Add `--add-opens java.base/sun.net.www.protocol.http=ALL-UNNAMED` to `javaOpts`

[sschuberth]

This is required to silence warnings due to eclipse-apoapsis/ort-server#3975.

[mnonnenmacher]

This is already set inside some of the Docker images, is that not sufficient?

workers/scanner/build.gradle.kts:        jvmFlags = mutableListOf("--add-opens=java.base/sun.net.www.protocol.http=ALL-UNNAMED").apply {
workers/reporter/build.gradle.kts:        jvmFlags = mutableListOf("--add-opens=java.base/sun.net.www.protocol.http=ALL-UNNAMED").apply {
workers/analyzer/build.gradle.kts:        jvmFlags = mutableListOf("--add-opens=java.base/sun.net.www.protocol.http=ALL-UNNAMED").apply {
workers/evaluator/build.gradle.kts:        jvmFlags = mutableListOf("--add-opens=java.base/sun.net.www.protocol.http=ALL-UNNAMED").apply {

[sschuberth]

At least I'm still seeing these errors in our deployment as part of config.log:

time=2025-12-04T11:23:51.595 thread=main traceId=dc55e634-52de-435c-a08d-01838e4351ef ortRunId=1157 component=config-worker level=WARN  logger=o.e.a.o.c.git.GitConfigFileProvider message="Failed to clear JGit HTTP authentication cache. This may lead to Git authentication issues. Consider setting '--add-opens java.base/sun.net.www.protocol.http=ALL-UNNAMED' javaOpts."
java.lang.IllegalAccessException: class org.eclipse.apoapsis.ortserver.config.git.GitConfigFileProvider cannot access class sun.net.www.protocol.http.AuthCacheImpl (in module java.base) because module java.base does not export sun.net.www.protocol.http to unnamed module @64c87930
	at java.base/jdk.internal.reflect.Reflection.newIllegalAccessException(Reflection.java:394)
	at java.base/java.lang.reflect.AccessibleObject.checkAccess(AccessibleObject.java:714)
	at java.base/java.lang.reflect.Method.invoke(Method.java:571)
	at org.eclipse.apoapsis.ortserver.config.git.GitConfigFileProvider.clearHttpAuthCache-d1pmJ48(GitConfigFileProvider.kt:161)
	at org.eclipse.apoapsis.ortserver.config.git.GitConfigFileProvider.updateWorkingTree(GitConfigFileProvider.kt:140)
	at org.eclipse.apoapsis.ortserver.config.git.GitConfigFileProvider.resolveContext-O2E7t-k(GitConfigFileProvider.kt:74)

Also @MarcelBochtler told me privately that "this has to go to the JAVA_OPTS environment variable set in the pods". Something like:

javaOpts:
  ...
  "--add-opens=java.base/sun.net.www.protocol.http=ALL-UNNAMED": ""

[mnonnenmacher]

this has to go to the JAVA_OPTS environment variable set in the pods

I think only if you override JAVA_OPTS for other reasons like we do in our setup.

At least I'm still seeing these errors in our deployment

So do you maybe set JAVA_OPTS somewhere in your deployment code?

[sschuberth]

So do you maybe set JAVA_OPTS somewhere in your deployment code?

Not that I'm aware of. @lamppu?

[lamppu]

So do you maybe set JAVA_OPTS somewhere in your deployment code?

Not that I'm aware of. @lamppu?

No we don't.