External IP/CIDR blocks associated with that worker group
That host (windmill-workers-default-85c5d6db75-2fx6z, IP 10.39.162.225) is the worker pod’s internal cluster address. Alpaca needs the public egress IP that the Windmill cluster uses to reach the internet—10.39.x.x won’t be routable (it’s RFC1918). Please ask Windmill support (or check your cluster’s NAT gateway) for the external IP/CIDR blocks associated with that worker group; that’s the value Alpaca must whitelist. Once you have the public IP and get it approved, the same flow should stop returning 401s.
