Are isolated-nodes a tower feature or is this also available in AWX

Archives AWX Project
1

https://www.ansible.com/blog/ansible-tower-feature-spotlight-instance-groups-and-isolated-nodes

I’m following this guide to test out isolated nodes (Example use case: multiple VPCs) (bastion host is named deploy)

`

[tower]
localhost ansible_connection=local

[isolated_group_remote]
deploy controller=tower

`

I ran the installer of awx (docker-compose version)

ansible-playbook -i inventory install.yml

And I end up with 2 fully functional AWX deployments.
This is not what I expected since the guide says:

An Isolated Node is an Ansible Tower node that contains a small piece of software for running playbooks locally to manage a set of infrastructure.

So are isolated-nodes a tower feature that is not available in AWX? And if so is there an alternative? (ssh connection options)

Kind regards,

Stefan

2

Stefan Coussens (stefan.coussens@gmail.com) said:

https://www.ansible.com/blog/ansible-tower-feature-spotlight-instance-groups-and-isolated-nodes

I'm following this guide to test out isolated nodes (Example use case:
multiple VPCs) (bastion host is named deploy)

Isolated nodes are not available for container-based deployments. We're
working on a more general execution node framework that will allow this.

Bill

3

We have security restrictions that don’t allow unsolicited communication from less secure networks into more secure networks.

Do you see the new framework being one where the isolated execution node can pull/poll for jobs and not require an unsolicited inbound connection from the AWX system?

4

William Easton (williamseaston@gmail.com) said:

We have security restrictions that don't allow unsolicited communication
from less secure networks into more secure networks.

Do you see the new framework being one where the isolated execution node
can pull/poll for jobs and not require an unsolicited inbound connection
from the AWX system?

That's the plan eventually. See the video from last AnsibleFest (
https://www.ansible.com/the-future-of-ansible-tower) for details.

Bill

5

Thanks for the clear info. :slight_smile:

So I have 2 options:

Use ansible tower since this this can be deployed in a non containerized way.
Wait for Receptor to be integrated. (What does seem to be the better technical sollution)

Kind regards,