Comment 8 for bug 1793347

Morgan, that's not true, we've switched to managing our own requirements:

http://lists.openstack.org/pipermail/openstack-dev/2018-March/128352.html

Looking at stable/rocky we still refer to 3.36.0 so we do need to fix that ourselves http://git.openstack.org/cgit/openstack/keystone/tree/requirements.txt?h=stable/rocky#n31