Made security review, applied recommendations.

sts-agent/compose.yaml

@@ -2,6 +2,8 @@ name: sts
 services:
   imds-emulator:
     build: .
+    restart: unless-stopped
+    stop_grace_period: 30s
     volumes:
       - /etc/sts-agent:/etc/sts-agent:ro
     environment:
@@ -9,11 +11,20 @@ services:
       GOOGLE_API_CERTIFICATE_CONFIG: /etc/sts-agent/certificate_config.json
       PROJECT_ID: ${PROJECT_ID}
       PROJECT_NUMBER: ${PROJECT_NUMBER}
+    healthcheck:
+      test: ["CMD", "/imds-emulator", "-check"]
+      interval: 10s
+      timeout: 3s
+      start_period: 10s
+      start_interval: 1s
+      retries: 3
 
   agent:
     image: gcr.io/cloud-ingest/tsop-agent:latest
+    restart: unless-stopped
     depends_on:
-      - imds-emulator
+      imds-emulator:
+        condition: service_healthy
     ulimits:
       memlock: 64000000
     volumes: