attributes:
  # Show vpnaas only for neutron
  metadata:
    restrictions:
      - condition: cluster:net_provider != 'neutron'
        action: hide