diff --git a/py2-constraints.txt b/py2-constraints.txt
index 694c9ce343..21861a327c 100644
--- a/py2-constraints.txt
+++ b/py2-constraints.txt
@@ -74,3 +74,4 @@ gitdb2===2.0.6
 # Projects that are known to have had a final py2-supporting release
 bandit===1.6.2
 python-keystoneclient===3.22.0
+PasteDeploy==2.1.1
diff --git a/tools/playbooks/common/install_dependencies.yaml b/tools/playbooks/common/install_dependencies.yaml
index 687607fad4..aa4d88c2ee 100644
--- a/tools/playbooks/common/install_dependencies.yaml
+++ b/tools/playbooks/common/install_dependencies.yaml
@@ -41,3 +41,12 @@
         - pyeclib
         - python-swiftclient
         - mock
+
+    - name: install PasteDeploy - CentOS 7
+      pip: name={{ item }} state=present extra_args='--upgrade'
+      with_items:
+        # py2_constraints isn't obeyed by pip install swift
+        - 'PasteDeploy==2.1.1'
+      when:
+        - ansible_facts['distribution'] == "CentOS"
+        - ansible_facts['distribution_major_version'] == "7"