oam/knowledge base/cloud computing/gcp/config connector.md

Config Connector

Kubernetes addon to manage Google Cloud resources from inside Kubernetes clusters.

Provides a collection of Custom Resource Definitions and controllers.

Table of contents

1. TL;DR
2. Installation
3. Resources management
4. Gotchas
5. Further readings

TL;DR

# List gcp resources one can create using config connector.
# Requires config connector to be installed.
kubectl get crds --selector 'cnrm.cloud.google.com/managed-by-kcc=true'

Installation

1. Refer to:

   • the installation howto for details and updated instructions if you are using GKE;
   • the installation types page for details and updated instructions for other K8S clusters.

2. Enable the Resource Manager API:

   gcloud services enable 'cloudresourcemanager.googleapis.com'
   

Resources management

List what Google Cloud resources you can create with Config Connector:

kubectl get crds --selector cnrm.cloud.google.com/managed-by-kcc=true

Gotchas

• Service accounts can be granted editor access by replacing --role="roles/owner" with --role="roles/editor"; this allows most Config Connector functionality, except project and organization wide configurations such as IAM modifications.
• When creating a resource, Config Connector creates it if it doesn't exist; if a resource already exists with the same name, then Config Connector acquires and manages it instead.

Further readings

• Website
• Getting started