From 647ae95223ea03063721b3b451cc57a20768a09a Mon Sep 17 00:00:00 2001
From: Dan Isla <disla@google.com>
Date: Fri, 28 Sep 2018 13:39:58 -0700
Subject: [PATCH] added ssh_fw_rule var to disable creation of ssh rule

---
 main.tf      | 1 +
 variables.tf | 5 +++++
 2 files changed, 6 insertions(+)

diff --git a/main.tf b/main.tf
index 05c9a74..1c977b7 100644
--- a/main.tf
+++ b/main.tf
@@ -67,6 +67,7 @@ module "nat-gateway" {
   startup_script        = "${data.template_file.nat-startup-script.rendered}"
   wait_for_instances    = true
   metadata              = "${var.metadata}"
+  ssh_fw_rule           = "${var.ssh_fw_rule}"
   ssh_source_ranges     = "${var.ssh_source_ranges}"
   http_health_check     = "${var.autohealing_enabled}"
 
diff --git a/variables.tf b/variables.tf
index 3df9958..999eefb 100644
--- a/variables.tf
+++ b/variables.tf
@@ -100,6 +100,11 @@ variable metadata {
   default     = {}
 }
 
+variable "ssh_fw_rule" {
+  description = "Whether or not the SSH Firewall Rule should be created"
+  default     = true
+}
+
 variable ssh_source_ranges {
   description = "Network ranges to allow SSH from"
   type        = "list"