diff --git a/tox.ini b/tox.ini
index 430e318b10..a32975ba0c 100644
--- a/tox.ini
+++ b/tox.ini
@@ -22,7 +22,10 @@ passenv =
 deps =
      # Zuul is required to supply the zuul ansible modules for ansible-lint
      -egit+https://git.openstack.org/openstack-infra/zuul#egg=zuul
-     ansible<2.4.0
+     # Unfortunately pip doesn't do actual dependency resolution, so
+     # we need to manually ansible at the top level to the same as
+     # zuul requirements.txt
+     ansible>=2.5.1,<2.6
      ansible-lint
      hacking>=0.10,<0.11
      bashate>=0.2