Anthos Config Management
Anthos Config Management is a service for configuration and Policy management that continuously protect and configure Kubernetes resources. Anthos helps to automate policy and security at scale for Kubernetes clusters on-premises, on GKE, and on other public clouds.
Anthos Config Management automatically synchronizes configurations and applied policies across Kubernetes Clusters.
Components
- Policy Controller
- Config Sync
- Config Controller
Policy Controller
Policy Controller enforces fully programmable policies that represent constraints on the desired state.These policies act as “GateKeeper” and prevent any changes to the configuration of the Kubernetes API from violating security, operational, or compliance controls.
Config Sync
Continuously reconcile clusters to central location set of configuration .Configurations are stored in GIT repositories and this GitOps apply configuration across clusters.
Config controller
Config Controller is a hosted service which brings Config Connector, Config Sync, and Policy Controller.This component offers an API Endpoint.
How Leverage Anthos Config Management today
Create current state Process Map
Draft a future state process Map
Use Anthos Config as GitOps-as-a-service (GaaS) to continuously improve.
Hierarchical Repository
A valid config sync must contains below sub-directories
cluster/
namespaces/
system/
References
Anthos Config Management | Google Cloud
GitOps | GitOps is Continuous Deployment for cloud native applications
