diff --git a/contrib/terraform/gcp/main.tf b/contrib/terraform/gcp/main.tf
index ce221d0c12fd2b2367c950dde0557b11736065a0..43ede77d8345c91ca5761deb20411405d6573740 100644
--- a/contrib/terraform/gcp/main.tf
+++ b/contrib/terraform/gcp/main.tf
@@ -2,7 +2,7 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = "~> 3.48"
+      version = "~> 4.0"
     }
   }
 }
diff --git a/contrib/terraform/gcp/modules/kubernetes-cluster/main.tf b/contrib/terraform/gcp/modules/kubernetes-cluster/main.tf
index a9cbacbaa9278b1e5586881a6e80eca0f70ae03b..937cc564199f678b0ecb02e5c2dc3eab1d0af0f2 100644
--- a/contrib/terraform/gcp/modules/kubernetes-cluster/main.tf
+++ b/contrib/terraform/gcp/modules/kubernetes-cluster/main.tf
@@ -5,6 +5,8 @@
 
 resource "google_compute_network" "main" {
   name = "${var.prefix}-network"
+
+  auto_create_subnetworks = false
 }
 
 resource "google_compute_subnetwork" "main" {
@@ -20,6 +22,8 @@ resource "google_compute_firewall" "deny_all" {
 
   priority = 1000
 
+  source_ranges = ["0.0.0.0/0"]
+
   deny {
     protocol = "all"
   }
@@ -86,6 +90,8 @@ resource "google_compute_firewall" "ingress_http" {
 
   priority = 100
 
+  source_ranges = ["0.0.0.0/0"]
+
   allow {
     protocol = "tcp"
     ports    = ["80"]
@@ -98,6 +104,8 @@ resource "google_compute_firewall" "ingress_https" {
 
   priority = 100
 
+  source_ranges = ["0.0.0.0/0"]
+
   allow {
     protocol = "tcp"
     ports    = ["443"]