# Isolated nodes

**URL:** <https://forum.ansible.com/t/isolated-nodes/31144>\
**Category:** AWX Project\
**Created:** [August 27, 2019, 8:10pm UTC](https://forum.ansible.com/t/isolated-nodes/31144 "2019-08-27T20:10:12Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Juan\_A\_S](https://avatars.discourse-cdn.com/v4/letter/j/ba8739/32.png) [@Juan\_A\_S](https://forum.ansible.com/u/Juan_A_S)\
**Post date:** [August 27, 2019, 8:10pm UTC](https://forum.ansible.com/t/isolated-nodes/31144/1 "2019-08-27T20:10:12Z")

</div>

Hi all, are there any news about isolated nodes? I was trying to implement them some months ago, but the feature wasn’t available, although announced, and no documentation or tutorials.

Thanks!

---

<div class="post-metadata">

**Author:** ![kdelee](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/kdelee/32/193_2.png) [@kdelee](https://forum.ansible.com/u/kdelee)\
**Post date:** [August 27, 2019, 9:41pm UTC](https://forum.ansible.com/t/isolated-nodes/31144/2 "2019-08-27T21:41:04Z")

</div>

You can find some docs here:  
[https://github.com/ansible/awx/blob/devel/docs/clustering.md#security-isolated-rampart-groups](https://github.com/ansible/awx/blob/devel/docs/clustering.md#security-isolated-rampart-groups)

---

<div class="post-metadata">

**Author:** ![Juan\_A\_S](https://avatars.discourse-cdn.com/v4/letter/j/ba8739/32.png) [@Juan\_A\_S](https://forum.ansible.com/u/Juan_A_S)\
**Post date:** [August 28, 2019, 8:44am UTC](https://forum.ansible.com/t/isolated-nodes/31144/3 "2019-08-28T08:44:29Z")

</div>

Thanks Elijah. I will give a try. Some questions:

- The doc says that the isolated instances must be declared in the inventory. With AWX, the inventory is only used por provisioning Kubernetes/Openshift. Is it really needed to declare there the isolated nodes and controllers? As, I think, the install.yml playbook just does some Kubernetes work, and not any host provisioning, how are the isolated instances provisioned?

- Can be the isolated groups declared in external inventory sources? We have a Web service that published our inventory in the format that Ansible expects, and is imported using an inventory script from Ansible. In that Web Service, we could define the isolated groups and its members: Would this work? In this case, how would these isolated instances be provisioned (doc: “will have a minimal set of utilities used to run jobs”)?

- I think that with AWX, the SSH keys; an API request to /settings/jobs returns this:

{  
“AD\_HOC\_COMMANDS”: [  
“command”,  
“…”  
],  
…  
“AWX\_ISOLATED\_KEY\_GENERATION”: true,  
“AWX\_ISOLATED\_PRIVATE\_KEY”: “”,  
“AWX\_ISOLATED\_PUBLIC\_KEY”: “”,  
…

}

Is this correct os just that info is not returned by the API (at least the public key)?

Thanks!