Monitor Config Controller

This page explains how to monitor Config Controller. Config Controller includes Config Connector, Config Sync and Policy Controller. Each operator includes multiple metrics.

This page is for IT administrators and Operators who monitor the health of deployed applications or services. To learn more about common roles and example tasks that we reference in Google Cloud content, see Common GKE user roles and tasks.

Set up Policy Controller monitoring

Allow Policy Controller to send metrics by running this command:

gcloudprojectsadd-iam-policy-bindingPROJECT_ID\
--member="serviceAccount:PROJECT_ID.svc.id.goog[gatekeeper-system/gatekeeper-admin]"\
--role=roles/monitoring.metricWriter

Replace PROJECT_ID with the cluster's Google Cloud project ID.

What's next

Learn more about options to monitor Config Connector, Config Sync and Policy Controller:

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025年12月05日 UTC.