{"id":620,"date":"2023-03-21T21:45:05","date_gmt":"2023-03-21T20:45:05","guid":{"rendered":"https:\/\/kdslabs.fr\/?p=620"},"modified":"2023-04-13T11:37:43","modified_gmt":"2023-04-13T09:37:43","slug":"article-vcenter-part-1-migration-du-native-key-provider-nkp-vers-un-kms-externe","status":"publish","type":"post","link":"https:\/\/kdslabs.fr\/index.php\/2023\/03\/21\/article-vcenter-part-1-migration-du-native-key-provider-nkp-vers-un-kms-externe\/","title":{"rendered":"[ARTICLE] [VCENTER] [PART 1] Migration du Native Key Provider (NKP) vers un KMS Externe"},"content":{"rendered":"\n<h4 class=\"wp-block-heading has-colibri-color-1-color has-text-color\" style=\"font-size:16px\">[ARTICLE] [VCENTER] [PART 1] Migration du Native Key Provider (NKP) vers un KMS Externe<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"font-size:14px\">J&#8217;ai r\u00e9cemment \u00e9t\u00e9 confront\u00e9 \u00e0 un besoin de s\u00e9curit\u00e9 li\u00e9 \u00e0 une homologation, et afin de r\u00e9pondre aux exigences de cette homologation il faut migrer l&#8217;ensemble des workloads chiffr\u00e9s sur le NKP (Native Key Provider) du vCenter sur un KMS Externe, et ce en prenant en compte qu&#8217;il ne faut pas que les clients aient le moindre impact de service.<br>(<span style=\"text-decoration: underline\" class=\"underline\">dans la limite de tout probl\u00e8me \u00e9ventuel<\/span><strong>:<\/strong> prochain post sur le sujet en part 2). <\/p>\n\n\n\n<h4 class=\"wp-block-heading has-colibri-color-1-color has-text-color\" style=\"font-size:14px\"><span style=\"text-decoration: underline\" class=\"underline\">Versions utilis\u00e9es:<\/span><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"font-size:14px\">vCD : 10.3.2.19173133<br>vCenter : 7.0.3.00700<br>ESXi : 7.0.3.19482537<\/p>\n\n\n\n<h4 class=\"wp-block-heading has-colibri-color-1-color has-text-color\" style=\"font-size:14px\"><span style=\"text-decoration: underline\" class=\"underline\">Pr\u00e9requis:<\/span><\/h4>\n\n\n\n<ul class=\"wp-block-list\" style=\"font-size:14px\">\n<li>Installer les modules PowerCLI &amp; VMware.VMEncryption<\/li>\n\n\n\n<li>Backup du NKP en cas de rollback \u00e9ventuel<\/li>\n\n\n\n<li>VIP KMS (\u00e0 faire avec un AVI LB par exemple)\n<ul class=\"wp-block-list\">\n<li>La VIP est obligatoire parce que le vCenter requ\u00eate continuellement les 2 KMS, et s&#8217;il en d\u00e9tecte 1 KO il rendra le cluster automatiquement inutilisable et donc toute nouvelle cr\u00e9ation de VM sera impossible. Le contournement est d&#8217;utiliser une VIP directement sur le vCenter. <\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Tests de r\u00e9silience du KMS effectu\u00e9s<\/li>\n\n\n\n<li>V\u00e9rification de la Storage Policy porteur du chiffrement\n<ul class=\"wp-block-list\">\n<li>V\u00e9rification du Storage Comptatibility<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"font-size:14px\">Nous avons 2 choix possibles pour re-chiffrer des VMs d&#8217;un Key Provider vers un autre (Native Key Provider vers Standard KMS ou inversement).<\/p>\n\n\n\n<h4 class=\"wp-block-heading has-colibri-color-1-color has-text-color\" style=\"font-size:16px\"><span style=\"text-decoration: underline\" class=\"underline\">Migration des workloads du NKP vers le KMS Externe<\/span><\/h4>\n\n\n\n<h4 class=\"wp-block-heading has-colibri-color-1-color has-text-color\" style=\"font-size:14px\"><span style=\"text-decoration: underline\" class=\"underline\">M\u00e9thode manuelle (VM par VM):<\/span><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"font-size:14px\">Cette m\u00e9thode est la plus rapide si vous n&#8217;avez d&#8217;environnement pr\u00eat avec les modules PowerCLI &amp; VMware.VMEncryption, et seulement si vous avez quelques dizaines de VMs \u00e0 migrer. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"font-size:14px\">Aussi, elle est possible seulement si vos nouveaux workloads peuvent d&#8217;ores et d\u00e9j\u00e0 \u00eatre h\u00e9berg\u00e9s sur le KMS Externe.<\/p>\n\n\n\n<ul class=\"wp-block-list\" style=\"font-size:14px\">\n<li>Passage du KMS Externe en &#8220;default&#8221; <\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/KMS-vCenter-1024x475.png\" alt=\"\" class=\"wp-image-670\" width=\"655\" height=\"303\" srcset=\"https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/KMS-vCenter-1024x475.png 1024w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/KMS-vCenter-300x139.png 300w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/KMS-vCenter-768x356.png 768w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/KMS-vCenter-1536x712.png 1536w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/KMS-vCenter-2048x949.png 2048w\" sizes=\"auto, (max-width: 655px) 100vw, 655px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\" style=\"font-size:14px\">\n<li>Rekey de chaque VM<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/OK-re-encrypt-manuel-1024x515.png\" alt=\"\" class=\"wp-image-678\" width=\"553\" height=\"278\" srcset=\"https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/OK-re-encrypt-manuel-1024x515.png 