diff --git a/conf/cn.conf b/conf/cn.conf
index bd6d75ac8e3..9dc88671d49 100644
--- a/conf/cn.conf
+++ b/conf/cn.conf
@@ -58,3 +58,5 @@ starlet_port = 9070
 # JAVA_OPTS="-Djava.security.krb5.conf=/etc/krb5.conf"
 # For jdk 9+, this JAVA_OPTS will be used as default JVM options
 # JAVA_OPTS_FOR_JDK_9="-Djava.security.krb5.conf=/etc/krb5.conf"
+# used for query iceberg metadata and Java UDF for JDK17
+# JAVA_OPTS="--add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.nio=ALL-UNNAMED --add-opens=java.base/sun.nio.ch=ALL-UNNAMED"