diff --git a/test-requirements.txt b/test-requirements.txt
index c85bc5bfcf..9dcf3a5a32 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -9,6 +9,8 @@ openstacksdk
 zuul-sphinx>=0.2.3
 testtools
 mock
+# Ansible 2.8 drops the paramiko dep which breaks testinfra
+ansible<2.8.0
 # testinfra 1.17.0 has a broken wheel that won't install under python3
 # testinfra 3.0.0 switched the ansible backend, but broke ipv6 handling
 testinfra!=1.17.0,!=3.0.0