shankar0123 183c56f6c5 fix(agent): SCALE-006 — startup + recurring jitter on heartbeat and poll loops ...

Sprint 2 unified-master-audit closure. Pre-fix the agent started
its heartbeat + poll loops on bare time.NewTicker cadence with no
startup jitter:

    heartbeatTicker := time.NewTicker(a.heartbeatInterval)
    pollTicker := time.NewTicker(a.pollInterval)
    a.sendHeartbeat(ctx)   // fires immediately, in lockstep
    a.pollForWork(ctx)     // ditto

A mass restart (rolling K8s deploy, control-plane reboot, scheduled
fleet bounce) produced a thundering herd — 5K agents booting in a
10-second window all hit /heartbeat in lockstep, then /poll, every
interval forever afterward.

Fix:
  - Per-agent startup jitter ∈ [0, interval) drawn fresh from
    math/rand/v2 (no cryptographic strength needed) before the first
    heartbeat and first poll. Heartbeat and poll jitters are drawn
    independently so a single seed doesn't create a secondary
    correlation pattern.
  - time.NewTicker swapped for the existing in-tree
    internal/scheduler.JitteredTicker primitive (±10% per-tick
    envelope, fresh draw per tick to prevent drift compounding).
    Same pattern as every server-side scheduler.go loop.
  - Startup-jitter Sleeps are ctx-aware so a sigint-during-startup
    exits cleanly rather than hanging.

The select cases that read heartbeatTicker.C / pollTicker.C are
unchanged — JitteredTicker.C is a chan time.Time, identical shape
to time.Ticker.C.

Discovery ticker is left as bare time.NewTicker (audit didn't cite
it; changing it would expand scope).

Closes SCALE-006.

2026-05-16 04:01:59 +00:00

..

agent_test.go

Revert "chore: drop 'Infisical' label from internal references"

2026-05-04 01:18:15 +00:00

deploy_mutex_test.go

feat(agent): per-target deploy mutex serializes concurrent deploys to the same target

2026-04-30 14:32:40 +00:00

deploy.go

fix(agent,service): SEC-002 — validate certificate_id shape + contain key path

2026-05-16 03:31:59 +00:00

discovery.go

refactor(cmd/agent): split main.go into poll + deploy + discovery sibling files (Phase 9, 12 of N — LAST hotspot)

2026-05-14 10:36:08 +00:00

dispatch_test.go

Bundle S CI follow-up #2: G-3 env-var collision + gopter discard-storm

2026-04-27 19:24:27 +00:00

keymem_test.go

fix(agent,service): SEC-002 — validate certificate_id shape + contain key path

2026-05-16 03:31:59 +00:00

keymem.go

fix(agent,service): SEC-002 — validate certificate_id shape + contain key path

2026-05-16 03:31:59 +00:00

main.go

fix(agent): SCALE-006 — startup + recurring jitter on heartbeat and poll loops

2026-05-16 04:01:59 +00:00

poll.go

fix(agent,service): SEC-002 — validate certificate_id shape + contain key path

2026-05-16 03:31:59 +00:00

verify_test.go

chore(fmt): repo-wide gofmt -w sweep — close drift surfaced by ci-pipeline-cleanup Phase 4

2026-04-30 22:33:57 +00:00

verify.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00