Quickstart

Masthead Installation details for Google Cloud + BigQuery

We offer a few options to connect Masthead to your Google Cloud environment:

1. OAuth - the quickest option, integrate in a few clicks

2. Terraform - use infrastructure as a code approach

OAuth installation

OAuth installation takes about 2 minutes.

Google account running an installation should have Owner permissions for the Google Cloud project.

Otherwise the following roles are required: Service Usage Admin, Logging Admin, Pub/Sub Admin, Project IAM Admin.

1

Go to Sign up

Fill the form, agree with Privacy Policy and click Sign up with Google

2

Provide access to Google Cloud

Select checkboxes to allow creation of required resources during installation. See what is created during deployment.

Masthead doesn't save provided authorization credentials after the integration step is complete.

3

Connect your Google Cloud project

Select Google Cloud project with BigQuery resources and pipelines that need to be monitored by Masthead. Press Connect.

4

Configuration Completed

Masthead installation will create your workspace and open your dashboard once setup is completed.

5

Workspace is ready

You'll receive an email notification with the link to the workspace.

We'll notify you once all the metadata is collected and the insights are ready.

All done! Thank you for completing installation!

Cloud resources created by OAuth installation

Pub/Sub

• Topic: masthead-topic

• Subscription: masthead-agent-subscription

Logging

• Log Sink: masthead-agent-sink

  • Destination: Pub/Sub topic masthead-topic

  • Filter: BigQuery audit logs:

    • AppendRows

    • InsertJob

    • InsertTable

    • Query

IAM

• Project IAM roles granted

  • to Cloud Logging service agent:

    • Pub/Sub Publisher

  • to Masthead service account:

    • BigQuery Metadata Viewer

    • BigQuery Resource Viewer

    • Private Logs Viewer

    • Pub/Sub Subscriber