Console
    Contact Us Start free

    Use the Config Sync dashboard

    This page explains how to use the Config Sync dashboard.

    This dashboard provides you with a comprehensive overview of the packages that Config Sync manages and the status of the resources in these packages.

    Before you begin

    IAM permissions

    To access the Config Sync dashboard, the following IAM roles are required in the project:

    • roles/container.clusterViewer
    • roles/gkehub.viewer

    Role-based access control

    The user also needs the relevant Kubernetes permissions in each cluster. If you don't want to grant users extensive permissions, such as those of the cluster admin, you can create a custom RBAC role that includes the minimum permissions required to use the Config Sync dashboard.

    The config-sync-dashboard-reader ClusterRole grants the user get and list permissions on the resources needed by the dashboard.

    1. To create the config-sync-dashboard-reader ClusterRole and apply it to the cluster, run the following command:

        cat <<EOF > config-sync-dashboard-reader.yaml 
 kind 
 : 
  
 ClusterRole 
 apiVersion 
 : 
  
 rbac.authorization.k8s.io/v1 
 metadata 
 : 
  
 name 
 : 
  
 config-sync-dashboard-reader 
 rules 
 : 
 - 
  
 apiGroups 
 : 
  
 [ 
 "apiextensions.k8s.io" 
 ] 
  
 resources 
 : 
  
 [ 
 "customresourcedefinitions" 
 ] 
  
 verbs 
 : 
  
 [ 
 "get" 
 , 
  
 "list" 
 ] 
 - 
  
 apiGroups 
 : 
  
 [ 
 "configmanagement.gke.io" 
 ] 
  
 resources 
 : 
  
 [ 
 "configmanagements" 
 ] 
  
 verbs 
 : 
  
 [ 
 "get" 
 , 
  
 "list" 
 ] 
 - 
  
 apiGroups 
 : 
  
 [ 
 "configsync.gke.io" 
 ] 
  
 resources 
 : 
  
 [ 
 "rootsyncs" 
 , 
  
 "reposyncs" 
 ] 
  
 verbs 
 : 
  
 [ 
 "get" 
 , 
  
 "list" 
 ] 
 - 
  
 apiGroups 
 : 
  
 [ 
 "kpt.dev" 
 ] 
  
 resources 
 : 
  
 [ 
 "resourcegroups" 
 ] 
  
 verbs 
 : 
  
 [ 
 "get" 
 , 
  
 "list" 
 ] 
 - 
  
 apiGroups 
 : 
  
 [ 
 "apps" 
 ] 
  
 resources 
 : 
  
 [ 
 "deployments" 
 ] 
  
 verbs 
 : 
  
 [ 
 "get" 
 , 
  
 "list" 
 ] 
 - 
  
 apiGroups 
 : 
  
 [ 
 "" 
 ] 
  
 resources 
 : 
  
 [ 
 "pods" 
 , 
  
 "services" 
 ] 
  
 verbs 
 : 
  
 [ 
 "get" 
 , 
  
 "list" 
 ] 
 - 
  
 apiGroups 
 : 
  
 [ 
 "anthos.cloud.google.com" 
 ] 
  
 resources 
 : 
  
 [ 
 "canonicalservices" 
 ] 
  
 verbs 
 : 
  
 [ 
 "get" 
 , 
  
 "list" 
 ] 
 - 
  
 apiGroups 
 : 
  
 [ 
 "networking.istio.io" 
 ] 
  
 resources 
 : 
  
 [ 
 "virtualservices" 
 ] 
  
 verbs 
 : 
  
 [ 
 "get" 
 , 
  
 "list" 
 ] 
 EOF 
 kubectl apply -f config-sync-dashboard-reader.yaml

    2. Follow the instructions for configuring role-based access control on Google Kubernetes Engine clusters to set up the ClusterRoleBinding .

    Access the dashboard

    1. In the Google Cloud console, go to the Config page under the Features section.

      Go to Config

    2. Select the project that you want to view.

    View the dashboard

    The dashboardtab provides you an overview of the status of your Config Sync installations:

    • Reconciliation statusshows you how many packages are reconciled. A package is reconciled if the state that you want, as expressed by the resources in the package, has been realized.

