move dependency restrictions back to upper level command

Author: yiyuan-he

Dockerfile

@@ -18,7 +18,19 @@ ADD aws-opentelemetry-distro/ ./aws-opentelemetry-distro/
 # * https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/azure-functions/recover-python-functions.md#troubleshoot-cannot-import-cygrpc
 RUN sed -i "/opentelemetry-exporter-otlp-proto-grpc/d" ./aws-opentelemetry-distro/pyproject.toml
 
-RUN mkdir workspace && pip install --target workspace ./aws-opentelemetry-distro
+# urllib3 recently made a release that drops support for Python 3.8
+# Our sdk depends on botocore which pulls in the version of urllib3 based Python runtime it detects.
+# The rule is that if current pip command version is > 3.9 botocore will pick up the latest urllib3,
+# otherwise it picks up the older urllib3 that is compatible with Python 3.8.
+# https://github.com/boto/botocore/blob/develop/requirements-docs.txt
+# Since this Dockerfile currently uses the fixed Python 3.11 base image to pull the required dependencies,
+# EKS and ECS applications will encounter a runtime error for Python 3.8 compatibility.
+# Our fix is to temporarily restrict the urllib3 version to one that works for all supported Python versions 
+# that we currently commit to support (notably 3.8). 
+# We also pin the setuptools version for similar issues with the library dropping 3.8 support.
+# https://github.com/pypa/setuptools/blame/main/pkg_resources/__init__.py#L24
+# TODO: Remove these temporary workarounds once we deprecate Python 3.8 support since it has reached end-of-life.
+RUN mkdir workspace && pip install setuptools==75.2.0 urllib3==2.2.3 --target workspace ./aws-opentelemetry-distro
 
 # Stage 2: Build the cp-utility binary
 FROM public.ecr.aws/docker/library/rust:1.81 as builder

aws-opentelemetry-distro/pyproject.toml

@@ -80,20 +80,6 @@ dependencies = [
   "opentelemetry-instrumentation-urllib3 == 0.48b0",
   "opentelemetry-instrumentation-wsgi == 0.48b0",
   "opentelemetry-instrumentation-cassandra == 0.48b0",
-  # urllib3 recently made a release that drops support for Python 3.8
-  # Our sdk depends on botocore which pulls in the version of urllib3 based Python runtime it detects.
-  # The rule is that if current pip command version is > 3.9 botocore will pick up the latest urllib3,
-  # otherwise it picks up the older urllib3 that is compatible with Python 3.8.
-  # https://github.com/boto/botocore/blob/develop/requirements-docs.txt
-  # Since this Dockerfile currently uses the fixed Python 3.11 base image to pull the required dependencies,
-  # EKS and ECS applications will encounter a runtime error for Python 3.8 compatibility.
-  # Our fix is to temporarily restrict the urllib3 version to one that works for all supported Python versions 
-  # that we currently commit to support (notably 3.8). 
-  # We also pin the setuptools version for similar issues with the library dropping 3.8 support.
-  # https://github.com/pypa/setuptools/blame/main/pkg_resources/__init__.py#L24
-  # TODO: Remove these temporary workarounds once we deprecate Python 3.8 support since it has reached end-of-life.
-  "urllib3 == 2.2.3",
-  "setuptools == 75.2.0",
 ]
 
 [project.optional-dependencies]