diff --git a/cni.Dockerfile b/cni.Dockerfile
index 4c226268d..b088ae5f1 100644
--- a/cni.Dockerfile
+++ b/cni.Dockerfile
@@ -1,6 +1,7 @@
 FROM centos:7
 LABEL authors="Antoni Segura Puimedon<toni@kuryr.org>, Vikas Choudhary<vichoudh@redhat.com>"
 
+ARG UPPER_CONSTRAINTS_FILE="https://git.openstack.org/cgit/openstack/requirements/plain/upper-constraints.txt"
 ARG OSLO_LOCK_PATH=/var/kuryr-lock
 
 RUN yum install -y epel-release https://rdoproject.org/repos/rdo-release.rpm \
@@ -10,7 +11,7 @@ RUN yum install -y epel-release https://rdoproject.org/repos/rdo-release.rpm \
 COPY . /opt/kuryr-kubernetes
 
 RUN cd /opt/kuryr-kubernetes \
-    && pip install . \
+    && pip install -c $UPPER_CONSTRAINTS_FILE . \
     && rm -fr .git \
     && yum -y history undo last \
     && mkdir ${OSLO_LOCK_PATH}
diff --git a/controller.Dockerfile b/controller.Dockerfile
index d9deda9b8..f3d981205 100644
--- a/controller.Dockerfile
+++ b/controller.Dockerfile
@@ -1,13 +1,15 @@
 FROM centos:7
 LABEL authors="Antoni Segura Puimedon<toni@kuryr.org>, Vikas Choudhary<vichoudh@redhat.com>"
 
+ARG UPPER_CONSTRAINTS_FILE="https://git.openstack.org/cgit/openstack/requirements/plain/upper-constraints.txt"
+
 COPY . /opt/kuryr-kubernetes
 
 RUN yum install -y epel-release \
     && yum install -y --setopt=tsflags=nodocs python-pip \
     && yum install --setopt=tsflags=nodocs --assumeyes inet-tools gcc python-devel wget git \
     && cd /opt/kuryr-kubernetes \
-    && pip install --no-cache-dir . \
+    && pip install -c $UPPER_CONSTRAINTS_FILE --no-cache-dir . \
     && rm -fr .git \
     && yum -y history undo last \
     && groupadd -r kuryr -g 711 \