This page explains how to monitor Config Controller. Config Controller includes Config Connector, Config Sync and Policy Controller. Each operator includes multiple metrics.
This page is for IT administrators and Operators who monitor the health of deployed applications or services. To learn more about common roles and example tasks that we reference in Cloud de Confiance by S3NS content, see Common GKE user roles and tasks.
Set up Policy Controller monitoring
Allow Policy Controller to send metrics by running this command:
gcloud projects add-iam-policy-binding PROJECT_ID \
--member="serviceAccount:PROJECT_ID.s3ns.svc.id.goog[gatekeeper-system/gatekeeper-admin]" \
--role=roles/monitoring.metricWriter
Replace PROJECT_ID with the cluster's Cloud de Confiance project ID.
What's next
Learn more about options to monitor Config Connector, Config Sync and Policy Controller: