When sFTP over a corporate VPN broke auto-deploys for plugin updates and the SSH key + bastion host pattern that restored CI/CD reliability
It started out like most infrastructure hiccups do—innocently. A corporate security initiative introduced stricter VPN policies, requiring all sFTP traffic …