move isolate logic into undercloud.sh