"Missing host to link to" error after installing the chart

[kastl-ars]

Hi all,

I just installed OpenProject into an OpenShift cluster using ArgoCD. The deployment seems to have gone well, I could log in as admin user and was asked to change the password.

But after setting the new password I always get a 500 error ([Error 500] An error occurred on the page you were trying to access. If you continue to experience problems please contact your OpenProject administrator for assistance. ).

The web pod's logs show an error:

I, [2024-07-22T10:58:24.108878 #42]  INFO -- : [78612c8e-04c6-4764-85a8-a57b4fd3b37d] method=GET path=/health_checks/default format=*/* controller=OkComputer::OkComputerController action=show status=200 allocations=483 duration=5.14 view=0.34 db=0.00 us
er=3                                                                                                                                                                                                                                                         E, [2024-07-22T10:58:32.739461 #42] ERROR -- : [71361d54-0071-4048-b6a6-1f0e5700548a] user=4 Missing host to link to! Please provide the :host parameter, set default_url_options[:host], or set :only_path to true: Missing host to link to! Please provide 
the :host parameter, set default_url_options[:host], or set :only_path to true                                                                                                                                                                               I, [2024-07-22T10:58:32.844127 #42]  INFO -- : [71361d54-0071-4048-b6a6-1f0e5700548a] method=GET path=/ format=html controller=HomescreenController action=index status=500 allocations=62963 duration=259.84 view=0.00 db=34.74 user=4
F, [2024-07-22T10:58:32.849894 #42] FATAL -- : [71361d54-0071-4048-b6a6-1f0e5700548a]   
[71361d54-0071-4048-b6a6-1f0e5700548a] ActionView::Template::Error (undefined method `gsub' for nil):
[71361d54-0071-4048-b6a6-1f0e5700548a]     14:     </p>
[71361d54-0071-4048-b6a6-1f0e5700548a]     15:   <% end %>
[71361d54-0071-4048-b6a6-1f0e5700548a]     16: 
[71361d54-0071-4048-b6a6-1f0e5700548a]     17:   <% if setting_hostname_mismatched? %>
[71361d54-0071-4048-b6a6-1f0e5700548a]     18:     <p>
[71361d54-0071-4048-b6a6-1f0e5700548a]     19:       <strong><%= t 'warning_bar.hostname_mismatch.title' %></strong>
[71361d54-0071-4048-b6a6-1f0e5700548a]     20:       <br/>
[71361d54-0071-4048-b6a6-1f0e5700548a]   
[71361d54-0071-4048-b6a6-1f0e5700548a] app/helpers/warning_bar_helper.rb:53:in `setting_hostname_mismatched?'
[71361d54-0071-4048-b6a6-1f0e5700548a] app/views/warning_bar/_host_and_protocol_mismatch.html.erb:17
[71361d54-0071-4048-b6a6-1f0e5700548a] app/views/warning_bar/_warning_bar.html.erb:3
[71361d54-0071-4048-b6a6-1f0e5700548a] app/views/layouts/base.html.erb:52
[71361d54-0071-4048-b6a6-1f0e5700548a] app/views/layouts/no_menu.html.erb:30
[71361d54-0071-4048-b6a6-1f0e5700548a] app/helpers/errors_helper.rb:97:in `block (2 levels) in render_error'
[71361d54-0071-4048-b6a6-1f0e5700548a] app/helpers/errors_helper.rb:95:in `render_error'
[71361d54-0071-4048-b6a6-1f0e5700548a] app/helpers/errors_helper.rb:57:in `render_500'
[71361d54-0071-4048-b6a6-1f0e5700548a] app/controllers/application_controller.rb:120:in `block in <class:ApplicationController>'
E, [2024-07-22T10:58:32.861080 #42] ERROR -- : [71361d54-0071-4048-b6a6-1f0e5700548a] user=4 undefined method `gsub' for nil: undefined method `gsub' for nil
I, [2024-07-22T10:58:32.870308 #42]  INFO -- : [71361d54-0071-4048-b6a6-1f0e5700548a] method=GET path=/500 format=html controller=ErrorsController action=internal_error status=500 allocations=23291 duration=17.98 view=8.58 db=0.69 user=4

The openproject.host parameter is set.

I have not seen this error before I logged in for the first time. But again, I did nothing else than open the start page, so there was not much activity.

Any ideas?

Chart version is 5.4.0. I'll try 6.0.0 next.

Kind Regards,
Johannes

[oliverguenther]

Hi @kastl-ars , I think you are affected by #106 which was just released.

Starting with 14.3., we provide stricter host header protections documented here: https://www.openproject.org/docs/release-notes/14-3-0/#host-header-validation

This will require you to set the public host that OpenProject should generate links with etc., using OPENPROJECT_HOST__NAME="yourhost[:PORT]. The linked PR does exactly this if you don't have ingress.enabled set.

As a workaround, set this manually as environment.OPENPROJECT_HOST__NAME=...

Let me know if either upgrading or the workaround helped

[kastl-ars]

Thanks for the fast reply.

I think I was indeed bitten by this not yet being in 5.4.0:
https://github.com/opf/helm-charts/blob/openproject-6.0.0/charts/openproject/templates/secret_core.yaml

[kastl-ars]

This seems to work, the only thing that I saw was that the redirect part in the URL only had http:// in it. Probably as I have openproject.https set to false, to use the HTTPS termination at the ingress controller.

[oliverguenther]

Even if you do HTTPS termination, you should still set openproject.https=true. It will cause OpenProject to assume being behind a TLS terminated request, and output secure flags for cookies and more (such as outputting the correct links in mails, redirects etc.).

The only thing you need to take into consideration is that your ingress needs to mark the request appropriately (e.g., X-Forwarded-Proto for ingress-nginx.

I'll make sure to improve the helm chart docs for this fact, as it's a common misunderstanding of the session. OpenProject never does TLS termination on its own (although it might happen as part of the helm deployment, with tls.enabled but still outside the realm of the openproject services).

This is very valuable feedback nonetheless, please feel free to reach out to us on discussions here / https://community.openproject.org/ (for more product-specific questions) for anything else!

[kastl-ars]

OK, then I just misinterpreted the parameter. If you can clarify this, it would be very helpful indeed.

Have a nice day, Oliver! And thanks for the quick help!