External IP/CIDR blocks associated with that worker group
That host (windmill-workers-default-85c5d6db75-2fx6z, IP 10.39.162.225) is the worker pod’s internal cluster address. Alpaca needs the public egress IP that the Windmill cluster uses to reach the internet—10.39.x.x won’t be routable (it’s RFC1918). Please ask Windmill support (or check your cluster’s NAT gateway) for the external IP/CIDR blocks associated with that worker group; that’s the value Alpaca must whitelist. Once you have the public IP and get it approved, the same flow should stop returning 401s.
1 Reply
Ask Windmill support for the static outbound IP(s) used by your workspace/region so Alpaca can allowlist them. This is the fastest path on Cloud. (Windmill docs cover workers/worker groups but not public egress IPs.)