Config Connector resources

Config Connector supports the following resources. All Config Connector resources have a Kubernetes API group of cnrm.cloud.google.com.

Note: Config Connector reference documentation is based on the latest version. If you are using a different version, you can find each version's Custom Resource Definitions in the GitHub repository. For example, this link contains CRDs for version 1.89.0.

Note: Please review best practices and troubleshooting common issues for Config Connector.

Google Cloud Product	Config Connector Resource Name
Access Context Manager	AccessContextManagerAccessLevel
Access Context Manager	AccessContextManagerAccessPolicy
Access Context Manager	AccessContextManagerServicePerimeter
Access Context Manager	AccessContextManagerServicePerimeterResource
AlloyDB for PostgreSQL	AlloyDBBackup
AlloyDB for PostgreSQL	AlloyDBCluster
AlloyDB for PostgreSQL	AlloyDBInstance
AlloyDB for PostgreSQL	AlloyDBUser
API Gateway	APIGatewayAPI
Artifact Registry	ArtifactRegistryRepository
App Hub	AppHubApplication
Apigee	ApigeeEndpointAttachment
Apigee	ApigeeEnvgroup
Apigee	ApigeeEnvgroupAttachment
Apigee	ApigeeEnvironment
Apigee	ApigeeInstance
Apigee	ApigeeInstanceAttachment
Apigee	ApigeeOrganization
App Hub	AppHubApplication
Artifact Registry	ArtifactRegistryRepository
BigQuery sharing	BigQueryAnalyticsHubDataExchange
BigQuery sharing	BigQueryAnalyticsHubListing
BigQuery	BigqueryConnectionConnection
BigQuery	BigQueryDataset
BigQuery	BigQueryJob
BigQuery	BigQueryTable
BigQuery	BigQueryDataTransferConfig
Bigtable	BigtableAppProfile
Bigtable	BigtableGCPolicy
Bigtable	BigtableInstance
Bigtable	BigtableTable
Cloud Billing Budget	BillingBudgetsBudget
Binary Authorization	BinaryAuthorizationAttestor
Binary Authorization	BinaryAuthorizationPolicy
Cloud Build	CloudBuildTrigger
Cloud Build	CloudBuildWorkerPool
Cloud Quotas	APIQuotaAdjusterSettings
Cloud Run functions	CloudFunctionsFunction
Cloud Identity	CloudIdentityGroup
Cloud Identity	CloudIdentityMembership
Cloud Intrusion Detection System	CloudIDSEndpoint
Cloud Scheduler	CloudSchedulerJob
Certificate Manager	CertificateManagerCertificate
Certificate Manager	CertificateManagerCertificateMap
Certificate Manager	CertificateManagerCertificateMapEntry
Certificate Manager	CertificateManagerDNSAuthorization
Compute Engine	ComputeAddress
Compute Engine	ComputeBackendBucket
Compute Engine	ComputeBackendService
Compute Engine	ComputeDisk
Compute Engine	ComputeExternalVPNGateway
Compute Engine	ComputeFirewall
Compute Engine	ComputeFirewallPolicy
Compute Engine	ComputeFirewallPolicyAssociation
Compute Engine	ComputeFirewallPolicyRule
Compute Engine	ComputeForwardingRule
Compute Engine	ComputeHealthCheck
Compute Engine	ComputeHTTPHealthCheck
Compute Engine	ComputeHTTPSHealthCheck
Compute Engine	ComputeImage
Compute Engine	ComputeInstance
Compute Engine	ComputeInstanceGroup
Compute Engine	ComputeInstanceGroupManager
Compute Engine	ComputeInstanceTemplate
Compute Engine	ComputeInterconnectAttachment
Compute Engine	ComputeManagedSSLCertificate
Compute Engine	ComputeNetwork
Compute Engine	ComputeNetworkEndpointGroup
Compute Engine	ComputeNetworkFirewallPolicy
Compute Engine	ComputeNetworkFirewallPolicyAssociation
Compute Engine	ComputeNetworkPeering
