Question

Your platform team must bootstrap a new Google Cloud organization and standardize how infrastructure resources (projects, GKE clusters, networking) are provisioned declaratively using Kubernetes-style config. Leadership requires a Google-managed solution that runs Config Sync and Policy Controller out of the box, uses Config Connector to reconcile Google Cloud resources via KRM manifests stored in Git, and requires minimal operational maintenance of the underlying control plane. Which approach best meets these requirements?

Accepted Answer

Provision a Config Controller instance in Anthos Config Management, then store KRM manifests in a Git repo that Config Sync applies to reconcile Google Cloud resources.

Answer

Deploy a self-managed GKE cluster, manually install Config Connector, Config Sync, and Policy Controller, and maintain the control plane yourself.

Answer

Use Terraform Cloud with a remote backend to store state and apply all Google Cloud resource changes without any Kubernetes tooling.

Answer

Enable Deployment Manager templates and trigger them from Cloud Build to reconcile resources declaratively.