If the trunk to your AP is correct, and the SSID is in bridge mode tagging everything to VLAN 20, which it sounds like it all is, then the next area to check is your DHCP setup, and make sure you’ve not accidentally created a bridge between VLAN 10 and VLAN 20.