diff --git a/modules/net-vpc-firewall/variables.tf b/modules/net-vpc-firewall/variables.tf
index 3b21fb5f1..132f00ed9 100644
--- a/modules/net-vpc-firewall/variables.tf
+++ b/modules/net-vpc-firewall/variables.tf
@@ -71,7 +71,7 @@ variable "ingress_rules" {
   type = map(object({
     deny               = optional(bool, false)
     description        = optional(string)
-    destination_ranges = optional(list(string), []) # empty list is needed as default to allow deletion after initial creation with a value
+    destination_ranges = optional(list(string), []) # empty list is needed as default to allow deletion after initial creation with a value. See https://github.com/hashicorp/terraform-provider-google/issues/14270
     disabled           = optional(bool, false)
     enable_logging = optional(object({
       include_metadata = optional(bool)