Isolated Groups

Hello,

I’ve been reading through the group, github, and aything I can find online. From what I’m readying isolated instances aren’t officially supported as the tooling doesn’t exist yet. I do see some conflicting info on github that says it’s under testing maybe ?

If it’s not officially supported has anyone succesfully got it working, I found this guide https://weixiangk.wordpress.com/2020/04/17/how-to-install-awx-isolated-node/ however when I try to add the node I get this error ( running from awx_task container)

bash-4.4# awx-manage provision_instance –-h jump.network.bros
usage: awx-manage provision_instance [-h] [–hostname HOSTNAME]
[–is-isolated] [–version]
[-v {0,1,2,3}] [–settings SETTINGS]
[–pythonpath PYTHONPATH] [–traceback]
[–no-color] [–force-color]
awx-manage provision_instance: error: unrecognized arguments: –-h jump.network.bros

Ultimately I have an isolated network I want to put a node in that would allow pivoting to devices on that network. Any advice ?

I may have found an easy solution for my use case. I can add another network adapter to the host machine which would have direct connectivity into my “isolated” network ( this has nothing to do with security or bypassing security, the network is isolated for other reasons). However to accomplish this I need to change the primary IP of the AWX host, I did this then I re ran the installer. After this the web interface wouldn’t load, determined this was the firewall and disabling it proved it. I also had the issue of my containers not being able to reach networks past the actual host. I’m thinking I missed a step?

It’s hard to tell from the formatting of your commands, there but it looks to me like you specified the options to print the help, with some extra things… you need to use the full --hostname (double-dash hostname) parameter for this.

Sorry I didn’t reply all and a couple exchanges got dropped with Phil, He explained that I need to have passwordless SSH ( ssh keys ) setup between the awx containers and the “isolated instance” vm and that I need to install psutil and ansible-runner ( pip install psutil ansible-runner ). I’ve got this done and I think I’m closer however when trying to add the instance with awx-manage I still get this error.

awx-manage provision_instance [-h] [–hostname HOSTNAME]
[–is-isolated] [–version]
[-v {0,1,2,3}] [–settings SETTINGS]
[–pythonpath PYTHONPATH] [–traceback]
[–no-color] [–force-color]
awx-manage provision_instance: error: unrecognized arguments: –-hostname=jump.network.bros

Now reading through the documentation ( here ) I see I need to add the isolated instance group and hosts to the inventory file. I’m not sure what inventory file or where this is ? I’ve added the host to an inventory in my awx web interface just to see if that did the trick but it did not. Does anyone know where this inventory file is ?