code: func isPendingPastDeadline(csr *capi.CertificateSigningRequest) bool {
  	// If there are no Conditions on the status, the CSR will appear via
  	// `kubectl` as `Pending`.
  	if len(csr.Status.Conditions) == 0 && isOlderThan(csr.CreationTimestamp, pendingExpiration) {
  		klog.Infof("Cleaning CSR %q as it is more than %v old and unhandled.", csr.Name, pendingExpiration)
  		return true
  	}
  	return false
  }
docs: // isPendingPastDeadline checks if the certificate has a Pending status and the
  // creation time of the CSR is passed the deadline that pending requests are
  // maintained for.