update looker studio data api connector#101
Conversation
prajwal-pai77
commented
Jul 8, 2026
- Updated data api looker studio connector
- Yet to add screenshots, will add once looker studio merged to production
There was a problem hiding this comment.
Code Review
This pull request updates the Looker Studio Data API connector tutorial readme, rewriting the introduction, updating prerequisites, and providing a step-by-step guide to building a first report. The review feedback highlights two important security improvements in the setup instructions: restricting database credentials to Read-Only access to follow the principle of least privilege, and recommending the allowlisting of Google's reserved IP ranges instead of exposing the cluster to all IP addresses (0.0.0.0/0) in production environments.
Important
The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.
| - A database user with permissions to read the target collections and run queries. | ||
| - Network access from Looker Studio to your cluster host. | ||
| - Create the [database credentials](https://docs.couchbase.com/cloud/clusters/manage-database-users.html) to access the travel-sample bucket (Read and Write) used in the connector. The user also needs permission to query the system catalogs (`system:buckets`, `system:all_scopes`, `system:keyspaces`) and run `INFER` — these are used for collection discovery and schema inference. | ||
| - [Allow access](https://docs.couchbase.com/cloud/clusters/allow-ip-address.html) to the cluster by adding `0.0.0.0/0` (allow all) under Settings → Networking → Allowed IP Addresses. Looker Studio runs on Google's servers with dynamic IP addresses, so a fixed range cannot be allowlisted. |
There was a problem hiding this comment.
Allowing all IP addresses (0.0.0.0/0) is a significant security risk as it exposes your database cluster to the entire internet. While Looker Studio uses dynamic IP addresses, Google publishes a specific set of reserved IP ranges for Looker Studio's global infrastructure (such as 142.251.74.0/23 and 142.251.56.0/24). It is highly recommended to advise users to allowlist these specific IP ranges for production environments, while keeping 0.0.0.0/0 only as a temporary fallback for troubleshooting or quick testing.
| - [Allow access](https://docs.couchbase.com/cloud/clusters/allow-ip-address.html) to the cluster by adding `0.0.0.0/0` (allow all) under Settings → Networking → Allowed IP Addresses. Looker Studio runs on Google's servers with dynamic IP addresses, so a fixed range cannot be allowlisted. | |
| - [Allow access](https://docs.couchbase.com/cloud/clusters/allow-ip-address.html) to the cluster. For production environments, it is highly recommended to allowlist Google's reserved IP ranges for Looker Studio (such as `142.251.74.0/23` or `142.251.56.0/24` for Pro subscriptions) under Settings → Networking → Allowed IP Addresses. For quick testing, you can temporarily allow access from all IPs (`0.0.0.0/0`). |