I do not see the SSH tunnel establishing with the controller. Check the below details:
1. Does the controller has enough AP license? 2. Ping between the AP and the controller. 3. AP and Zone country code. ("get countrycode" is the command from the AP CLI) 4. If the above is fine, try disabling the AP cert check from the controller CLI. Probably the AP has older certificate.
ruckus# config ruckus(config)# no ap-cert-check ruckus(config)# exit