Code Review changes

examples/root-example/README.md

 # Simple example
 
-This is a simple example of storing depploying a cloud run enviroment into a
+This is a simple example of deploying a Cloud Run hosted container into a
 GCP project. Specify the project to deploy into and the sql instance to connect to
 on the command line. The sql instance connection is optional, use an empty string 
 if you do not want to connect Cloud Run to a SQL instance.

main.tf

@@ -99,7 +99,7 @@ resource "google_cloud_run_service" "webapp" {
 
 # Allow unauthenticated invocations for the webapp.
 resource "google_cloud_run_service_iam_member" "webapp_all_users_invoker" {
-  count    = var.webapp_open
+  count    = var.allow_unauthenticated_invocations ? 1 : 0
   location = google_cloud_run_service.webapp.location
   project  = google_cloud_run_service.webapp.project
   service  = google_cloud_run_service.webapp.name

variables.tf

@@ -39,16 +39,20 @@ variable "container_concurrency" {
 }
 
 variable "cpu_limit" {
-  description = "CPU limit for the deployed container. Defaults to 1 CPU."
+  description = "CPU limit for the deployed container. Defaults to 1 CPU, '1000m'."
   default     = "1000m"
 }
 
 variable "memory_limit" {
-  description = "Memory limit for the deployed container. Defaults to 512 MB."
+  description = "Memory limit for the deployed container. Defaults to 512 MB, '512M'."
   default     = "512M"
 }
 
-variable "webapp_open" {
-  description = "By default Cloud Run does not allow non-authenticated traffic to the web app. This settings changes that default to be open to all traffic (value of 1). Change it to 0 if you don't want to change default behaviour."
-  default     = 1
+variable "allow_unauthenticated_invocations" {
+  description = <<EOI
+If true, the webapp will allow unauthenticated invocations. If false, the webapp requires authentication
+as a Google user with the Cloud Run invoker permission on the deployment.
+EOI
+  type        = bool
+  default     = true
 }