test(e2e): switch to remote API7 EE instance via DEMO_WEBSITE/DEMO_TOKEN secrets

- Remove Docker Compose from CI workflow, use repo secrets instead
- Require A7_ADMIN_URL and A7_TOKEN (no more localhost defaults)
- Skip gateway traffic and debug trace tests when A7_GATEWAY_URL not set
- Add requireGatewayURL/requireHTTPBin test helpers
- Increase test timeout to 15m for remote execution

Author: moonming

.github/workflows/e2e.yml

@@ -1,57 +1,26 @@
 name: E2E Tests
 on:
   pull_request:
-    branches: [main]
+    branches: [main, master]
   push:
-    branches: [main]
+    branches: [main, master]
   workflow_dispatch:
 
 jobs:
   e2e:
     runs-on: ubuntu-latest
     timeout-minutes: 30
+    # Only run if secrets are available (skip on forks).
+    if: github.repository == 'api7/a7'
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
         with:
           go-version: '1.22'
 
-      - name: Start API7 EE
-        working-directory: test/e2e
-        run: docker compose up -d --wait --wait-timeout 120
-
-      - name: Wait for API7 EE
-        run: |
-          for i in $(seq 1 60); do
-            if curl -sk https://127.0.0.1:7443/api/status; then
-              echo "API7 EE is ready"
-              break
-            fi
-            echo "Waiting for API7 EE... ($i/60)"
-            sleep 2
-          done
-
-      - name: Get admin token
-        id: token
-        run: |
-          TOKEN=$(curl -sk https://127.0.0.1:7443/api/login -d '{"username":"admin","password":"admin"}' | jq -r '.token')
-          echo "token=$TOKEN" >> "$GITHUB_OUTPUT"
-
       - name: Run E2E tests
         env:
-          A7_ADMIN_URL: https://127.0.0.1:7443
-          A7_GATEWAY_URL: http://127.0.0.1:9080
-          A7_TOKEN: ${{ steps.token.outputs.token }}
+          A7_ADMIN_URL: ${{ secrets.DEMO_WEBSITE }}
+          A7_TOKEN: ${{ secrets.DEMO_TOKEN }}
           A7_GATEWAY_GROUP: default
-          HTTPBIN_URL: http://127.0.0.1:8080
         run: make test-e2e
-
-      - name: Dump docker logs on failure
-        if: failure()
-        working-directory: test/e2e
-        run: docker compose logs
-
-      - name: Stop API7 EE
-        if: always()
-        working-directory: test/e2e
-        run: docker compose down -v

Makefile

@@ -44,4 +44,4 @@ docker-down:
 	docker compose -f test/e2e/docker-compose.yml down -v
 
 test-e2e:
-	go test ./test/e2e/... -count=1 -v -tags=e2e
+	go test ./test/e2e/... -count=1 -v -tags=e2e -timeout 15m

test/e2e/consumer_test.go

@@ -115,6 +115,8 @@ func TestConsumer_Export(t *testing.T) {
 }
 
 func TestConsumer_WithKeyAuth(t *testing.T) {
+	requireGatewayURL(t)
+	requireHTTPBin(t)
 	env := setupEnv(t)
 	username := "e2e-consumer-keyauth"
 	routeID := "e2e-route-keyauth"

test/e2e/debug_test.go

@@ -15,6 +15,8 @@ import (
 )
 
 func TestDebugTrace_JSONOutput(t *testing.T) {
+	requireGatewayURL(t)
+	requireHTTPBin(t)
 	env := setupEnv(t)
 	routeID := "e2e-debug-trace-route"
 	t.Cleanup(func() { deleteRouteViaAdmin(t, routeID) })
@@ -51,6 +53,8 @@ func TestDebugTrace_JSONOutput(t *testing.T) {
 }
 
 func TestDebugTrace_WithMethod(t *testing.T) {
+	requireGatewayURL(t)
+	requireHTTPBin(t)
 	env := setupEnv(t)
 	routeID := "e2e-debug-trace-method"
 	t.Cleanup(func() { deleteRouteViaAdmin(t, routeID) })
@@ -93,6 +97,8 @@ func TestDebugTrace_WithMethod(t *testing.T) {
 }
 
 func TestDebugTrace_WithHeaders(t *testing.T) {
+	requireGatewayURL(t)
+	requireHTTPBin(t)
 	env := setupEnv(t)
 	routeID := "e2e-debug-trace-headers"
 	t.Cleanup(func() { deleteRouteViaAdmin(t, routeID) })
@@ -124,6 +130,8 @@ func TestDebugTrace_WithHeaders(t *testing.T) {
 }
 