Compute Engine	ComputeNodeGroup
Compute Engine	ComputeNodeTemplate
Compute Engine	ComputePacketMirroring
Compute Engine	ComputeProjectMetadata
Compute Engine	ComputeRegionNetworkEndpointGroup
Compute Engine	ComputeReservation
Compute Engine	ComputeResourcePolicy
Compute Engine	ComputeRoute
Compute Engine	ComputeRouter
Compute Engine	ComputeRouterInterface
Compute Engine	ComputeRouterNAT
Compute Engine	ComputeRouterPeer
Compute Engine	ComputeSecurityPolicy
Compute Engine	ComputeServiceAttachment
Compute Engine	ComputeSharedVPCHostProject
Compute Engine	ComputeSharedVPCServiceProject
Compute Engine	ComputeSnapshot
Compute Engine	ComputeSSLCertificate
Compute Engine	ComputeSSLPolicy
Compute Engine	ComputeSubnetwork
Compute Engine	ComputeTargetGrpcProxy
Compute Engine	ComputeTargetHttpProxy
Compute Engine	ComputeTargetHttpsProxy
Compute Engine	ComputeTargetInstance
Compute Engine	ComputeTargetPool
Compute Engine	ComputeTargetSslProxy
Compute Engine	ComputeTargetTcpProxy
Compute Engine	ComputeTargetVPNGateway
Compute Engine	ComputeURLMap
Compute Engine	ComputeVPNGateway
Compute Engine	ComputeVPNTunnel
Config Controller	ConfigControllerInstance
Artifact Analysis	ContainerAnalysisNote
Dataflow	DataflowJob
Dataflow	DataflowFlexTemplateJob
Dataform	DataformRepository
Cloud Data Fusion	DatafusionInstance
Dataproc	DataprocAutoscalingPolicy
Dataproc	DataprocCluster
Dataproc	DataprocWorkflowTemplate
Cloud Data Loss Prevention	DLPDeidentifyTemplate
Cloud Data Loss Prevention	DLPInspectTemplate
Cloud Data Loss Prevention	DLPJobTrigger
Cloud Data Loss Prevention	DLPStoredInfoType
Cloud DNS	DNSManagedZone
Cloud DNS	DNSPolicy
Cloud DNS	DNSRecordSet
Google Distributed Cloud	EdgeContainerCluster
Google Distributed Cloud	EdgeContainerNodePool
Google Distributed Cloud	EdgeContainerVPNConnection
Google Distributed Cloud	EdgeNetworkNetwork
Google Distributed Cloud	EdgeNetworkSubnet
Eventarc	EventarcTrigger
Filestore	FilestoreBackup
Filestore	FilestoreInstance
Firestore	FirestoreDatabase
Firestore	FirestoreIndex
GKE attached clusters	ContainerAttachedCluster
GKE Hub	GKEHubMembership
GKE Hub	GKEHubFeature
GKE Hub	GKEHubFeatureMembership
Google Kubernetes Engine	ContainerCluster
Google Kubernetes Engine	ContainerNodePool
Identity and Access Management	IAMAuditConfig
Identity and Access Management	IAMCustomRole
Identity and Access Management	IAMPartialPolicy
Identity and Access Management	IAMPolicy
Identity and Access Management	IAMPolicyMember
Identity and Access Management	IAMServiceAccount
Identity and Access Management	IAMServiceAccountKey
Identity and Access Management	IAMWorkforcePool
Identity and Access Management	IAMWorkforcePoolProvider
Identity and Access Management	IAMWorkloadIdentityPool
Identity and Access Management	IAMWorkloadIdentityPoolProvider
Identity-Aware Proxy	IAPBrand
Identity-Aware Proxy	IAPIdentityAwareProxyClient
Identity-Aware Proxy	IAPSettings
Identity Platform	IdentityPlatformOAuthIDPConfig
Identity Platform	IdentityPlatformConfig
Identity Platform	IdentityPlatformTenant
Identity Platform	IdentityPlatformTenantOAuthIDPConfig
Cloud Key Management Service	KMSCryptoKey
Cloud Key Management Service	KMSKeyRing
Cloud Key Management Service	KMSAutokeyConfig
Cloud Key Management Service	KMSKeyHandle
Cloud Logging	LoggingLogBucket
