diff --git a/py2-constraints.txt b/py2-constraints.txt
index af78a2708a..40a5e5d860 100644
--- a/py2-constraints.txt
+++ b/py2-constraints.txt
@@ -78,3 +78,4 @@ dnspython===1.16.0
 setuptools===44.1.1
 pycadf===2.10.0
 smmap===3.0.5
+PasteDeploy==2.1.1
diff --git a/tools/playbooks/common/install_dependencies.yaml b/tools/playbooks/common/install_dependencies.yaml
index 714ddf50d9..6e2693a27f 100644
--- a/tools/playbooks/common/install_dependencies.yaml
+++ b/tools/playbooks/common/install_dependencies.yaml
@@ -43,3 +43,12 @@
         # For some reason, pip on py2 isn't smart enough to prevent us
         # trying to install a too-new mock??
         - 'mock<4'
+
+    - name: install PasteDeploy - CentOS 7
+      pip: name={{ item }} state=present extra_args='--upgrade'
+      with_items:
+        # py2_constraints isn't obeyed by pip install swift
+        - 'PasteDeploy==2.1.1'
+      when:
+        - ansible_facts['distribution'] == "CentOS"
+        - ansible_facts['distribution_major_version'] == "7"