Failed to build Docker Image for athenz-cli-util.

Hi, I tried the latest master branch to build Athenz Docker Images. But it didn’t work.

$ git rev-parse --short HEAD
4e7863d8

$ cd `git rev-parse --show-toplevel`/docker

$ make build | tee ./athenz-docker-build.log

Since athenz-cert-refresher not found, mvn install failed for athenz-zts-java-client-core.

[INFO] ------------< com.yahoo.athenz:athenz-zts-java-client-core >------------
[INFO] Building athenz-zts-java-client-core 1.8.45-SNAPSHOT              [6/23]
[INFO] --------------------------------[ jar ]---------------------------------
[WARNING] The POM for com.yahoo.athenz:athenz-cert-refresher:jar:1.8.45-SNAPSHOT is missing, no dependency information available
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for rdl-gen-athenz-go-client 1.8.45-SNAPSHOT:
[INFO]
[INFO] rdl-gen-athenz-go-client ........................... SUCCESS [ 31.582 s]
[INFO] athenz-zms-core .................................... SUCCESS [ 16.657 s]
[INFO] athenz-zts-core .................................... SUCCESS [  6.829 s]
[INFO] athenz-auth-core ................................... SUCCESS [  8.331 s]
[INFO] athenz-client-common ............................... SUCCESS [  0.518 s]
[INFO] athenz-zts-java-client-core ........................ FAILURE [  0.114 s]
[INFO] athenz-zts-java-client ............................. SKIPPED
[INFO] zms-go-client ...................................... SKIPPED
[INFO] zts-go-client ...................................... SKIPPED
[INFO] zmscli ............................................. SKIPPED
[INFO] zmssvctoken ........................................ SKIPPED
[INFO] ztsclientutil ...................................... SKIPPED
[INFO] athenzconf ......................................... SKIPPED
[INFO] zms-cli ............................................ SKIPPED
[INFO] athenz-conf ........................................ SKIPPED
[INFO] zms-svctoken ....................................... SKIPPED
[INFO] athenz-zpe-policy-updater .......................... SKIPPED
[INFO] zpe-updater ........................................ SKIPPED
[INFO] zts-roletoken ...................................... SKIPPED
[INFO] zts-accesstoken .................................... SKIPPED
[INFO] zts-rolecert ....................................... SKIPPED
[INFO] zts-svccert ........................................ SKIPPED
[INFO] athenz-utils ....................................... SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  01:04 min
[INFO] Finished at: 2020-01-29T06:22:44Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal on project athenz-zts-java-client-core: Could not resolve dependencies for project com.yahoo.athenz:athenz-zts-java-client-core:jar:1.8.45-SNAPSHOT: Could not find artifact com.yahoo.athenz:athenz-cert-refresher:jar:1.8.45-SNAPSHOT -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/DependencyResolutionException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :athenz-zts-java-client-core
The command '/bin/sh -c GO111MODULE=on   CGO_ENABLED=0   CGO_CXXFLAGS="-g -Ofast -march=native"   CGO_FFLAGS="-g -Ofast -march=native"   CGO_LDFLAGS="-g -Ofast -march=native"   GOOS=$(go env GOOS)   GOARCH=$(go env GOARCH)   mvn install -Dmaven.test.skip=true   -pl core/zms   -pl core/zts   -pl libs/java/auth_core   -pl libs/java/client_common   -pl clients/java/zts/core   -pl clients/java/zts/shade   -pl rdl/rdl-gen-athenz-go-client   -pl clients/go/zms   -pl clients/go/zts   -pl libs/go/zmscli   -pl libs/go/zmssvctoken   -pl libs/go/athenzutils   -pl libs/go/athenzconf   -pl utils/zms-cli   -pl utils/athenz-conf   -pl utils/zms-svctoken   -pl utils/zpe_policy_updater   -pl utils/zpe-updater   -pl utils/zts-roletoken   -pl utils/zts-accesstoken   -pl utils/zts-rolecert   -pl utils/zts-svccert   -pl assembly/utils' returned a non-zero code: 1
make: *** [build] Error 1

In my environment, I could resolve the above error with below fixes. ( I can send a PR)

diff --git a/docker/util/Dockerfile b/docker/util/Dockerfile
index 3ef90ef6..031f86bd 100644
--- a/docker/util/Dockerfile
+++ b/docker/util/Dockerfile
@@ -23,6 +23,7 @@ RUN GO111MODULE=on \
   -pl core/zts \
   -pl libs/java/auth_core \
   -pl libs/java/client_common \
+  -pl libs/java/cert_refresher \
   -pl clients/java/zts/core \
   -pl clients/java/zts/shade \
   # go projects

[WindzCUHK]

@hiyosi Thank you for point out. I will try to include the Mac dependency somewhere in the document later on.

Sorry that the document is still WIP. The certificate is not correct because LibreSSL in Mac does not support ENV. Please refer to: https://github.com/WindzCUHK/athenz/blob/zms-on-external-IdP/docker/docs/try-out-Athenz-with-self-signed-CA.md#note-for-mac-users

For bootstrap details, please refer to: https://github.com/WindzCUHK/athenz/blob/zms-on-external-IdP/docker/docs/Athenz-bootstrap.md

[WindzCUHK]

@hiyosi Oh, thank you for trying out.

Sorry that I am still working the new Authority. Please remove the com.yahoo.athenz.auth.oauth.CertificateJwtAccessTokenAuthority, from the config files, it is not required if you just want to bootstrap Athenz. https://github.com/WindzCUHK/athenz/blob/4625cdbb518f2416e0e220506a1150b904e6d1c2/docker/zms/conf/zms.properties#L12

athenz.zms.authority_classes=com.yahoo.athenz.auth.impl.CertificateAuthority

https://github.com/WindzCUHK/athenz/blob/4625cdbb518f2416e0e220506a1150b904e6d1c2/docker/zts/conf/zts.properties#L12

athenz.zts.authority_classes=com.yahoo.athenz.auth.impl.CertificateAuthority