---
# Canonical project and asset inventory.
#
# This is both an Ansible YAML inventory and the input consumed by GitLab CI.
# Keep credentials out of this file. GitLab selects protected variables by the
# test_project.environment value, which must match TARGET_ENVIRONMENT.
all:
  vars:
    test_project:
      id: "replace-with-project-id"
      name: "Replace with project name"
      environment: "test"
      customer: ""
      location: ""

  children:
    linux_vms:
      hosts: {}
      # Example:
      # linux-app-01:
      #   ansible_host: 192.0.2.10
      #   asset_type: linux_vm
      #   test_profiles: [iec62443, sbom]

    windows_servers:
      vars:
        ansible_connection: winrm
        ansible_winrm_transport: ntlm
        ansible_winrm_server_cert_validation: ignore
        ansible_port: 5985
      hosts: {}

    windows_clients:
      vars:
        ansible_connection: winrm
        ansible_winrm_transport: ntlm
        ansible_winrm_server_cert_validation: ignore
        ansible_port: 5985
      hosts: {}

    mssql_servers:
      vars:
        ansible_connection: winrm
        ansible_winrm_transport: ntlm
        ansible_winrm_server_cert_validation: ignore
        ansible_port: 5985
      hosts: {}

    vmware_esxi:
      vars:
        ansible_connection: local
        vmware_validate_certs: false
      hosts: {}

    hyperv_hosts:
      vars:
        ansible_connection: winrm
        ansible_winrm_transport: ntlm
        ansible_winrm_server_cert_validation: ignore
        ansible_port: 5985
      hosts: {}

    cisco_switches:
      vars:
        ansible_connection: ansible.netcommon.network_cli
        ansible_network_os: cisco.ios.ios
        ansible_become: true
        ansible_become_method: enable
      hosts: {}

    cisco_firewalls:
      vars:
        ansible_connection: ansible.netcommon.network_cli
        ansible_network_os: cisco.asa.asa
        ansible_become: true
        ansible_become_method: enable
      hosts: {}

    web_applications:
      hosts: {}
      # Example:
      # baggage-web:
      #   target_url: https://baggage-test.example.com
      #   asset_type: web_application
      #   test_profiles: [zap-baseline, asvs]