1024w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/OK-re-encrypt-manuel-300x151.png 300w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/OK-re-encrypt-manuel-768x386.png 768w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/OK-re-encrypt-manuel-1536x772.png 1536w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/OK-re-encrypt-manuel.png 1775w\" sizes=\"auto, (max-width: 553px) 100vw, 553px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/vCenter-KMS-VM-1-1024x579.png\" alt=\"\" class=\"wp-image-677\" width=\"527\" height=\"297\" srcset=\"https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/vCenter-KMS-VM-1-1024x579.png 1024w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/vCenter-KMS-VM-1-300x170.png 300w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/vCenter-KMS-VM-1-768x434.png 768w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/vCenter-KMS-VM-1.png 1330w\" sizes=\"auto, (max-width: 527px) 100vw, 527px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\" style=\"font-size:14px\">\n<li>Suppression de l&#8217;ancien NKP (garder le backup en cas de rollback)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"> <\/p>\n\n\n\n<h4 class=\"wp-block-heading has-colibri-color-1-color has-text-color\" style=\"font-size:14px\"><span style=\"text-decoration: underline\" class=\"underline\">M\u00e9thode PowerCLI (VM par VM):<\/span><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"font-size:14px\">Cette m\u00e9thode est la plus rapide, et surtout elle est mandatory si vous ne pouvez pas passer le KMS Externe en default c\u00f4t\u00e9 vCenter (pour une raison fonctionnelle ou technique par exemple).<\/p>\n\n\n\n<ul class=\"wp-block-list\" style=\"font-size:14px\">\n<li>Passage du KMS Externe en &#8220;default&#8221; depuis le vCenter<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/OK-KMS-vCenter-1024x475.png\" alt=\"\" class=\"wp-image-680\" width=\"840\" height=\"389\" srcset=\"https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/OK-KMS-vCenter-1024x475.png 1024w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/OK-KMS-vCenter-300x139.png 300w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/OK-KMS-vCenter-768x356.png 768w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/OK-KMS-vCenter-1536x712.png 1536w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/OK-KMS-vCenter-2048x949.png 2048w\" sizes=\"auto, (max-width: 840px) 100vw, 840px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\" style=\"font-size:14px\">\n<li>Migration des workloads sur le NKP vers le KMS Externe<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\" style=\"font-size:14px\"><code>Get-VM \"votreVM\"| Set-VMEncryptionKey -KMSClusterId \"votreKMS\"<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\" style=\"font-size:14px\">\n<li>Suppression de l&#8217;ancien NKP (garder le backup en cas de rollback)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"> <\/p>\n\n\n\n<h4 class=\"wp-block-heading has-colibri-color-1-color has-text-color\" style=\"font-size:16px\"><span style=\"text-decoration: underline\" class=\"underline\">Migration des workloads du KMS Externe vers le NKP<\/span><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"font-size:14px\">Petite subtilit\u00e9 sur la migration vers le NKP, la commande n&#8217;est plus la m\u00eame et d\u00e9pend cette fois-ci directement de VMware.PowerCLI<\/p>\n\n\n\n<pre class=\"wp-block-code\" style=\"font-size:14px\"><code>$NKP = Get-KeyProvider \"votreNKP\"\nSet-VM \"votreVM\" -KeyProvider $NKP<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h4 class=\"wp-block-heading has-colibri-color-1-color has-text-color\" style=\"font-size:16px\"><span style=\"text-decoration: underline\" class=\"underline\">Liste des tests effectu\u00e9s et de leur r\u00e9sultat<\/span><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"font-size:14px\">Avant de commencer, l&#8217;ensemble de ces tests ont \u00e9t\u00e9 effectu\u00e9s sur une infra de lab pour confirmer la faisabilit\u00e9\/non faisabilit\u00e9 des tests avant une MEP officielle. Ne soyez pas surpris si des tests paraissent &#8220;logique&#8221; et sont &#8220;KO&#8221;<\/p>\n\n\n\n<ul class=\"wp-block-list\" style=\"font-size:14px\">\n<li>Backup &#8220;NKP&#8221;\n<ul class=\"wp-block-list\">\n<li>Obligatoire pour l&#8217;utiliser =&gt; OK<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Shutdown du vCenter porteur du &#8220;NKP&#8221; (Per-VM)\n<ul class=\"wp-block-list\">\n<li>Aucune perte de connexion sur les VMs seulement si les hosts sont UP (KEK en cache sur l&#8217;ESXi), sinon dans le cas contraire nous avons un probl\u00e8me li\u00e9 au vSAN car l&#8217;host ne trouve plus le .vmx ce qui est logique parce que la VM est chiffr\u00e9e:<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"174\" src=\"https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/NKP-1-1024x174.png\" alt=\"\" class=\"wp-image-624\" srcset=\"https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/NKP-1-1024x174.png 1024w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/NKP-1-300x51.png 