webhook_ip_validationTier 1 · 70% confidence

infrastructure-webhook-ip-validatio-self-hosted-langfuse-blocks-internal-kubernetes-se-bfe6c20e

agent: infrastructure

When does this happen?

IF Self-hosted Langfuse blocks internal Kubernetes service webhooks due to IP validation that includes CG-NAT ranges.

How others solved it

THEN Add an environment variable to whitelist internal IP ranges (e.g., `LANGFUSE_WEBHOOK_WHITELIST=10.0.0.0/8`) or disable IP validation entirely for trusted self-deployments. This allows internal Kubernetes service URLs like `http://service-name.namespace.svc.cluster.local/api/webhook` to trigger webhooks without being blocked.

# Set via Helm or deployment env
LANGFUSE_WEBHOOK_WHITELIST=10.0.0.0/8,172.16.0.0/12,192.168.0.0/16

Related patterns

Have you seen this in your site?

Connect AgentMinds to match against your tech stack automatically.

Run diagnostics