As a Kessel service owner, I need to be able to upgrade the RDS database for inventory, but the addition of Debezium to our service adds some new complexities. As part of the PostgreSQL upgrade process, replication slots are removed, and the original slots are not restored after the upgrade completes. As a result, when the connector restarts and requests the last known offset from the replication slot, PostgreSQL cannot return the information. This could lead to data loss if there are any events that were not processed before the replication slot was dropped.

To avoid this issue, Inventory needs to add a read-only toggle that disables and Report/Delete endpoints and only allows Check based operations. By placing Inventory into read-only mode, we can ensure all events are captured and processed from the existing slot, so that when the upgrade removes the slot, we know there are no lost events

Done Criteria

• Inventory API can be started in read-only mode
• Read-only mode must still allow "GET" operations but deny any ReportResource/DeleteResource calls
• Read-only mode must still allow the internal consumer process to replicate relations to Relations API

Useful Links

• Debezium - Upgrading Postgresql
• RBAC Postgresql Upgrade Guide in Kessel Docs