requirements-python.txt

ansible>=13,<14

# some tasks call aws command on localhost
# make sure this is BEFORE boto3 and boto
awscli>=1,<2

# needed for inventory and aws modules
boto3>=1.35.0

# required by ansible ec2 module
botocore>=1.35.0

# boto3/botocore imports can break in mixed Homebrew + user-site environments
# when these transitive dependencies are missing from the controller interpreter.
python-dateutil>=2.8.2
six>=1.16.0

# needed for python `ipaddr` filter
ipaddress
netaddr

# needed for managing databases (e.g. creating project db in infra step)
# mysql
# We are using a fork of PyMySQL that has SSL enabled by default
# Ansible ansible_util does not allow setting ssl parameter without setting ca_cert at the same time
# This could be workarounded by using config_file parameter but this only works when implementation
# uses real mysql client and not PyMySQL
# PyMySQL implementation also loads the config file but it does not support setting ssl parameter
# while it makes inpossible to enable ssl without providing certificate, implementation supports such scenario
# in later code. This is why we are using forked version of PyMySQL that enables ssl by default
# when it's not explicitly disabled. This should be always safe, because if ssl is not enabled on server
# implementation will fallback to non-ssl connection.
git+https://github.com/mageops/PyMySQL.git@dev-ssl-by-default#egg=PyMySQL

# needed for running docker (e.g. building aws lambda artifacts)
docker

# required for awscli
#PyYAML<5.3

# required for `cs.ansible-plugins` role
jq

# Do not install the PyPI `selinux` package in the controller venv.
# With Python 3.12 it expects matching system SELinux bindings for the same
# interpreter version and can break Ansible startup on Jenkins before any
# playbook code runs. Target hosts install `python3-libselinux` when needed.

# distro 1.7.0 breaks fact discovery in ansible for some nodes
# distro introduced breaking change that changed package
# from using single file to directory module, this isn't compatible with
# import used by our ansible version
# We are pinning this to previous version until we upgrade to never ansible
#distro<1.7.0

# Dummy comment to force reinstallation of dependencies _1