fix(gms): silence Hazelcast Java 9+ warnings and duplicate NodeExtens… (#16897)

Author: david-leifker

docker/datahub-gms/start.sh

@@ -148,13 +148,16 @@ else
   JAR_EXTRACTION_OPTS="-jar /datahub/datahub-gms/bin/war.war"
 fi
 
+# Hazelcast 5.x on Java 9+ needs JPMS access for JDK internals (performance; avoids startup warning).
+HAZELCAST_JVM_OPTS="--add-modules java.se --add-exports java.base/jdk.internal.ref=ALL-UNNAMED --add-opens java.base/java.lang=ALL-UNNAMED --add-opens java.base/sun.nio.ch=ALL-UNNAMED --add-opens java.management/sun.management=ALL-UNNAMED --add-opens jdk.management/com.sun.management.internal=ALL-UNNAMED"
+
 COMMON="
     $WAIT_FOR_EBEAN \
     $WAIT_FOR_CASSANDRA \
     $WAIT_FOR_KAFKA \
     $WAIT_FOR_NEO4J \
     -timeout 240s \
-    java $JAVA_OPTS $JMX_OPTS \
+    java $HAZELCAST_JVM_OPTS $JAVA_OPTS $JMX_OPTS \
     $SPRING_PROFILE_OPTS \
     $OTEL_AGENT \
     $PROMETHEUS_AGENT \

docker/datahub-mae-consumer/start.sh

@@ -144,5 +144,10 @@ else
   JAR_EXTRACTION_OPTS="-jar /datahub/datahub-mae-consumer/bin/mae-consumer-job.jar"
 fi
 
+# Hazelcast 5.x on Java 9+ needs JPMS access for JDK internals (performance; avoids startup warning).
+# Passed on the java command line (same as GMS/MCE), not JAVA_TOOL_OPTIONS — layertools extract and
+# some environments parse module flags incorrectly when supplied only via JAVA_TOOL_OPTIONS.
+HAZELCAST_JVM_OPTS="--add-modules java.se --add-exports java.base/jdk.internal.ref=ALL-UNNAMED --add-opens java.base/java.lang=ALL-UNNAMED --add-opens java.base/sun.nio.ch=ALL-UNNAMED --add-opens java.management/sun.management=ALL-UNNAMED --add-opens jdk.management/com.sun.management.internal=ALL-UNNAMED"
+
 export JAVA_TOOL_OPTIONS
-exec dockerize "${dockerize_args[@]}" java $JAR_EXTRACTION_OPTS
+exec dockerize "${dockerize_args[@]}" java $HAZELCAST_JVM_OPTS $JAR_EXTRACTION_OPTS

docker/datahub-mce-consumer/start.sh

@@ -122,8 +122,11 @@ else
   JAR_EXTRACTION_OPTS="-jar /datahub/datahub-mce-consumer/bin/mce-consumer-job.jar"
 fi
 
+# Hazelcast 5.x on Java 9+ needs JPMS access for JDK internals (performance; avoids startup warning).
+HAZELCAST_JVM_OPTS="--add-modules java.se --add-exports java.base/jdk.internal.ref=ALL-UNNAMED --add-opens java.base/java.lang=ALL-UNNAMED --add-opens java.base/sun.nio.ch=ALL-UNNAMED --add-opens java.management/sun.management=ALL-UNNAMED --add-opens jdk.management/com.sun.management.internal=ALL-UNNAMED"
+
 exec dockerize \
   $WAIT_FOR_KAFKA \
   $WAIT_FOR_SCHEMA_REGISTRY \
   -timeout 240s \
-  java $JAVA_OPTS $JMX_OPTS $OTEL_AGENT $PROMETHEUS_AGENT $JAR_EXTRACTION_OPTS
+  java $HAZELCAST_JVM_OPTS $JAVA_OPTS $JMX_OPTS $OTEL_AGENT $PROMETHEUS_AGENT $JAR_EXTRACTION_OPTS

metadata-auth/auth-api/build.gradle

@@ -18,6 +18,10 @@ shadowJar {
   zip64 true
   archiveClassifier = ""
   exclude "META-INF/*.RSA", "META-INF/*.SF","META-INF/*.DSA"
+  // metadata-utils pulls Hazelcast; GMS WAR already ships hazelcast-*.jar — bundling duplicates SPI (NodeExtension).
+  dependencies {
+    exclude(dependency('com.hazelcast:hazelcast:.*'))
+  }
 }
 
 dependencies() {

metadata-service/war/build.gradle

@@ -91,6 +91,14 @@ bootJar {
 bootRun {
   environment "SCHEMA_REGISTRY_TYPE", "INTERNAL"
   environment "KAFKA_SCHEMAREGISTRY_URL", "http://localhost:8080/schema-registry/api"
+  jvmArgs(
+      '--add-modules', 'java.se',
+      '--add-exports', 'java.base/jdk.internal.ref=ALL-UNNAMED',
+      '--add-opens', 'java.base/java.lang=ALL-UNNAMED',
+      '--add-opens', 'java.base/sun.nio.ch=ALL-UNNAMED',
+      '--add-opens', 'java.management/sun.management=ALL-UNNAMED',
+      '--add-opens', 'jdk.management/com.sun.management.internal=ALL-UNNAMED',
+  )
 }
 
 docker {