easyrsa:
      charm: "cs:~containers/easyrsa"
      num_units: 1
{% if os.service.bindings %}
      bindings:
        "": internal-api
{% endif %}
      to:
{% if k8.network.controller == 'ovn' %}
        - "nodes/1"
{% else %}
         - "lxd:nodes/0"
{% endif %}