From af7f59f3c2d0badddc87cd4652dfe58d29f1aa55 Mon Sep 17 00:00:00 2001 From: Jose Martinez Date: Fri, 27 Mar 2026 08:37:14 +0100 Subject: [PATCH] fix: only inject PSK and wpa_encryption_mode for auth_mode=psk SSIDs --- modules/meraki-site/main.tf | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-) diff --git a/modules/meraki-site/main.tf b/modules/meraki-site/main.tf index a2da0ab..be04d4f 100755 --- a/modules/meraki-site/main.tf +++ b/modules/meraki-site/main.tf @@ -160,12 +160,10 @@ resource "meraki_wireless_ssid" "ssids" { name = each.value.name enabled = each.value.enabled auth_mode = each.value.auth_mode - # Si el SSID no tiene psk en el tfvars, usa var.wifi_password_psk (TF_VAR_wifi_password_psk) - psk = each.value.psk != null ? each.value.psk : var.wifi_password_psk - # wpa_encryption_mode solo es compatible con auth_mode != "open" - # Para OWE (open + WPA3) la API rechaza el campo; la encriptación Enhanced Open - # se negocia a nivel de beacon y no se expone como atributo de la API Meraki. - wpa_encryption_mode = each.value.auth_mode != "open" ? each.value.wpa_encryption_mode : null + # PSK solo se envía para SSIDs con auth_mode "psk"; para open/open-enhanced se deja null + psk = each.value.auth_mode == "psk" ? (each.value.psk != null ? each.value.psk : var.wifi_password_psk) : null + # wpa_encryption_mode solo aplica a SSIDs con PSK; open y open-enhanced (OWE) no lo usan + wpa_encryption_mode = each.value.auth_mode == "psk" ? each.value.wpa_encryption_mode : null encryption_mode = each.value.encryption_mode splash_page = each.value.splash_page ip_assignment_mode = each.value.ip_assignment_mode