best design for dmz ?

hello I wonder about the design of the infra for a dmz,
It is possible from the controller to send jobs to another kubernetes cluster which only requires the apiserver between the controller and the remote
Or the automation mesh with receptor nodes with workers vm only receptor port needed

what is the best and more secure ?

Yes you can use the container groups feature within AWX for this purpose

https://docs.ansible.com/automation-controller/latest/html/administration/containers_instance_groups.html#container-groups

You may also look into execution nodes, see a demo and explanation here https://youtu.be/cWV52qZ0sVk

AWX Team