Constraints aren't applied to pysaml2 installing os_keystone

[Lance Bragstad]

I'm using the os_keystone role at commit b141222a4797ddfb920b156992b81cc3d53097e7 and I get the following errors when installing keystone.

Ansible output: http://cdn.pasteraw.com/ehy3v4qjv2jecbznyfd4y4m06t5wc0r
Keystone Apache logs: http://cdn.pasteraw.com/37pg9l2acsfoark6u98it0r86nxcq4l

The issue is the kesytoneauth attempts to connect to keystone buts receives a 500. The keystone apache logs show that the PySAML2 package has a version difference from what is required in the project constraints [0]. Keystone caps PySAML2 at 4.0.3 but for some reason 4.3.0 is getting installed despite --constraint being invoked on the command line. Kevin Carter (irc: cloudnull) was able to verify this using http://cdn.pasteraw.com/4ud8fqwp0owvjy041d9tj0djvhcchh3.

As a workaround - removing PySAML2 from keystone_pip_packages installs the correct version and the play finishes without error - https://github.com/openstack/openstack-ansible-os_keystone/blob/b141222a4797ddfb920b156992b81cc3d53097e7/defaults/main.yml#L429

[0] https://github.com/openstack/keystone/blob/b8435cc15259a0ca07003792e33a7b4a8363ffe3/requirements.txt#L36

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/390587

[Lance Bragstad (lbragstad)]

Actually - I was able work around this by patching my own project:

https://github.com/lbragstad/keystone-performance/commit/30709a85a974b3e7416a5d2ceb63028a308173eb

This was noted in the releasenotes of the change:

https://github.com/openstack/openstack-ansible-os_keystone/blob/b141222a4797ddfb920b156992b81cc3d53097e7/releasenotes/notes/remove-requirements-git-bdf5691b8390ed7c.yaml

[OpenStack Infra (hudson-openstack)]

Change abandoned by Lance Bragstad (<email address hidden>) on branch: master
Review: https://review.openstack.org/390587
Reason: I don't think this is needed for reason described in bug 1636547 .