Git decides. Automation reconciles. No human runs apply.

The human's only lever is the pull-request review — everything after merge is automated.

ProposedPR opens, changes Terraform/YAML

ReviewedTeammate reviews the diff

MergedApproved, merged to main

ReconcilingAutomation detects the change

AppliedLive state now matches Git

Config Sync is Google's managed reconciler for anything Kubernetes-shaped, including Config Connector manifests. 2026 update: Config Sync, Policy Controller, Fleet APIs, and Connect Gateway moved from a paid Anthos tier into base GKE.