diff --git a/.zuul.yaml b/.zuul.yaml
index b5853bb..13c7579 100644
--- a/.zuul.yaml
+++ b/.zuul.yaml
@@ -1,5 +1,7 @@
 ---
 - project:
+    vars:
+      ensure_tox_version: '<4'
     check:
       jobs:
         - openstack-tox-linters
diff --git a/python-k8sapp-oidc/k8sapp_oidc/tox.ini b/python-k8sapp-oidc/k8sapp_oidc/tox.ini
index 144e430..8623bf7 100644
--- a/python-k8sapp-oidc/k8sapp_oidc/tox.ini
+++ b/python-k8sapp-oidc/k8sapp_oidc/tox.ini
@@ -17,7 +17,7 @@ usedevelop = True
 sitepackages = False
 
 # tox is silly... these need to be separated by a newline....
-whitelist_externals = bash
+allowlist_externals = bash
                       find
 
 install_command = pip install \
diff --git a/tox.ini b/tox.ini
index 072d3d3..e0214d6 100644
--- a/tox.ini
+++ b/tox.ini
@@ -15,7 +15,7 @@ setenv =
 deps =
   -r{toxinidir}/requirements.txt
   -r{toxinidir}/test-requirements.txt
-whitelist_externals =
+allowlist_externals =
   bash
 
 passenv =