s.io/apiserver v0.0.0-20210702055056-e3515abe00ca
+	k8s.io/client-go => k8s.io/client-go v0.0.0-20210702094607-ca3a47f0b44a
 	k8s.io/cloud-provider => k8s.io/cloud-provider v0.0.0-20210701061056-e2596319f644
-	k8s.io/component-base => k8s.io/component-base v0.0.0-20210701055118-2b6184b12d2d
+	k8s.io/component-base => k8s.io/component-base v0.0.0-20210702054709-fddd92849e34
 	k8s.io/controller-manager => k8s.io/controller-manager v0.0.0-20210701060950-b1e2edf4da2a
 )
diff --git a/go.sum b/go.sum
index b0a9a6c..90a4625 100644
--- a/go.sum
+++ b/go.sum
@@ -681,16 +681,16 @@ honnef.co/go/tools v0.0.0-20190418001031-e561f6794a2a/go.mod h1:rf3lG4BRIbNafJWh
 honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
 honnef.co/go/tools v0.0.1-2019.2.3/go.mod h1:a3bituU0lyd329TUQxRnasdCoJDkEUEAqEt0JzvZhAg=
 honnef.co/go/tools v0.0.1-2020.1.3/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
-k8s.io/api v0.0.0-20210701054328-f75dde501d56 h1:D7+RjL9qHD5SvrWwSnT0NugysPfJAopsJphgGxpp+kU=
-k8s.io/api v0.0.0-20210701054328-f75dde501d56/go.mod h1:zoURDvOPW5UMFZr2YUU/sStjYnWSPt+x+MM4R94ATgQ=
+k8s.io/api v0.0.0-20210702094336-49e8721f8489 h1:R+giJyPdlHfUvmzHBQ6tm2tlmxcZ2NWgkGSxLbQZ/ZM=
+k8s.io/api v0.0.0-20210702094336-49e8721f8489/go.mod h1:zoURDvOPW5UMFZr2YUU/sStjYnWSPt+x+MM4R94ATgQ=
 k8s.io/apimachinery v0.0.0-20210701054147-830375057167 h1:fob/j8+uMBIVvyo+9bG7GvjFSj0LX3RNuSXW+RcUrwo=
 k8s.io/apimachinery v0.0.0-20210701054147-830375057167/go.mod h1:O3oNtNadZdeOMxHFVxOreoznohCpy0z6mocxbZr7oJ0=
-k8s.io/apiserver v0.0.0-20210701055507-8d4ac24e5b70/go.mod h1:FyAyuH6fM9rtGXN7YQxBH0Bd/90pXcFPBe6HSe/niO8=
-k8s.io/client-go v0.0.0-20210701054555-843bb800b12a/go.mod h1:16T5YsHbw60Osvo1XWwrY0LRCCT2NVgowSJr6mtlhks=
+k8s.io/apiserver v0.0.0-20210702055056-e3515abe00ca/go.mod h1:TRzXAeTvL4hakSeqebQ0o6QVQbZ5q/mDgVlvDeR7QCA=
+k8s.io/client-go v0.0.0-20210702094607-ca3a47f0b44a/go.mod h1:q7LwMTm+ipCQu7UHo7eO1qrjkqaEjj/WmgmKGZGzmcA=
 k8s.io/cloud-provider v0.0.0-20210701061056-e2596319f644 h1:khvF7TKhSq7hBsa6kkNH2zM+OjyAcaJKinKVl/HnH1M=
 k8s.io/cloud-provider v0.0.0-20210701061056-e2596319f644/go.mod h1:DkibgzPOtpl4afDgEviAR6AJQ4el83AjcmLvE04PYBE=
-k8s.io/component-base v0.0.0-20210701055118-2b6184b12d2d h1:j3xTR867tS0hjgDF0JuaF1lh9r9reZGmalLxFqv/qy8=
-k8s.io/component-base v0.0.0-20210701055118-2b6184b12d2d/go.mod h1:a8pntMMGk8KQTeJ2H54nF7WPTcu4EgHb2q61t/1bSu8=
+k8s.io/component-base v0.0.0-20210702054709-fddd92849e34 h1:L7kJX0+rX5SJ2ZUaFy8zarcUMW0+2AHkd3gyuIp0ZLM=
+k8s.io/component-base v0.0.0-20210702054709-fddd92849e34/go.mod h1:KuldLgSPMxWtcVmPn3hcUoWNJqm7HEdVcSID+ZdAB24=
 k8s.io/controller-manager v0.0.0-20210701060950-b1e2edf4da2a h1:Dcnptk1Awlw2c2W02sapp99wH8EGT/6UcgecFexWQfI=
 k8s.io/controller-manager v0.0.0-20210701060950-b1e2edf4da2a/go.mod h1:NPwc5909AvN9w6Xk6MvFciiGS7hOZyU0oe8QmpPds1A=
 k8s.io/gengo v0.0.0-20200413195148-3a45101e95ac/go.mod h1:ezvh/TsK7cY6rbqRK0oQQ8IAqLxYwwyPxAX1Pzy0ii0=