Certificate: []byte("junk"),
				},
			},
			old: &certificates.CertificateSigningRequest{
				Spec: certificates.CertificateSigningRequestSpec{
					SignerName:        "fancy",
					ExpirationSeconds: ptr.To[int32](77),
				},
			},
			options:       &metav1.UpdateOptions{},
			wantSigner:    "other",
			wantRequested: true,
			wantHonored:   false,
		},
		{

	// ExpirationSeconds is the requested duration of validity of the request. The
	// token issuer may return a token with a different validity duration so a
	// client needs to check the 'expiration' field in a response.
	// +optional
	ExpirationSeconds *int64 `json:"expirationSeconds" protobuf:"varint,4,opt,name=expirationSeconds"`

			},
		},
		"expirationSeconds set": {
			ctx: genericapirequest.NewContext(),
			obj: &certapi.CertificateSigningRequest{
				Spec: certapi.CertificateSigningRequestSpec{
					ExpirationSeconds: ptr.To[int32](1234),
				},
			},
			expectedObj: &certapi.CertificateSigningRequest{
				Spec: certapi.CertificateSigningRequestSpec{
					ExpirationSeconds: ptr.To[int32](1234),
				},

spec:
  attachRequired: true
  fsGroupPolicy: fsGroupPolicyValue
  podInfoOnMount: true
  requiresRepublish: true
  seLinuxMount: true
  storageCapacity: true
  tokenRequests:
  - audience: audienceValue
    expirationSeconds: 2
  volumeLifecycleModes:

  selfLink: selfLinkValue
  uid: uidValue
spec:
  audiences:
  - audiencesValue
  boundObjectRef:
    apiVersion: apiVersionValue
    kind: kindValue
    name: nameValue
    uid: uidValue
  expirationSeconds: 4
status:
  expirationTimestamp: "2002-01-01T01:01:01Z"

spec:
  attachRequired: true
  fsGroupPolicy: fsGroupPolicyValue
  podInfoOnMount: true
  requiresRepublish: true
  seLinuxMount: true
  storageCapacity: true
  tokenRequests:
  - audience: audienceValue
    expirationSeconds: 2
  volumeLifecycleModes:

	//   3. Signer whose configured minimum is longer than the requested duration
	//
	// The minimum valid value for expirationSeconds is 600, i.e. 10 minutes.
	//
	// +optional
	ExpirationSeconds *int32 `json:"expirationSeconds,omitempty" protobuf:"varint,8,opt,name=expirationSeconds"`

	// usages specifies a set of key usages requested in the issued certificate.
	//

      "volumeLifecycleModesValue"
    ],
    "storageCapacity": true,
    "fsGroupPolicy": "fsGroupPolicyValue",
    "tokenRequests": [
      {
        "audience": "audienceValue",
        "expirationSeconds": 2
      }
    ],
    "requiresRepublish": true,
    "seLinuxMount": true
  }

      "volumeLifecycleModesValue"
    ],
    "storageCapacity": true,
    "fsGroupPolicy": "fsGroupPolicyValue",
    "tokenRequests": [
      {
        "audience": "audienceValue",
        "expirationSeconds": 2
      }
    ],
    "requiresRepublish": true,
    "seLinuxMount": true
  }

        "fieldsType": "fieldsTypeValue",
        "fieldsV1": {},
        "subresource": "subresourceValue"
      }
    ]
  },
  "spec": {
    "audiences": [
      "audiencesValue"
    ],
    "expirationSeconds": 4,
    "boundObjectRef": {
      "kind": "kindValue",
      "apiVersion": "apiVersionValue",
      "name": "nameValue",
      "uid": "uidValue"
    }
  },
  "status": {
    "token": "tokenValue",