 func TestDebugTrace_WithHost(t *testing.T) {
+	requireGatewayURL(t)
+	requireHTTPBin(t)
 	env := setupEnv(t)
 	routeID := "e2e-debug-trace-host"
 	t.Cleanup(func() { deleteRouteViaAdmin(t, routeID) })
@@ -158,6 +166,8 @@ func TestDebugTrace_WithHost(t *testing.T) {
 }
 
 func TestDebugTrace_WithPath(t *testing.T) {
+	requireGatewayURL(t)
+	requireHTTPBin(t)
 	env := setupEnv(t)
 	routeID := "e2e-debug-trace-path"
 	t.Cleanup(func() { deleteRouteViaAdmin(t, routeID) })
@@ -199,6 +209,7 @@ func TestDebugTrace_WithPath(t *testing.T) {
 }
 
 func TestDebugTrace_NonexistentRoute(t *testing.T) {
+	requireGatewayURL(t)
 	env := setupEnv(t)
 
 	_, _, err := runA7WithEnv(env, "debug", "trace", "nonexistent-route-12345",
@@ -210,6 +221,8 @@ func TestDebugTrace_NonexistentRoute(t *testing.T) {
 }
 
 func TestDebugTrace_YAMLOutput(t *testing.T) {
+	requireGatewayURL(t)
+	requireHTTPBin(t)
 	env := setupEnv(t)
 	routeID := "e2e-debug-trace-yaml"
 	t.Cleanup(func() { deleteRouteViaAdmin(t, routeID) })

test/e2e/route_test.go

@@ -237,6 +237,8 @@ func TestRoute_ListWithLabel(t *testing.T) {
 }
 
 func TestRoute_TrafficForwarding(t *testing.T) {
+	requireGatewayURL(t)
+	requireHTTPBin(t)
 	env := setupEnv(t)
 	routeID := "e2e-route-traffic"
 	t.Cleanup(func() { deleteRouteViaAdmin(t, routeID) })

test/e2e/setup_test.go

@@ -2,11 +2,13 @@
 
 // Package e2e provides end-to-end tests for the a7 CLI.
 // These tests run against a real API7 Enterprise Edition instance and require
-// the following environment to be available:
+// the following environment variables:
 //
-//   - API7 EE Dashboard API at A7_ADMIN_URL (default: https://127.0.0.1:7443)
-//   - API7 EE Gateway at A7_GATEWAY_URL (default: http://127.0.0.1:9080)
-//   - httpbin at HTTPBIN_URL (default: http://127.0.0.1:8080)
+//   - A7_ADMIN_URL: API7 EE Dashboard/control-plane URL (required)
+//   - A7_TOKEN: API7 EE access token (required)
+//   - A7_GATEWAY_GROUP: Gateway group name (default: "default")
+//   - A7_GATEWAY_URL: Gateway data-plane URL (optional — gateway traffic tests skipped if empty)
+//   - HTTPBIN_URL: httpbin URL (optional — traffic forwarding tests skipped if empty)
 //
 // Run with: go test -v -tags e2e -count=1 -timeout 10m ./test/e2e/...
 package e2e
@@ -42,15 +44,20 @@ var (
 )
 
 func TestMain(m *testing.M) {
-	adminURL = envOrDefault("A7_ADMIN_URL", "https://127.0.0.1:7443")
-	gatewayURL = envOrDefault("A7_GATEWAY_URL", "http://127.0.0.1:9080")
-	httpbinURL = envOrDefault("HTTPBIN_URL", "http://127.0.0.1:8080")
+	adminURL = envOrDefault("A7_ADMIN_URL", "")
+	gatewayURL = envOrDefault("A7_GATEWAY_URL", "")
+	httpbinURL = envOrDefault("HTTPBIN_URL", "")
 	adminToken = envOrDefault("A7_TOKEN", "")
 
 	if g := os.Getenv("A7_GATEWAY_GROUP"); g != "" {
 		gatewayGroup = g
 	}
 
+	if adminURL == "" {
+		fmt.Fprintln(os.Stderr, "A7_ADMIN_URL environment variable is required for E2E tests")
+		os.Exit(1)
+	}
+
 	if adminToken == "" {
 		fmt.Fprintln(os.Stderr, "A7_TOKEN environment variable is required for E2E tests")
 		os.Exit(1)
@@ -230,3 +237,17 @@ func resolveModuleRoot() (string, error) {
 	}
 	return filepath.Dir(gomod), nil
 }
+
+func requireGatewayURL(t *testing.T) {
+	t.Helper()
+	if gatewayURL == "" {
+		t.Skip("A7_GATEWAY_URL not set — skipping gateway traffic test")
+	}
+}
+
+func requireHTTPBin(t *testing.T) {
+	t.Helper()
+	if httpbinURL == "" {
+		t.Skip("HTTPBIN_URL not set — skipping httpbin-dependent test")
+	}
+}