name: sts
services:
  imds-emulator:
    build: .
    restart: unless-stopped
    stop_grace_period: 30s
    volumes:
      - /etc/sts-agent:/etc/sts-agent:ro
    environment:
      GOOGLE_APPLICATION_CREDENTIALS: /etc/sts-agent/cred.json
      GOOGLE_API_CERTIFICATE_CONFIG: /etc/sts-agent/certificate_config.json
      PROJECT_ID: ${PROJECT_ID}
      PROJECT_NUMBER: ${PROJECT_NUMBER}
    healthcheck:
      test: ["CMD", "/imds-emulator", "-check"]
      interval: ${HEALTHCHECK_INTERVAL:-10s}
      timeout: ${HEALTHCHECK_TIMEOUT:-3s}
      start_period: ${HEALTHCHECK_START_PERIOD:-10s}
      start_interval: ${HEALTHCHECK_START_INTERVAL:-1s}
      retries: ${HEALTHCHECK_RETRIES:-3}

  agent:
    image: gcr.io/cloud-ingest/tsop-agent:latest
    restart: unless-stopped
    depends_on:
      imds-emulator:
        condition: service_healthy
    ulimits:
      memlock: 64000000
    volumes:
      - /mnt/ext-storage:/mnt/ext-storage:ro
    environment:
      GCE_METADATA_HOST: imds-emulator:8080
      GCE_METADATA_IP: imds-emulator:8080
    command:
      - --project-id=${PROJECT_ID}
      - --hostname=${HOSTNAME}
      - --agent-pool=${STS_AGENT_POOL}