Merge pull request #13 from its-corp/feature/bcn01-sync-dashboard-changes

fix: add encryption_mode for PSK SSIDs (EQT-GUEST)

modules/meraki-site/main.tf

@@ -166,6 +166,7 @@ resource "meraki_wireless_ssid" "ssids" {
   # Para OWE (open + WPA3) la API rechaza el campo; la encriptación Enhanced Open
   # se negocia a nivel de beacon y no se expone como atributo de la API Meraki.
   wpa_encryption_mode = each.value.auth_mode != "open" ? each.value.wpa_encryption_mode : null
+  encryption_mode     = each.value.encryption_mode
   splash_page         = each.value.splash_page
   ip_assignment_mode  = each.value.ip_assignment_mode
   use_vlan_tagging    = each.value.use_vlan_tagging

modules/meraki-site/variables.tf

@@ -35,6 +35,7 @@ variable "wireless_ssids" {
     enabled             = optional(bool, true)
     auth_mode           = string
     psk                 = optional(string, null)   # Contraseña WPA2/WPA3-PSK (sensible, usar TF_VAR o secret)
+    encryption_mode     = optional(string, null)   # "wpa" para PSK; null para open/OWE
     splash_page         = optional(string, "None")
     wpa_encryption_mode = optional(string, "WPA3 only")
     ip_assignment_mode  = optional(string, "Bridge mode")

sites/BCN01-LAB/ssids.auto.tfvars

@@ -26,6 +26,7 @@ wireless_ssids = [
     name                = "EQT-GUEST"
     enabled             = true
     auth_mode           = "psk"            # Modo para contraseña compartida
+    encryption_mode     = "wpa"           # Requerido por la API Meraki para PSK
     wpa_encryption_mode = "WPA2 only"     # Lo que pediste para compatibilidad
     # psk se inyecta via TF_VAR_wifi_password_psk (GitHub secret WIFI_PASSWORD_PSK)
     ip_assignment_mode  = "Bridge mode"

sites/BCN01-LAB/variables.tf

@@ -35,6 +35,7 @@ variable "wireless_ssids" {
     enabled             = optional(bool, true)
     auth_mode           = string
     psk                 = optional(string, null)
+    encryption_mode     = optional(string, null)   # "wpa" para PSK; null para open/OWE
     splash_page         = optional(string, "None")
     wpa_encryption_mode = optional(string, "WPA3 only")
     ip_assignment_mode  = optional(string, "Bridge mode")