Config Controller overview

This page explains what Config Controller is and how it relates toConfig Connector, Config Sync and Policy Controller.

Config Controller creates and managesGoogle Cloud resources with a declarative, Kubernetes model.Config Controller is a hosted version of Config Connector that simplifiesinstallation and maintenance. Config Controller also includesPolicy Controller and Config Sync.

With Config Controller, you can create configurations for any Google Cloudresource. The configurations for these resources are stored in a source of truthlike a Git repository. Config Sync continuously monitors your resources toensure the current states of resources matches the state that you define in yoursource of truth. Policy Controller can catch and enforce policy violationson those resources before they are deployed. This flow is illustrated in thefollowing diagram:

Config Controller resource management flow

Config Controller's declarative configuration approach gives you manybenefits:

  • Manage with Kubernetes: Use familiar Kubernetes tools and workflows tomanage Google Cloud resources andcustom workloads.
  • Declare desired state: Focus on what your resources look like ratherthan the specifics of how you create them.
  • Automate drift detection and repair: Continuously monitor yourinfrastructure for drift from the defined state and enable automaticrepairs.
  • Use GitOps for consistency: Collaborate with your colleagues onpotential changes and preview changes before they are made.
  • Enforce policy guardrails: Enforce policies earlier in the developmentcycle and detect violations before deploying resources.
  • Audit infrastructure continuously: Maintain an audit trail of allchanges to help understand the history of your infrastructure.
  • Increase developer velocity: Improve the safety and velocity of yourcloud adoption journey by using best practices.

For a guided example showing you how to install and use a Config Controllerinstance, seeManage resources with Config Controller.For the full installation instructions, seeSet up Config Controller.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-02-19 UTC.