1.2. Resource recommendations for deploying on OpenShift

Understanding how to size the infrastructure resources before deploying Red Hat Trusted Profile Analyzer (RHTPA) on Red Hat OpenShift is important for running an optimal service under load. The key infrastructure pieces to consider are persistent storage for the PostgreSQL database, which stores the supply chain metadata, and object storage for storing Software Bill of Material (SBOM) and Vulnerability Exploitability eXchange (VEX) documents. The size of your object store depends on how many SBOM and VEX documents you plan to initially upload to RHTPA. Also consider your projected storage growth as you add or update your documents, and then include a buffer for unexpected growth into your storage estimate.

For example, if you upload 10,000 SBOM documents, with an average document size of 500 KB, your initial object storage size is 5 GB. Over the next year, you create new SBOM documents, or update your existing SBOM documents 100 times a day, then you can estimate your object storage growth. In this example, you can plan on a growth in storage of 18.25 GB over the next year. Adding in some buffer, say 20%, your estimated total object storage allocation would be roughly 28 GB.

Here are the baseline CPU, memory, and storage resources you can start with: