From 474fd7364f0f4cec646b791e435326420863bf38 Mon Sep 17 00:00:00 2001
From: Ludovico Magnocavallo <ludomagno@google.com>
Date: Fri, 5 Jun 2020 21:24:28 +0200
Subject: [PATCH] use "all" for admin firewall rule in net-vpc-firewall module

---
 modules/net-vpc-firewall/main.tf | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/modules/net-vpc-firewall/main.tf b/modules/net-vpc-firewall/main.tf
index 7252e3a8..49affdd7 100644
--- a/modules/net-vpc-firewall/main.tf
+++ b/modules/net-vpc-firewall/main.tf
@@ -34,9 +34,7 @@ resource "google_compute_firewall" "allow-admins" {
   network       = var.network
   project       = var.project_id
   source_ranges = var.admin_ranges
-  allow { protocol = "icmp" }
-  allow { protocol = "tcp" }
-  allow { protocol = "udp" }
+  allow { protocol = "all" }
 }
 
 ###############################################################################