diff --git a/machineconfiguration/v1/0000_80_controllerconfig.crd.yaml b/machineconfiguration/v1/0000_80_controllerconfig.crd.yaml
index ee49210bc54..5db21b422f5 100644
--- a/machineconfiguration/v1/0000_80_controllerconfig.crd.yaml
+++ b/machineconfiguration/v1/0000_80_controllerconfig.crd.yaml
@@ -1224,8 +1224,6 @@ spec:
                     type: object
                     required:
                       - bundleFile
-                      - notAfter
-                      - notBefore
                       - signer
                       - subject
                     properties:
diff --git a/machineconfiguration/v1/0000_80_machineconfigpool.crd.yaml b/machineconfiguration/v1/0000_80_machineconfigpool.crd.yaml
index 3d6b81934b0..f2afeef4a34 100644
--- a/machineconfiguration/v1/0000_80_machineconfigpool.crd.yaml
+++ b/machineconfiguration/v1/0000_80_machineconfigpool.crd.yaml
@@ -227,7 +227,6 @@ spec:
                     type: object
                     required:
                       - bundle
-                      - expiry
                       - subject
                     properties:
                       bundle:
diff --git a/machineconfiguration/v1/types.go b/machineconfiguration/v1/types.go
index eba56a94299..0aa83af7d2b 100644
--- a/machineconfiguration/v1/types.go
+++ b/machineconfiguration/v1/types.go
@@ -210,11 +210,11 @@ type ControllerCertificate struct {
 	Signer string `json:"signer"`
 
 	// notBefore is the lower boundary for validity
-	// +kubebuilder:validation:Required
+	// +optional
 	NotBefore *metav1.Time `json:"notBefore"`
 
 	// notAfter is the upper boundary for validity
-	// +kubebuilder:validation:Required
+	// +optional
 	NotAfter *metav1.Time `json:"notAfter"`
 
 	// bundleFile is the larger bundle a cert comes from
@@ -445,7 +445,7 @@ type CertExpiry struct {
 	// +kubebuilder:validation:Required
 	Subject string `json:"subject"`
 	// expiry is the date after which the certificate will no longer be valid
-	// +kubebuilder:validation:Required
+	// +optional
 	Expiry *metav1.Time `json:"expiry"`
 }