      Your packages can have the following reconciliation statuses:

      • Current: the actual state of the package matches the state that you want. The reconcile process is considered complete until there are changes to either the state you want or the actual state.
      • In progress: the actual state of the package hasn't yet reached the state that you want (as expressed by the resources in the package). Newly created packages usually start with this status.
      • Failed: the process of reconciling the actual state with the state that you want has encountered an error or it has made insufficient progress.
      • Unknown: Config Sync couldn't determine the reconciliation status of a package.

    • Synchronization statusshows you how many packages are synced. A package is synced when the latest observed state of the package in the source (for example, a Git repository) is reflected in the cluster.

      Your packages can have the following synchronization statuses:

      • Synced: the package is synced to a cluster.
      • Pending: the package is pending synchronization.
      • Reconciling: the Deployment that syncs a package is being reconciled.
      • Stalled: the Deployment that syncs a package is stalled.
      • Error: the package encountered an error during syncing.
      • Unknown: Config Sync couldn't determine the synchronization status of a package.

    • Config Sync statusshows you the installation status of Config Sync on your clusters.

      Your clusters can have the following status related to Config Sync:

      • Enabled: clusters that have Config Sync enabled.
      • Not enabled: clusters that don't have Config Sync enabled.
      • Pending: clusters that have Config Sync enabled, but are undergoing changes. This status usually occurs during first-time configuration or when updating to a new version.
      • Error: clusters that have Config Sync enabled, but there's an issue and Config Sync isn't working.
      • Unknown: Config Sync's status can't be determined.

    Additional tables show you issues grouped by package and cluster, provide links to install Config Sync and view settings, and resources for getting started.

    View package status

    The Packagestab enables you to view in-depth details about individual packages and clusters. Use this tab to better understand potential causes behind sync errors and unhealthy resources.

    Edit a package

    You can also use the Packagestab to edit your package configurations.

    To edit a package, complete the following steps:

    1. Beside the name of the package that you want to edit, select in the Edit packagecolumn
    2. In the Package detailssection, from the Source typedrop-down list, select your source type.

    3. In the Sourcesection, complete the following:

      • For sources hosted in a Git repository, enter the following fields:

        1. Enter the URL of the Git repository that you're using as a source of truth as the Repository URL.
        2. Optional: Update the Revisionfield to check out if you're not using the default HEAD .
        3. Optional: Update the Pathfield if you don't want to sync from the root repository.
        4. Optional: Update the Branchfield if you're not using the default main branch.

      • For sources hosted in an OCI image, enter the following fields:

        1. Enter the URL of the OCI image that you're using as a source of truth as the Image.
        2. Enter the path of the directory to sync from, relative to the root directory, as the Directory.

    4. (Optional): Expand the Advanced settingssection to complete the following:

      1. Select an Authentication type:

        • None: Use no authentication.
        • SSH: Use an SSH key pair.
        • Cookiefile: Use a cookiefile .
        • Token: Use a token.
        • Google Cloud Repository: Use a Google service account to access a Cloud Source Repositories repository. Only select this option if Workload Identity Federation for GKE is not enabled in your cluster.
        • Workload Identity: Use a Google service account to access a Cloud Source Repositories repository.

      2. Enter a number in seconds to set the Sync wait time, which determines how long Config Sync waits between syncing from the source of truth.

      3. Enter a Git proxyURL for the HTTPS proxy to be used when communicating with the source of truth.

      4. Choose Hierarchyto change the Source format.

        The default value Unstructuredis recommended in most cases since it lets you organize your source of truth however you want.

    5. When you are finished editing your package, click Save.

      You are redirected to the Config Sync Packagespage. After a few minutes, you should see Syncedin the Sync statuscolumn for the package that you configured.

    View settings

    The Settingstab shows you a list of clusters, along with information about their Config Sync settings and fleet settings.

    You can also use this tab to upgrade Config Sync on a cluster:

    • Beside the name of the cluster that you want to upgrade, select the context menu and then select Edit Config.

    For guidance on Config Sync settings, see Configure Config Sync .

    What's next
    Create a Mobile Website
    View Site in Mobile | Classic
    Share by: