[openstack-dev] [keystone] Standardizing the approach to pip-requires dependencies
Henry Nash
henryn at linux.vnet.ibm.com
Wed Dec 5 00:43:11 UTC 2012
Hi
Openstack projects use pip-requires to indicate their dependencies. While most of these dependencies are external components, some are other openstack projects - the classic example is that any project that will use keystone to authenticate obviously has a dependency on it. Until recently this was usually specified in the pip-requries as:
python-keystoneclient>=0.1,<0.2
This recently broke when we incremented the keystoneclient version to 0.2 (which also included the move of the authentication code into the client from the server - making the dependency on the client particularly relevant).
I was in the process of updating any such dependencies (see: https://review.openstack.org/#/c/16375/), when I discovered that it appears there are differing views on whether we should have an upper limit to the version dependency, i.e. should we change this to:
python-keystoneclient>=0.2,<0.3 (or maybe even 1.0)
or maybe just
python-keystoneclient>=0.2
I must admit, I question the use of the upper limit - given that we don't have any plans to cut off support. I assume the rationale of defining one before was to give us the option of such a cut off? Can anyone confirm that?
I'd like to canvas views on whether there should be an upper limit - that isn't the standard everywhere (although we have done it for keystone to date). My gut feel is to remove the upper limit - but am open to persuasion :-)
Henry
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20121205/06434b17/attachment.html>
More information about the OpenStack-dev
mailing list