Cloud Logging	LoggingLogExclusion
Cloud Logging	LoggingLogMetric
Cloud Logging	LoggingLogSink
Cloud Logging	LoggingLogView
Google Cloud Managed Service for Apache Kafka	ManagedKafkaCluster
Google Cloud Managed Service for Apache Kafka	ManagedKafkaTopic
Memorystore for Memcached	MemcacheInstance
Cloud Monitoring	MonitoringAlertPolicy
Cloud Monitoring	MonitoringDashboard
Cloud Monitoring	MonitoringGroup
Cloud Monitoring	MonitoringMetricDescriptor
Cloud Monitoring	MonitoringMonitoredProject
Cloud Monitoring	MonitoringNotificationChannel
Cloud Monitoring	MonitoringService
Cloud Monitoring	MonitoringServiceLevelObjective
Cloud Monitoring	MonitoringUptimeCheckConfig
Network Connectivity	NetworkConnectivityHub
Network Connectivity	NetworkConnectivitySpoke
Notebooks	NotebooksInstance
OS Config	OSConfigGuestPolicy
OS Config	OSConfigOSPolicyAssignment
Private CA	PrivateCACAPool
Private CA	PrivateCACertificate
Private CA	PrivateCACertificateAuthority
Private CA	PrivateCACertificateTemplate
Privileged Access Manager	PrivilegedAccessManagerEntitlement
Pub/Sub	PubSubSchema
Pub/Sub	PubSubSubscription
Pub/Sub	PubSubTopic
Pub/Sub Lite	PubSubLiteReservation
Memorystore	RedisCluster
Memorystore	RedisInstance
reCAPTCHA	RecaptchaEnterpriseKey
Resource Manager	Folder
Resource Manager	Project
Resource Manager	ResourceManagerLien
Resource Manager	ResourceManagerPolicy
Cloud Run	RunJob
Cloud Run	RunService
Secret Manager	SecretManagerSecret
Secret Manager	SecretManagerSecretVersion
Secure Source Manager	SecureSourceManagerInstance
Secure Source Manager	SecureSourceManagerRepository
Service Directory	ServiceDirectoryEndpoint
Service Directory	ServiceDirectoryNamespace
Service Directory	ServiceDirectoryService
Service Networking	ServiceNetworkingConnection
Service Usage	Service
Service Usage	ServiceIdentity
Cloud Source Repositories	SourceRepoRepository
Speech-to-Text	SpeechCustomClass
Speech-to-Text	SpeechPhraseSet
Speech-to-Text	SpeechRecognizer
Spanner	SpannerBackupSchedule
Spanner	SpannerDatabase
Spanner	SpannerInstance
Cloud SQL	SQLDatabase
Cloud SQL	SQLInstance
Cloud SQL	SSLCert
Cloud SQL	SQLUser
Cloud Storage	StorageAnywhereCache
Cloud Storage	StorageBucket
Cloud Storage	StorageBucketAccessControl
Cloud Storage	StorageDefaultObjectAccessControl
Cloud Storage	StorageNotification
Storage Transfer Service	StorageTransferJob
Cloud Service Mesh	NetworkSecurityAuthorizationPolicy
Cloud Service Mesh	NetworkSecurityClientTLSPolicy
Cloud Service Mesh	NetworkSecurityServerTLSPolicy
Cloud Service Mesh	NetworkServicesEndpointPolicy
Cloud Service Mesh	NetworkServicesGateway
Cloud Service Mesh	NetworkServicesGRPCRoute
Cloud Service Mesh	NetworkServicesHTTPRoute
Cloud Service Mesh	NetworkServicesMesh
Cloud Service Mesh	NetworkServicesTCPRoute
Cloud Service Mesh	NetworkServicesTLSRoute
Vertex AI	VertexAIDataset
Vertex AI	VertexAIEndpoint
Vertex AI	VertexAIIndex
Vertex AI	VertexAIMetadataStore
Serverless VPC Access	VPCAccessConnector
Cloud Workstations	WorkstationCluster
Cloud Workstations	WorkstationConfig
Cloud Workstations	Workstation

The following resources are not supported in Config Connector starting from the corresponding version:

Google Cloud Product	Config Connector Resource Name	Deprecation Version
Game Servers Realm	GameServicesRealm	1.101.0