Skip to content

Document Cloudflare Access 403 troubleshooting for GHE on-premise#320

Merged
lencioni merged 1 commit into
mainfrom
ghe-cloudflare
May 21, 2026
Merged

Document Cloudflare Access 403 troubleshooting for GHE on-premise#320
lencioni merged 1 commit into
mainfrom
ghe-cloudflare

Conversation

@lencioni
Copy link
Copy Markdown
Contributor

Summary

  • Add a troubleshooting section to the GitHub Enterprise (on-premise) docs explaining the Cloudflare Access "Forbidden" HTML response that customers can see when their GHE is fronted by a Cloudflare tunnel with an Access policy
  • Clarify that Happo authenticates with the GitHub App credentials only and cannot pass through Cloudflare Access, so the fix is on the customer's Cloudflare side (IP bypass or mTLS)

Prompted by a recent support ticket from a customer who hit this error.

Test plan

  • Build docs locally and confirm the new section renders correctly under the GitHub Enterprise page

🤖 Generated with Claude Code

Add a troubleshooting section explaining why GHE-on-premise requests can
fail with a Cloudflare Access "Forbidden" HTML response, and the two
policy-level fixes (IP bypass or mTLS), since Happo cannot authenticate
through Access itself.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
@lencioni lencioni requested a review from trotzig as a code owner May 21, 2026 16:15
@lencioni lencioni requested a review from Copilot May 21, 2026 16:16
@lencioni lencioni merged commit 0ed6ec1 into main May 21, 2026
5 checks passed
@lencioni lencioni deleted the ghe-cloudflare branch May 21, 2026 16:17
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds targeted troubleshooting guidance to the GitHub Enterprise Server (on-premise) integration docs for cases where Cloudflare Access blocks Happo’s requests, clarifying the root cause and the required customer-side remediation.

Changes:

  • Reflowed/normalized Markdown formatting in the GHE on-premise setup guide for readability.
  • Added a new troubleshooting section explaining the Cloudflare Access 403 “Forbidden” HTML response and recommended Cloudflare-side fixes (IP bypass or mTLS).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants