Monitor Config Controller

This page explains how to monitor Config Controller. Config Controller includes Config Connector, Config Sync and Policy Controller. Each operator includes multiple metrics.

This page is for IT administrators and Operators who monitor the health of deployed applications or services. To learn more about common roles and example tasks that we reference in Google Cloud content, see Common GKE user roles and tasks.

Set up Policy Controller monitoring

Allow Policy Controller to send metrics by running this command:

gcloud projects add-iam-policy-binding PROJECT_ID \
  --member="serviceAccount:PROJECT_ID.svc.id.goog[gatekeeper-system/gatekeeper-admin]" \
  --role=roles/monitoring.metricWriter

Replace PROJECT_ID with the cluster's Google Cloud project ID.

What's next

Learn more about options to monitor Config Connector, Config Sync and Policy Controller:

• Monitoring Config Connector with Prometheus
• Use Config Sync metrics
• Monitor Config Sync with Google Cloud CLI
• Use Policy Controller metrics