add eopa-pull step

Signed-off-by: Stephan Renatus <[email protected]>

Author: srenatus

.styra.yaml

@@ -0,0 +1,3 @@
+data:
+- .styra/include
+

.styra/.gitkeep

@@ -3,10 +3,24 @@ x-styra-env:
   &styra-env
   EOPA_LICENSE_KEY: ${EOPA_LICENSE_KEY}
   STYRA_DAS_TOKEN: ${STYRA_DAS_TOKEN}
+  EOPA_STYRA_DAS_TOKEN: ${STYRA_DAS_TOKEN}
   STYRA_DAS_TENANT: ${STYRA_DAS_TENANT}
   STYRA_DAS_SYSTEM: ${STYRA_DAS_SYSTEM:-}
 
 services:
+  eopa-pull:
+    image: ghcr.io/styrainc/enterprise-opa:latest
+    command:
+      - pull
+      - --url=https://${STYRA_DAS_TENANT}.styra.com
+    working_dir: /work
+    volumes: &styra-volumes
+      - .styra.yaml:/work/.styra.yaml
+      - .styra:/work/.styra
+    environment: *styra-env
+    profiles:
+      - ci
+
   opa-ci:
     image: ghcr.io/styrainc/enterprise-opa:latest
     ports:
@@ -15,14 +29,13 @@ services:
       - run
       - --server
       - --addr=:8181
-      - users:/data/data.json
-      - /policies/rules/rules.rego
-    volumes:
-      - ./opa/:/data
-      - ./policies/prod/:/policies
+    working_dir: /work
+    volumes: *styra-volumes
     environment: *styra-env
     profiles:
       - ci
+    depends_on:
+      - eopa-pull
 
   opa-prod:
     image: ghcr.io/styrainc/enterprise-opa:latest