Google Config Connector
Google Config Connector lets users manage Google Cloud resources through the Kubernetes API with YAML or JSON.
What Google Config Connector is
Google Config Connector lets users manage Google Cloud resources through the Kubernetes API with YAML or JSON. It covers products including Spanner, Cloud Storage, Access Context Manager, AlloyDB for PostgreSQL, API Gateway, and Apigee, with scope at project, folder, or organization level. Installation choices are manual setup, Config Controller, or a GKE add-on; manual instructions cover Autopilot and Standard clusters. Google recommends namespaced mode for most manual installations, describing it as more scalable and better for permission isolation in multi-tenant environments. IAM controls access, and namespaces can use separate service accounts. Policy Controller or Open Policy Agent Gatekeeper can govern resource creation, while Prometheus monitoring is documented. Config Connector is free and open source, but resources it creates incur Google Cloud pay-as-you-go costs. Import and export support varies, and some resource types—including DataflowFlexTemplateJob, FirestoreIndex, and IAMServiceAccountKey—cannot acquire existing resources.
Good
- Kubernetes API resource management
- Supports YAML and JSON
- Namespaced permission isolation
- Policy as code options
- Free and open source
Watch out
- Created resources incur Google Cloud costs
- Import and export have limits
- Some resources cannot be acquired
- Installation requires Kubernetes setup
Who it suits
It suits teams managing Google Cloud infrastructure through Kubernetes workflows and policy controls. Organizations comfortable with self-hosted execution, YAML or JSON, and Google Cloud billing can use it.
Verdict
Config Connector provides Kubernetes-based control over Google Cloud resources with policy and monitoring options. The connector itself is free, but deployment choices and resource-acquisition limits require planning.
Plans and prices
From Google Config Connector's own pricing page, checked 8 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Usage-based Google Cloud resources | Priced on request | Costs depend on the resources created · Custom quote available from sales · Google Cloud resource costs apply; the page states pay-as-you-go billing and does not list a separate Config Connector price. |
The facts
Each one read from Google Config Connector's own pages, with the date it was checked.
Money
- Cost model
- The pricing page says Config Connector incurs costs for the Google Cloud resources it creates and points users to Google Cloud pricing for details.checked 8 Oct 2026
What it does
- Deployment
- Manual installation instructions cover Google Kubernetes Engine clusters, including Autopilot and Standard installation steps.checked 8 Oct 2026
- Import/export limitation
- Not all resources support the export command, and some resource types do not support acquiring existing Google Cloud resources.checked 8 Oct 2026
- Installation options
- Google documents manual installation, Config Controller, and installation as a GKE add-on.checked 8 Oct 2026
- Monitoring
- The documentation includes instructions for monitoring Config Connector with Prometheus.checked 8 Oct 2026
- Namespaced mode
- Google recommends namespaced mode for most manual installations, describing it as more scalable and offering better permission isolation for multi-tenant use cases.checked 8 Oct 2026
- Policy governance
- Google documents using Policy Controller or Open Policy Agent Gatekeeper policies to govern resource creation with Config Connector.checked 8 Oct 2026
- Purpose
- Config Connector lets users manage Google Cloud resources, such as Spanner and Cloud Storage, through the Kubernetes API.checked 8 Oct 2026
- Resource acquisition limit
- The documentation lists DataflowFlexTemplateJob, FirestoreIndex, and IAMServiceAccountKey among resources that cannot acquire existing Google Cloud resources.checked 8 Oct 2026
- Resource coverage
- It supports resources across Google Cloud products, including Access Context Manager, AlloyDB for PostgreSQL, API Gateway, and Apigee.checked 8 Oct 2026
- Scope
- Config Connector can manage resources at the project, folder, or organization level.checked 8 Oct 2026
- Security
- Access can be controlled with IAM permissions, and namespaced installations can use separate service accounts for namespaces.checked 8 Oct 2026
Alternatives to Google Config Connector
- 1
Cloudify
Free planOpen sourceWebAPILinuxmacOS8.4From $395 a month - 2
Terraform
Free planWebAPILinuxmacOS8.0Free plan - 3
Terramate
Free planOpen sourceWebAPIExtensionLinux8.0From $449 a month - 4
AWS CloudFormation
Free planiOSWebAPILinux7.7Free plan - 5
Pulumi
Free planWebAPILinuxmacOS7.4From $40 a month - 6
Oracle Cloud Infrastructure Container Registry
Free planWebAPILinux7.0Free plan