Config Connector resources


Config Connector supports the following resources. All Config Connector resources have a Kubernetes API group of cnrm.cloud.google.com.

Google Cloud Product Config Connector Resource Name
Access Context Manager AccessContextManagerAccessLevel
Access Context Manager AccessContextManagerAccessPolicy
GKE attached clusters ContainerAttachedCluster
Access Context Manager AccessContextManagerServicePerimeter
AlloyDB for PostgreSQL AlloyDBBackup
AlloyDB for PostgreSQL AlloyDBCluster
AlloyDB for PostgreSQL AlloyDBInstance
AlloyDB for PostgreSQL AlloyDBUser
Artifact Registry ArtifactRegistryRepository
Apigee ApigeeEnvironment
Apigee ApigeeOrganization
BigQuery BigQueryDataset
BigQuery BigQueryJob
BigQuery BigQueryTable
Bigtable BigtableAppProfile
Bigtable BigtableGCPolicy
Bigtable BigtableInstance
Bigtable BigtableTable
Cloud Billing Budget BillingBudgetsBudget
Binary Authorization BinaryAuthorizationAttestor
Binary Authorization BinaryAuthorizationPolicy
Cloud Build CloudBuildTrigger
Cloud Functions CloudFunctionsFunction
Cloud Identity CloudIdentityGroup
Cloud Identity CloudIdentityMembership
Cloud Scheduler CloudSchedulerJob
Certificate Manager CertificateManagerCertificate
Certificate Manager CertificateManagerCertificateMap
Certificate Manager CertificateManagerCertificateMapEntry
Certificate Manager CertificateManagerDNSAuthorization
Compute Engine ComputeAddress
Compute Engine ComputeBackendBucket
Compute Engine ComputeBackendService
Compute Engine ComputeDisk
Compute Engine ComputeExternalVPNGateway
Compute Engine ComputeFirewall
Compute Engine ComputeFirewallPolicy
Compute Engine ComputeFirewallPolicyAssociation
Compute Engine ComputeFirewallPolicyRule
Compute Engine ComputeForwardingRule
Compute Engine ComputeHealthCheck
Compute Engine ComputeHTTPHealthCheck
Compute Engine ComputeHTTPSHealthCheck
Compute Engine ComputeImage
Compute Engine ComputeInstance
Compute Engine ComputeInstanceGroup
Compute Engine ComputeInstanceGroupManager
Compute Engine ComputeInstanceTemplate
Compute Engine ComputeInterconnectAttachment
Compute Engine ComputeNetwork
Compute Engine ComputeNetworkEndpointGroup
Compute Engine ComputeNetworkFirewallPolicy
Compute Engine ComputeNetworkPeering
Compute Engine ComputeNodeGroup
Compute Engine ComputeNodeTemplate
Compute Engine ComputePacketMirroring
Compute Engine ComputeProjectMetadata
Compute Engine ComputeRegionNetworkEndpointGroup
Compute Engine ComputeReservation
Compute Engine ComputeResourcePolicy
Compute Engine ComputeRoute
Compute Engine ComputeRouter
Compute Engine ComputeRouterInterface
Compute Engine ComputeRouterNAT
Compute Engine ComputeRouterPeer
Compute Engine ComputeSecurityPolicy
Compute Engine ComputeServiceAttachment
Compute Engine ComputeSharedVPCHostProject
Compute Engine ComputeSharedVPCServiceProject
Compute Engine ComputeSnapshot
Compute Engine ComputeSSLCertificate
Compute Engine ComputeSSLPolicy
Compute Engine ComputeSubnetwork
Compute Engine ComputeTargetGrpcProxy
Compute Engine ComputeTargetHttpProxy
Compute Engine ComputeTargetHttpsProxy
Compute Engine ComputeTargetInstance
Compute Engine ComputeTargetPool
Compute Engine ComputeTargetSslProxy
Compute Engine ComputeTargetTcpProxy
Compute Engine ComputeTargetVPNGateway
Compute Engine ComputeURLMap
Compute Engine ComputeVPNGateway
Compute Engine ComputeVPNTunnel
Config Controller ConfigControllerInstance
Artifact Analysis ContainerAnalysisNote
Dataflow DataflowJob
Dataflow DataflowFlexTemplateJob
Cloud Data Fusion DatafusionInstance
Dataproc DataprocAutoscalingPolicy
Dataproc DataprocCluster
Dataproc DataprocWorkflowTemplate
Cloud Data Loss Prevention DLPDeidentifyTemplate
Cloud Data Loss Prevention DLPInspectTemplate
Cloud Data Loss Prevention DLPJobTrigger
Cloud Data Loss Prevention DLPStoredInfoType
Cloud DNS DNSManagedZone
Cloud DNS DNSPolicy
Cloud DNS DNSRecordSet
Google Distributed Cloud Edge EdgeContainerCluster
Google Distributed Cloud Edge EdgeContainerNodePool
Google Distributed Cloud Edge EdgeContainerVPNConnection
Google Distributed Cloud Edge EdgeNetworkNetwork
Google Distributed Cloud Edge EdgeNetworkSubnet
Eventarc EventarcTrigger
Filestore FilestoreBackup
Filestore FilestoreInstance
Firestore FirestoreIndex
GKE Hub GKEHubMembership
GKE Hub GKEHubFeature
GKE Hub GKEHubFeatureMembership
Google Kubernetes Engine ContainerCluster
Google Kubernetes Engine ContainerNodePool
Identity and Access Management IAMAuditConfig
Identity and Access Management IAMCustomRole
Identity and Access Management IAMPartialPolicy
Identity and Access Management IAMPolicy
Identity and Access Management IAMPolicyMember
Identity and Access Management IAMServiceAccount
Identity and Access Management IAMServiceAccountKey
Identity and Access Management IAMWorkforcePool
Identity and Access Management IAMWorkforcePoolProvider
Identity and Access Management IAMWorkloadIdentityPool
Identity and Access Management IAMWorkloadIdentityPoolProvider
Identity-Aware Proxy IAPBrand
Identity-Aware Proxy IAPIdentityAwareProxyClient
Identity Platform IdentityPlatformOAuthIDPConfig
Identity Platform IdentityPlatformConfig
Identity Platform IdentityPlatformTenant
Identity Platform IdentityPlatformTenantOAuthIDPConfig
Cloud Key Management Service KMSCryptoKey
Cloud Key Management Service KMSKeyRing
Cloud Logging LoggingLogBucket
Cloud Logging LoggingLogExclusion
Cloud Logging LoggingLogMetric
Cloud Logging LoggingLogSink
Cloud Logging LoggingLogView
Memorystore for Memcached MemcacheInstance
Cloud Monitoring MonitoringAlertPolicy
Cloud Monitoring MonitoringDashboard
Cloud Monitoring MonitoringGroup
Cloud Monitoring MonitoringMetricDescriptor
Cloud Monitoring MonitoringMonitoredProject
Cloud Monitoring MonitoringNotificationChannel
Cloud Monitoring MonitoringService
Cloud Monitoring MonitoringServiceLevelObjective
Cloud Monitoring MonitoringUptimeCheckConfig
Network Connectivity NetworkConnectivityHub
Network Connectivity NetworkConnectivitySpoke
OS Config OSConfigGuestPolicy
OS Config OSConfigOSPolicyAssignment
Private CA PrivateCACAPool
Private CA PrivateCACertificate
Private CA PrivateCACertificateAuthority
Private CA PrivateCACertificateTemplate
Pub/Sub PubSubSchema
Pub/Sub PubSubSubscription
Pub/Sub PubSubTopic
Pub/Sub Lite PubSubLiteReservation
Memorystore RedisInstance
reCAPTCHA Enterprise RecaptchaEnterpriseKey
Resource Manager Folder
Resource Manager Project
Resource Manager ResourceManagerLien
Resource Manager ResourceManagerPolicy
Cloud Run RunJob
Cloud Run RunService
Secret Manager SecretManagerSecret
Secret Manager SecretManagerSecretVersion
Service Directory ServiceDirectoryEndpoint
Service Directory ServiceDirectoryNamespace
Service Directory ServiceDirectoryService
Service Networking ServiceNetworkingConnection
Service Usage Service
Service Usage ServiceIdentity
Cloud Source Repositories SourceRepoRepository
Spanner SpannerDatabase
Spanner SpannerInstance
Cloud SQL SQLDatabase
Cloud SQL SQLInstance
Cloud SQL SSLCert
Cloud SQL SQLUser
Cloud Storage StorageBucket
Cloud Storage StorageBucketAccessControl
Cloud Storage StorageDefaultObjectAccessControl
Cloud Storage StorageNotification
Storage Transfer Service StorageTransferJob
Traffic Director NetworkSecurityAuthorizationPolicy
Traffic Director NetworkSecurityClientTLSPolicy
Traffic Director NetworkSecurityServerTLSPolicy
Traffic Director NetworkServicesEndpointPolicy
Traffic Director NetworkServicesGateway
Traffic Director NetworkServicesGRPCRoute
Traffic Director NetworkServicesHTTPRoute
Traffic Director NetworkServicesMesh
Traffic Director NetworkServicesTCPRoute
Traffic Director NetworkServicesTLSRoute
Serverless VPC Access VPCAccessConnector

The following resources are not supported in Config Connector starting from the corresponding version:

Google Cloud Product Config Connector Resource Name Deprecation Version
Game Servers Realm GameServicesRealm 1.101.0