fix: only inject PSK and wpa_encryption_mode for auth_mode=psk SSIDs

This commit is contained in:
Jose Martinez
2026-03-27 08:37:14 +01:00
parent 4cf91c5c96
commit af7f59f3c2
+4 -6
View File
@@ -160,12 +160,10 @@ resource "meraki_wireless_ssid" "ssids" {
name = each.value.name name = each.value.name
enabled = each.value.enabled enabled = each.value.enabled
auth_mode = each.value.auth_mode auth_mode = each.value.auth_mode
# Si el SSID no tiene psk en el tfvars, usa var.wifi_password_psk (TF_VAR_wifi_password_psk) # PSK solo se envía para SSIDs con auth_mode "psk"; para open/open-enhanced se deja null
psk = each.value.psk != null ? each.value.psk : var.wifi_password_psk psk = each.value.auth_mode == "psk" ? (each.value.psk != null ? each.value.psk : var.wifi_password_psk) : null
# wpa_encryption_mode solo es compatible con auth_mode != "open" # wpa_encryption_mode solo aplica a SSIDs con PSK; open y open-enhanced (OWE) no lo usan
# Para OWE (open + WPA3) la API rechaza el campo; la encriptación Enhanced Open wpa_encryption_mode = each.value.auth_mode == "psk" ? each.value.wpa_encryption_mode : null
# se negocia a nivel de beacon y no se expone como atributo de la API Meraki.
wpa_encryption_mode = each.value.auth_mode != "open" ? each.value.wpa_encryption_mode : null
encryption_mode = each.value.encryption_mode encryption_mode = each.value.encryption_mode
splash_page = each.value.splash_page splash_page = each.value.splash_page
ip_assignment_mode = each.value.ip_assignment_mode ip_assignment_mode = each.value.ip_assignment_mode