Supported Authentication Types:
- GCP Credentials — Google Cloud service account authentication using a service account key file or Application Default Credentials.
Requirements
The Google Cloud service account used for ingestion needs the following IAM permissions:Metadata Ingestion
The service account needs the following permissions to list and read Pub/Sub topics and subscriptions:Schema Registry (when schemaRegistryEnabled is true)
Enabling schema ingestion requires these additional permissions:
The built-in GCP role
roles/pubsub.viewer grants all of the above permissions and is the recommended role for OpenMetadata ingestion.
Metadata Ingestion
To ingest metadata from Google Pub/Sub, you need to create a service connection. The service connects Pub/Sub with OpenMetadata. Once you create a service, OpenMetadata automatically starts ingesting metadata.Step 1: Add New Service
-
Navigate to Settings > Services.

-
Click Add New Service.

Step 2: Select a Service and Connector
From the service type dropdown, select Messaging Services, then click the Pub/Sub connector tile.
Step 3: Add Service Name and Description
- Enter a unique, descriptive Service Name. OpenMetadata identifies services by their service name. Enter a name that distinguishes this deployment from other Pub/Sub services you are ingesting metadata from.
- Optional: Enter a Description for the service.

Note: The service name cannot be changed after it is set.
Step 4: Configure Connection Options
Specify your source credentials and verify the connection.Enter Connection Details
Enter the connection details for Google Pub/Sub. The right-hand panel in the UI displays inline help for each field.
- GCP Credentials: GCP service account credentials for authenticating with Pub/Sub. Provide a service account key in JSON format, or use Application Default Credentials when running on GCP infrastructure (GCE, GKE, Cloud Run). See Creating a GCP Service Account for details.
- Project ID (optional): GCP Project ID where Pub/Sub topics are located. If not specified, the project ID is read from the service account credentials.
- Host and Port (optional): Pub/Sub API endpoint URL. Defaults to
pubsub.googleapis.com. When connecting to a local Pub/Sub emulator, set this to the emulator address (for example,localhost:8085) and enable Use Emulator. - Use Emulator (optional): Connect to a local Pub/Sub emulator instead of the production service. Useful for development and testing. When enabled,
hostPortmust be set to the emulator address (not the defaultpubsub.googleapis.com). - Enable Schema Registry (optional, default:
true): Fetch topic schemas from the Pub/Sub Schema Registry. Supports Avro and Protocol Buffer schema types. Disable if your project does not use the Schema Registry. - Include Subscriptions (optional, default:
true): Include subscription metadata for each topic. When enabled, subscription names, acknowledgment deadlines, retention durations, push endpoints, dead letter policies, and BigQuery export configurations are captured.
- Include Dead Letter Topics (optional, default:
false): Include dead letter topics in metadata extraction. By default, dead letter topics are detected via subscription policies and excluded to keep the topic list focused on primary business topics. - Topic Filter Pattern (optional): Regex pattern to selectively include or exclude topics by name. Use
includesfor an allow-list andexcludesfor a deny-list. Example: exclude internal topics withexcludes: ["^_.*"].
Test Connection
Once the credentials have been added, click on Test Connection and Save the changes.
Step 5: Configure Ingestion Options
In the What to Ingest step, use filter patterns to control which topics OpenMetadata ingests from your Pub/Sub service. Filter patterns use regular expressions applied to topic names.How Filter Patterns Work
- Include: Add one or more comma-separated regular expressions. OpenMetadata ingests only topics whose names match at least one expression. Leave blank to include all topics.
- Exclude: Add one or more comma-separated regular expressions. OpenMetadata skips any topic whose name matches an expression. Leave blank to exclude nothing.
- contains: matches any name containing the value. For example,
ordersmatchesmy_orders_topicandorders_2024. - starts with: matches names beginning with the value. For example,
prod_matchesprod_eventsandprod_orders. - ends with: matches names ending with the value. For example,
_rawmatchesevents_rawandlogs_raw. - is exactly: matches the exact name only. For example,
analyticsmatches onlyanalytics. - matches regex: matches names using a regular expression. For example,
^prod_.*_v\d+$matchesprod_events_v1.
- Topic: Controls which topics OpenMetadata ingests from the source.
- Scan Mode: Choose between Scan all (default) or Only specific to enable include rules.
- Always exclude: Add permanent exclusion rules. Topics matching these rules are never ingested, regardless of include rules.
- Preview: Shows a real-time summary of what will be in scope based on your current rules.
- Include rules (available only in Only specific mode): Click + Add to define a rule.
Step 6: Create & Deploy
Click Create & Deploy to deploy the agent and start the first metadata ingestion run. OpenMetadata saves the service configuration and immediately begins pulling metadata from the source. To monitor ingestion progress or view the service you just added, go to Settings > Services and select your service.Configure Metadata Agent and Schedule Ingestion
The Metadata Agent extracts topics, schemas, and other structural metadata from your source and keeps your OpenMetadata catalog in sync. It powers discovery, lineage, and governance across your data assets. When you click Create & Deploy, OpenMetadata automatically deploys a Metadata Agent for this service and triggers the first ingestion run. View its status and run history from the Agents tab on the service detail page. To configure the additional Metadata Agent and schedule ingestion, follow these steps:-
Navigate to Settings > Services and select the service type.

- Click the service you have added.
-
Select the Agents tab and click Add Agent > Metadata.
For some services, the dropdown is not available and clicking Add Agent takes you directly to the agent configuration page.
-
On the Configure Ingestion page, do the following and click Next.
-
Name this Ingestion: Enter a unique recognizable name for this ingestion pipeline.

-
Agent Setup: Configure the core parameters for this agent. The following fields are available:

-
Filter Patterns: Apply include or exclude rules to scope which topics this agent ingests. These follow the same filter options described in Step 5: Configure Ingestion Options.

-
Scope & Behaviour: Control what metadata to include and how to handle deletions. Toggle each option on or off based on your needs:

-
Name this Ingestion: Enter a unique recognizable name for this ingestion pipeline.
-
On the Schedule Interval page, set when the agent runs:
- Schedule: Choose a preset interval (Hourly, Daily, Weekly, Monthly) or enter a custom cron expression.
- On-Demand: No automatic schedule; trigger the agent manually when needed.

- Click Add to deploy the agent.
Related
Usage Workflow
Learn more about how to configure the Usage Workflow to ingest Query information from the UI.
Lineage Workflow
Learn more about how to configure the Lineage from the UI.
Profiler Workflow
Learn more about how to configure the Data Profiler from the UI.
Data Quality Workflow
Learn more about how to configure the Data Quality tests from the UI.
dbt Integration
Learn more about how to ingest dbt models’ definitions and their lineage.