Flip perimeter prod firewall deny rule for ssh:22 to allow - during dev - or flip name to deny to block

[obriensystems]

Once we get a range or single tunnel proxy or bastion/IAP access going we can flip back to deny

• https://github.com/GoogleCloudPlatform/pubsec-declarative-toolkit/blob/main/solutions/landing-zone/environments/common/firewall/public-perimeter-firewall.yaml#L53
• https://github.com/GoogleCloudPlatform/pbmm-on-gcp-onboarding/blob/main/environments/common/prod-public-perimeter-firewall.auto.tfvars#L49

  spec:
  description: Allow SSH Connections from the internet
  direction: INGRESS
  deny:
  - protocol: tcp
    ports: 
    - "22"
  sourceRanges:
  - 0.0.0.0/0

[fmichaelobrien]

see https://github.com/GoogleCloudPlatform/pubsec-declarative-toolkit/pull/149