Open Stack

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/04/2015 12:03 PM, Alan Pevec wrote:
>>> Dependencies in requirements.txt do not seem to be used in 
>>> stable/icehouse gate jobs, recent pip freeze in
>>> stable/icehouse shows: ... oslo.config==1.6.0 # git sha
>>> 99e530e django-openstack-auth==1.1.9 # git sha 2079383
>> 
>> It's because of this:
>> 
>> 2015-01-27 19:33:44.152 | Collecting oslo.config>=1.4.0 (from 
>> python-keystoneclient>=0.11.1->python-openstackclient<=1.0.1)
>> 
>> After that installs 1.6.0, consequent pip runs assume that 1.6.0
>> is always better than <1.4.0 and disregards version cap, hence
>> does not downgrade the library.
>> 
>> Should we finally cap versions for clients so that they don't
>> fetch new library versions?
> 
> Clients are capped in stable/icehouse requirements but devstack in 
> gate seems to be installing them from git master (note # git sha)

So we install python-openstackclient<=1.0.1 in Icehouse devstack [1]
even though we have <0.5 in requirements/Icehouse [2]. This should be
fixed I guess. But that would not be enough since all versions of
python-openstackclient don't cap the maximum version of keystoneclient.

Anyway, in the end we see that 1.4.0 is installed, so probably pip
downgraded it later in the run. It looks suspicious and hacky, but it
works.

As for git hashes you see in freeze output, they seem to be part of
pbr metadata shipped with wheels, I see them even when setting local
env with 'tox -e py27 --notest' locally when I'm pretty sure git is
not involved.

So all in all, I still vote for disabling django_openstack_auth
> =1.1.9 in gate for Icehouse.

/Ihar
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJU0hctAAoJEC5aWaUY1u573NEH/3e+2c1eXDaYU87qz6ZzX9vw
yG/2raO3S+/4UtA2Zb3EQYdTduUHeXnqk3caGZq0hcx3XdmzO01SVueKgQAaJLij
8p6p6WwYDr2h5+DXM2g9dfoRE/mPziwwzoGUw095dUzJBIAOsdUcB/OmyAxiJFD8
dXEiwu988pZ4oJgzbL28YhyMce3TK1dY1EFpfvYxhIYySCcVFv9enQVxaj4y6+dc
aCw02TyUpObNFHYSqrIwsXMNuhaQAwlZ7wdc4IAcVbggcDdpDyToJicg80OSB2aN
nhdp4Y4BlZt1grx8NgWgUSe/5G+JkzHjm3K3rllxa9l99i1lc9+zNOxD2cj8e5I=
=qQHZ
-----END PGP SIGNATURE-----