Bypass the Controller Proxy for One Ansible WinRM Host

For an internal WinRM endpoint accidentally routed through the controller's Internet proxy, put these values in the appropriate host or group variables alongside the existing connection settings:

ansible_winrm_proxy: null
ansible_winrm_server_cert_validation: validate

This form applies to Ansible-core 2.19 with pywinrm 0.5.0. The plugin passes supported ansible_winrm_* extras to pywinrm; YAML null becomes Python None.

pywinrm 0.5.0 defines proxy=None as disabling proxy routing and supplies a session no_proxy wildcard while preserving its other normal environment and TLS configuration. The installed transport.py does not need editing.

For direct pywinrm use, pass proxy=None to Protocol. In this version, an explicit proxy URL selects that intermediary, while omitting the option retains legacy environment-based behavior.

Match the inventory form to the plugin API: a generation exposing a typed proxy option can document a string sentinel instead of this extras/null interface. The controller still needs network access to the Windows host, and an HTTPS trust failure needs the proper CA configuration. server_cert_validation: validate should remain in effect.