Skip to content

Added new Ultimate DB requirement for license scanning feature

Sara Meadzinger requested to merge master-patch-aa2c into master

What does this MR do and why?

This MR adds a PostgreSQL installation requirement of 30GB specifically for ultimate customers so that they can utilize the new license scanning feature.

License finder has been replaced with a new service that queries the DB to see if license data is available for each dependency included in a CycloneDX SBOM. This requires an external license database to be automatically imported into the Gitlab database on a regular basis, which necessitates greater DB capacity. The new data requirements for license compliance are:

  • Tables only: ~12GB
  • Indexes only: ~14GB
  • Total : ~26 GB

This change only impacts self-managed ultimate customers, so the original 5-10GB requirement can remain unchanged for all other customers. The new requirement for ultimate customers needs to be added before 16.0 in order for us to enable scanning for CycloneDX files by default. If we are unable to add the requirement before then, the FF will be disabled by default, which is a step backward in terms of the functionality ultimate customers are expecting.

Edited by Sara Meadzinger

Merge request reports