From 161b5be8c233e0198d196ecfb4a01ed0b8c4c2a2 Mon Sep 17 00:00:00 2001 From: Andrei Kvapil Date: Sat, 28 Feb 2026 11:31:05 +0100 Subject: [PATCH] fix(dashboard): add FlowSchema to exempt BFF from API throttling The dashboard BFF service account (incloud-web-web) falls under the default "service-accounts" FlowSchema which maps to the "workload-low" priority level. Under load, this causes API Priority and Fairness to return 429 (Too Many Requests) responses to the BFF, resulting in 500 errors for dashboard users. Add a FlowSchema that maps the BFF service account to the "exempt" priority level to prevent APF throttling of dashboard API requests. Co-Authored-By: Claude Signed-off-by: Andrei Kvapil --- .../dashboard/templates/flowschema.yaml | 20 +++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 packages/system/dashboard/templates/flowschema.yaml diff --git a/packages/system/dashboard/templates/flowschema.yaml b/packages/system/dashboard/templates/flowschema.yaml new file mode 100644 index 000000000..9304fb44b --- /dev/null +++ b/packages/system/dashboard/templates/flowschema.yaml @@ -0,0 +1,20 @@ +apiVersion: flowcontrol.apiserver.k8s.io/v1 +kind: FlowSchema +metadata: + name: cozy-dashboard-exempt +spec: + matchingPrecedence: 2 + priorityLevelConfiguration: + name: exempt + rules: + - subjects: + - kind: ServiceAccount + serviceAccount: + name: incloud-web-web + namespace: {{ .Release.Namespace }} + resourceRules: + - verbs: ["*"] + apiGroups: ["*"] + resources: ["*"] + namespaces: ["*"] + clusterScope: true