Skip to content

docs(features): say GHES is untested against a real appliance - #1182

Merged
karlkfi merged 1 commit into
mainfrom
claude/ghes-caveat-features
Aug 3, 2026
Merged

karlkfi merged 1 commit into
mainfrom
claude/ghes-caveat-features

Conversation

@karlkfi

@karlkfi karlkfi commented Aug 3, 2026

Copy link
Copy Markdown
Collaborator

What

Adds a one-clause caveat to both GHES entries in docs/features.md.

Why

Both entries read as finished support:

GitHub Enterprise Server gateways — a gateway whose gitHubURL names a GHES appliance addresses that appliance on every GitHub surface…

GHES behind a private CA — spec.githubCABundleRef names a ConfigMap whose CA bundle is added to the trust of both the gateway's AGC and its worker pods…

The end-to-end claim has never been observed. From q536-ghes-private-ca-trust.md, its own "What this plan will not verify" section:

No GHES appliance is involved. The end-to-end claim — that a real appliance behind a real internal CA completes the handshake once the bundle is supplied — stays unobserved, exactly as Q506's own fix did.

The v1.3.0 dogfood validation gate runs against github.com, so it says nothing about GHES either. What is covered: the GHES acquire flow has e2e coverage against a fake that models it, and the API-base and CA-bundle plumbing have unit and integration tests. What is not: a real host behind a real private CA completing a handshake.

features.md is what a prospective adopter reads. Advertising unvalidated support there is the overclaim worth fixing before it is frozen into the v1.3.0 versioned docs.

Why one clause and not more

check-roadmap caps a features.md entry at 45 words. The fuller wording pushed both entries to 52 and 56, and the gate refused it with "Move the detail into the linked doc." That is the gate working as intended — the index stays scannable, the detail lives in the linked troubleshooting page and in the v1.3.0 release notes.

GHES is named inside the bolded clause rather than "a real appliance", so the warning still reads correctly when skimmed or quoted out of context.

Timing

Landing before the v1.3.0 tag deliberately. Released versions of the docs site are frozen builds, so a caveat added afterwards never reaches 1.3.0 — the site would advertise GHES uncaveated at that version permanently, while the release notes for the same version carry the warning.

Testing

make roadmap-check green (was failing on the word cap before the trim). make doc-links green, 5259 links/anchors checked. Docs only, nothing shipped changes.

Both GHES entries read as finished support. The end-to-end claim has never been
observed: q536-ghes-private-ca-trust.md's own "What this plan will not verify"
says no appliance is involved, and Q506's fix was the same. The v1.3.0 dogfood
validation runs against github.com, so it says nothing about GHES either.

Kept to one clause per entry because check-roadmap caps a features.md line at 45
words and the fuller version pushed both past it — which is the gate working: the
detail belongs in the linked troubleshooting page, not the index.

GHES is named in the clause itself rather than "a real appliance", so the warning
survives being read out of context on a page that gets scanned.
@karlkfi
karlkfi merged commit c13d5bb into main Aug 3, 2026
46 checks passed
@karlkfi
karlkfi deleted the claude/ghes-caveat-features branch August 3, 2026 09:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant