Move cryprography pin

This moves the cryptography pin to ansible-requirements.txt
which is used as a constraints file[1].

[1] https://opendev.org/openstack/tripleo-ansible/src/branch/master/zuul.d/playbooks/pre.yml#L42

Related-Bug: #1995608
Change-Id: I646cd49b614a9f494e77f9893521d3c070900ed5

ansible-requirements.txt

@@ -1,4 +1,5 @@
 ansible-core<2.12.0
+cryptography<37.0.0
 metalsmith>=1.4.0 # Apache-2.0
 importlib-metadata
 jsonschema  # MIT

molecule-requirements.txt

@@ -14,7 +14,7 @@ molecule-podman>=1.0.0a1
 ruamel.yaml
 netaddr
 jinja2
-cryptography<37.0.0
+cryptography
 
 ansible-core<2.12.0
 

tox.ini

@@ -100,7 +100,8 @@ sitepackages = False
 [testenv:role-addition]
 basepython = python3
 deps =
-   {[testenv:linters]deps}
+   pre-commit
+   virtualenv
    -r {toxinidir}/molecule-requirements.txt
    -c{env:TOX_CONSTRAINTS_FILE:https://releases.openstack.org/constraints/upper/master}
 commands =

tripleo_ansible/roles/tripleo_keystone_resources/molecule/default/start_keystone.sh

@@ -3,7 +3,6 @@ set -x
 
 ### Openstack Keystone
 
-: ${OS_RELEASE:=queens}
 : ${IPADDR:=127.0.0.1}
 # Identity service configuration
 : ${OS_IDENTITY_URL_IPADDR:=$IPADDR}

zuul.d/playbooks/run-role-addition.yml

@@ -1,5 +1,6 @@
 ---
 - hosts: localhost
+  connection: local
   tasks:
     - name: set basic zuul fact
       set_fact: