GitLab Integration Problem

[jzielke84]

Environment

self-hosted (https://develop.sentry.dev/self-hosted/)

Steps to Reproduce

1. Add Gitlab Integration
2. Enter App pat credentials
3. Get Error 400

Expected Result

Add intgeration using application pat

Actual Result

Error in sentry web container:

18:55:37 [WARNING] sentry.integrations.utils.metrics: integrations.installation.failure (integration_domain='identity' integration_name='gitlab' interaction_type='token_exchange' slo_event_id='103909b0c6d44327873902e56e69b407' exception_summary="RestrictedIPAddress('(gitlab.*********.net/172.16.0.67) matches the URL blocklist')")

The following options in Gitlab are enabled:

• Allow requests to the local network from webhooks and integrations
• Allow requests to the local network from system hooks

What blocklist and where to edit it?

Product Area

Settings - Integrations

Link

No response

DSN

No response

Version

25.9.0

[linear]

ENG-5656

[getsantry]

Auto-routing to @getsentry/product-owners-settings-integrations for triage ⏲️

[marbon87]

Same error with jira integration

[Subtixx]

v8.2.0
------

- SENTRY_DISALLOWED_IPS is no longer configured by default. If you're exposing Sentry outside of your company you may wish to configure this.

So in 8.2.0 the SENTRY_DISALLOWED_IPS was empty? And now you put in a bunch of IPs:

sentry/src/sentry/conf/server.py

Lines 114 to 160 in b4ee6be

	SENTRY_DISALLOWED_IPS: tuple[str, ...] = (
	# https://en.wikipedia.org/wiki/Reserved_IP_addresses#IPv4
	"0.0.0.0/8",
	"10.0.0.0/8",
	"100.64.0.0/10",
	"127.0.0.0/8",
	"169.254.0.0/16",
	"172.16.0.0/12",
	"192.0.0.0/29",
	"192.0.2.0/24",
	"192.88.99.0/24",
	"192.168.0.0/16",
	"198.18.0.0/15",
	"198.51.100.0/24",
	"224.0.0.0/4",
	"240.0.0.0/4",
	"255.255.255.255/32",
	# https://en.wikipedia.org/wiki/IPv6#IPv4-mapped_IPv6_addresses
	# Subnets match the IPv4 subnets above
	"::ffff:0:0/104",
	"::ffff:a00:0/104",
	"::ffff:6440:0/106",
	"::ffff:7f00:0/104",
	"::ffff:a9fe:0/112",
	"::ffff:ac10:0/108",
	"::ffff:c000:0/125",
	"::ffff:c000:200/120",
	"::ffff:c058:6300/120",
	"::ffff:c0a8:0/112",
	"::ffff:c612:0/111",
	"::ffff:c633:6400/120",
	"::ffff:e000:0/100",
	"::ffff:f000:0/100",
	"::ffff:ffff:ffff/128",
	# https://en.wikipedia.org/wiki/Reserved_IP_addresses#IPv6
	"::1/128",
	"::ffff:0:0/96",
	"64:ff9b::/96",
	"64:ff9b:1::/48",
	"100::/64",
	"2001:0000::/32",
	"2001:20::/28",
	"2001:db8::/32",
	"2002::/16",
	"fc00::/7",
	"fe80::/10",
	"ff00::/8",

Oh and btw. 2 Weeks without any kind of status / update.. I know we're not paying customers, but c'mon that's not how you attract paying customers. I for myself are now looking for alternatives because 2 WEEKS where this software is not working as intended is 1 Week, 6 Days, 23 Hours and 30 Minutes too long! And just fyi its probably just a config setting that needs to be changed, which is like a 10 minute job (generous) to tell us.

EDIT: For everybody who has the same issue (I have no idea which of these fixed it):

sentry.conf.py:

CSRF_TRUSTED_ORIGINS = ["https://<IP>", "https://<DOMAIN>"]
SENTRY_DISALLOWED_IPS = []
DISALLOWED_IPS = []