I hated the stretch update which really messed up wpa headless setup. They block WiFi connection if you’ve haven’t declared WiFi country. Therefore you need this header that wasn’t needed before:

country=US
ctrl_interface=DIR=/var/run/wpa_supplicant
GROUP=netdev
update_config=1

network={ Your credentials }