feat: add EQT-CORPO SSID with OWE and Okta RADIUS

sites/bcn01/main.tf

@@ -27,4 +27,6 @@ module "bcn01" {
   network_name      = var.network_name
   switch_vlans      = var.switch_vlans
   firewall_rules    = var.firewall_rules
+  wireless_ssids    = var.wireless_ssids
+  radius_secret     = var.radius_secret
 }

sites/bcn01/ssids.auto.tfvars

@@ -0,0 +1,24 @@
+# SSIDs wireless - BCN01
+# NOTA: El shared secret de RADIUS NO está aquí.
+# Se pasa como variable de entorno TF_VAR_radius_secret (GitHub secret: RADIUS_SECRET)
+
+wireless_ssids = [
+  {
+    number              = 0
+    name                = "EQT-CORPO"
+    enabled             = true
+    auth_mode           = "open-with-radius"
+    splash_page         = "Password-protected with custom RADIUS"
+    wpa_encryption_mode = "WPA3 only"
+    ip_assignment_mode  = "Bridge mode"
+    use_vlan_tagging    = true
+    default_vlan_id     = 100
+    redirect_url        = "https://www.adevinta.com"
+    radius_servers = [
+      {
+        host = "15.15.15.15"
+        port = 1912
+      }
+    ]
+  }
+]

sites/bcn01/variables.tf

@@ -27,6 +27,36 @@ variable "firewall_rules" {
   description = "Lista de reglas de firewall L3 para el site"
 }
 
+# SSIDs wireless
+variable "wireless_ssids" {
+  type = list(object({
+    number              = number
+    name                = string
+    enabled             = optional(bool, true)
+    auth_mode           = string
+    splash_page         = optional(string, "None")
+    wpa_encryption_mode = optional(string, "WPA3 only")
+    ip_assignment_mode  = optional(string, "Bridge mode")
+    use_vlan_tagging    = optional(bool, false)
+    default_vlan_id     = optional(number, null)
+    redirect_url        = optional(string, "")
+    radius_servers = optional(list(object({
+      host = string
+      port = number
+    })), [])
+  }))
+  default     = []
+  description = "Lista de SSIDs wireless a configurar en el site"
+}
+
+# Shared secret para servidores RADIUS (sensible, no incluir en tfvars)
+variable "radius_secret" {
+  type        = string
+  sensitive   = true
+  default     = ""
+  description = "Shared secret para autenticación RADIUS. Pasar via TF_VAR_radius_secret"
+}
+
 # Definición de VLANs
 variable "switch_vlans" {
   type = map(object({