Add Hashed requirement for python dependencies (#5866)

Author: aslam-quad

.codespellrc

@@ -4,4 +4,4 @@ skip = .git,*.pdf,*.svg,*.min.js,*.js.map,js,requirements.txt
 # docs/videos/healthcare-and-life-sciences/lysozyme-example/submit.sh has CONECT - might be "legit"
 ignore-regex = HETATM -e CONECT|\([A-Z]\)[a-z]+
 #
-ignore-words-list = namd,tempdate,te,ue,startd,passtime
+ignore-words-list = namd,tempdate,te,ue,startd,passtime,astroid

community/front-end/ofe/infrastructure_files/gcs_bucket/webserver/requirements.in

@@ -0,0 +1,5 @@
+google-api-python-client==2.196.0
+google-cloud-secret-manager==2.28.0
+google-cloud-pubsub==2.38.0 
+pyyaml==6.0.3
+httplib2==0.31.2

community/front-end/ofe/infrastructure_files/gcs_bucket/webserver/requirements.txt

@@ -109,10 +109,7 @@ install_sqlite
 
 python3.12 -m ensurepip --upgrade
 
-pip3.12 install google-api-python-client \
-	google-cloud-secret-manager \
-	google.cloud.pubsub \
-	pyyaml httplib2
+pip3.12 install --require-hashes -r "$(dirname "$0")/requirements.txt"
 
 # Set Python3.12 as default Python3
 echo '2' | update-alternatives --config python3
@@ -227,7 +224,7 @@ sudo su - gcluster -c /bin/bash <<EOF
   printf "\nUpgrading pip...\n"
   pip install --upgrade pip
   printf "\nInstalling pip requirements...\n"
-  pip install -r /opt/gcluster/cluster-toolkit/community/front-end/ofe/requirements.txt
+  pip install --require-hashes -r /opt/gcluster/cluster-toolkit/community/front-end/ofe/requirements.txt
 
   printf "Generating configuration file for backend..."
   echo "config:" > configuration.yaml

community/front-end/ofe/infrastructure_files/gcs_bucket/webserver/startup.sh

@@ -0,0 +1,106 @@
+altgraph==0.17.5
+archspec==0.2.6
+argcomplete==3.6.3
+asgiref==3.11.1
+astroid>=4.0.2,<4.2.0
+attrs==26.1.0
+# This should be supported by zoneinfo in Python 3.9+
+backports.zoneinfo==0.2.1;python_version<"3.9"
+cachetools>=7.1.4,<8.0
+certifi==2026.6.17
+cffi==2.0.0
+cfgv==3.5.0
+charset-normalizer==3.4.7
+click==8.4.2
+crispy-bootstrap5==2026.3
+cryptography==49.0.0
+decorator==5.3.1
+defusedxml==0.7.1
+dill==0.4.1
+distlib==0.4.3
+django-revproxy==0.13.0
+#git+https://github.com/jazzband/django-revproxy.git@d2234005135dc0771b7c4e0bb0465664ccfa5787
+Django==6.0.6
+django-allauth==65.18.0
+django-crispy-forms==2.6
+django-extensions==3.2.3
+djangorestframework==3.17.1
+filelock==3.29.4
+google-api-core==2.31.0
+google-api-python-client==2.198.0
+google-auth==2.55.1
+google-auth-httplib2==0.4.0
+google-cloud-artifact-registry==1.22.0
+google-cloud-secret-manager==2.29.0
+google-cloud-build==3.38.0
+google-cloud-billing==1.20.0
+google-cloud-core==2.6.0
+google-cloud-pubsub==2.39.0
+google-cloud-compute==1.49.0
+google-cloud-storage==3.12.0
+google-crc32c==1.8.0
+google-resumable-media==2.10.0
+googleapis-common-protos==1.75.0
+grafana-api==1.0.3
+grpc-google-iam-v1==0.14.4
+grpcio==1.81.1
+grpcio-status==1.81.1
+h11==0.16.0
+httplib2==0.32.0
+identify==2.6.19
+idna==3.18
+importlib-resources==7.1.0
+isort==7.0.0
+Jinja2==3.1.6
+jsonschema==4.26.0
+jsonschema-specifications==2025.9.1
+lazy-object-proxy==1.12.0
+libcst==1.8.6
+macholib==1.16.4
+MarkupSafe==3.0.3
+mccabe==0.7.0
+mypy-extensions==1.1.0
+nodeenv==1.10.0
+oauthlib==3.3.1
+path==17.1.1
+pkgutil_resolve_name==1.3.10
+platformdirs==4.10.0
+pre-commit==4.6.0
+proto-plus==1.28.0
+protobuf>=7.35.1,<8.0.0
+pyasn1==0.6.3
+pyasn1-modules==0.4.2
+pycparser==3.0
+PyJWT==2.13.0
+pylint==4.0.6
+pylint-django==2.7.0
+pylint-plugin-utils==0.9.0
+pyparsing==3.3.2
+python3-openid==3.2.0
+pytz==2026.2
+PyYAML==6.0.3
+referencing==0.37.0
+requests==2.34.2
+requests-oauthlib==2.0.0
+retry==0.9.2
+rpds-py==2026.6.3
+rsa==4.9.1
+ruamel.yaml==0.19.1
+ruamel.yaml.clib==0.2.15
+semantic-version==2.10.0
+setuptools-rust==1.13.0
+six==1.17.0
+sqlparse==0.5.5
+toml==0.10.2
+tomli==2.4.1
+tomlkit==0.15.0
+typing-inspect==0.9.0
+typing_extensions==4.15.0
+uritemplate==4.2.0
+urllib3==2.7.0
+uvicorn==0.49.0
+virtualenv==21.5.1
+wrapt==2.2.2
+xmltodict==1.0.4
+yq==3.4.3
+zipp==4.1.0