jose.martinez/eqt-network-meraki
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

fix: only inject PSK and wpa_encryption_mode for auth_mode=psk SSIDs

Browse Source
This commit is contained in:
Jose Martinez
2026-03-27 08:37:14 +01:00
parent 4cf91c5c96
commit af7f59f3c2
1 changed files with 4 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/meraki-site/main.tf
+4 -6
View File
@@ -160,12 +160,10 @@ resource "meraki_wireless_ssid" "ssids" {
name = each.value.name
enabled = each.value.enabled
auth_mode = each.value.auth_mode
# Si el SSID no tiene psk en el tfvars, usa var.wifi_password_psk (TF_VAR_wifi_password_psk)
psk = each.value.psk != null ? each.value.psk : var.wifi_password_psk
# wpa_encryption_mode solo es compatible con auth_mode != "open"
# Para OWE (open + WPA3) la API rechaza el campo; la encriptación Enhanced Open
# se negocia a nivel de beacon y no se expone como atributo de la API Meraki.
wpa_encryption_mode = each.value.auth_mode != "open" ? each.value.wpa_encryption_mode : null
# PSK solo se envía para SSIDs con auth_mode "psk"; para open/open-enhanced se deja null
psk = each.value.auth_mode == "psk" ? (each.value.psk != null ? each.value.psk : var.wifi_password_psk) : null
# wpa_encryption_mode solo aplica a SSIDs con PSK; open y open-enhanced (OWE) no lo usan
wpa_encryption_mode = each.value.auth_mode == "psk" ? each.value.wpa_encryption_mode : null
encryption_mode = each.value.encryption_mode
splash_page = each.value.splash_page
ip_assignment_mode = each.value.ip_assignment_mode