code: func IsCertificateRequestApproved(csr *certificates.CertificateSigningRequest) bool {
  	approved, denied := GetCertApprovalCondition(&csr.Status)
  	return approved && !denied
  }
docs: // IsCertificateRequestApproved returns true if a certificate request has the
  // "Approved" condition and no "Denied" conditions; false otherwise.