300w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/NKP-1-768x131.png 768w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/NKP-1-1536x262.png 1536w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/NKP-1.png 1573w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\" style=\"font-size:14px\">\n<li>Suppression &#8220;NKP&#8221; + reboot du vCenter (Cluster Encryption)\n<ul class=\"wp-block-list\">\n<li>Comme le test pr\u00e9c\u00e9dent, aucune perte c\u00f4t\u00e9 VM sauf si reboot des hosts:<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"260\" src=\"https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/NKP2-1024x260.png\" alt=\"\" class=\"wp-image-638\" srcset=\"https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/NKP2-1024x260.png 1024w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/NKP2-300x76.png 300w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/NKP2-768x195.png 768w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/NKP2.png 1530w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\" style=\"font-size:14px\">\n<li>Suppression et restauration du &#8220;NKP&#8221;\n<ul class=\"wp-block-list\">\n<li>Les hosts se comportent correctement, les KEK sont bien pouss\u00e9es sur chaque ESXi et les VMs sont automatiquement d\u00e9chiffr\u00e9es:<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/NKP-3.png\" alt=\"\" class=\"wp-image-639\" width=\"192\" height=\"308\" srcset=\"https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/NKP-3.png 277w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/NKP-3-187x300.png 187w\" sizes=\"auto, (max-width: 192px) 100vw, 192px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\" style=\"font-size:14px\">\n<li>Restore du vCenter et du NKP via le VCSA Deploy (clean restore)\n<ul class=\"wp-block-list\">\n<li>Toutes les VMs peuvent \u00eatre dechiffr\u00e9es apr\u00e8s que le NKP soit bien reconnu<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Cr\u00e9ation d&#8217;une VM sur un vCenter porteur d&#8217;un NKP puis migration de cette VM sur un vCenter n&#8217;ayant pas le NKP source:<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/nkp4-1024x686.png\" alt=\"\" class=\"wp-image-641\" width=\"495\" height=\"331\" srcset=\"https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/nkp4-1024x686.png 1024w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/nkp4-300x201.png 300w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/nkp4-768x515.png 768w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/nkp4-1536x1029.png 1536w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/nkp4.png 1677w\" sizes=\"auto, (max-width: 495px) 100vw, 495px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\" style=\"font-size:14px\">\n<li>Import du NKP source:<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/nkp5-1024x853.png\" alt=\"\" class=\"wp-image-642\" width=\"519\" height=\"431\" srcset=\"https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/nkp5-1024x853.png 1024w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/nkp5-300x250.png 300w\" sizes=\"auto, (max-width: 519px) 100vw, 519px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/nkp6-1024x707.png\" alt=\"\" class=\"wp-image-643\" width=\"520\" height=\"358\" srcset=\"https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/nkp6-1024x707.png 1024w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/nkp6-300x207.png 300w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/nkp6-768x530.png 768w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/nkp6-1536x1060.png 1536w, https:\/\/kdslabs.fr\/wp-content\/uploads\/2023\/03\/nkp6.png 1756w\" sizes=\"auto, (max-width: 520px) 100vw, 520px\" \/><\/figure>\n\n\n\n<h4 class=\"wp-block-heading has-colibri-color-1-color has-text-color\" style=\"font-size:14px\"><span style=\"text-decoration: underline\" class=\"underline\">Conclusion<\/span><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"font-size:14px\">Nous avons vu comment migrer ses workloads d&#8217;un KMS Externe vers un NKP (ou inversement).<br>Avant toute chose rappelez-vous que les pr\u00e9requis cit\u00e9s en d\u00e9but d&#8217;article sont tr\u00e8s important, un rollback dans le cadre d&#8217;une migration est tr\u00e8s critique (perte d&#8217;acc\u00e8s possible aux workloads). C&#8217;est d&#8217;ailleurs ce que nous allons voir en partie 2<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"font-size:12px\"><strong><span style=\"text-decoration: underline\" class=\"underline\">Sources:<\/span><\/strong><br>vSAN Encryption Services<br><a href=\"https:\/\/core.vmware.com\/resource\/vsan-encryption-services\">https:\/\/core.vmware.com\/resource\/vsan-encryption-services<\/a><br>How vSphere Virtual Machine Encryption Protects Your Environment<br><a href=\"https:\/\/docs.vmware.com\/en\/VMware-vSphere\/7.0\/com.vmware.vsphere.security.doc\/GUID-8D7D09AC-8579-4A33-9449-8E8BA49A3003.html\">https:\/\/docs.vmware.com\/en\/VMware-vSphere\/7.0\/com.vmware.vsphere.security.doc\/GUID-8D7D09AC-8579-4A33-9449-8E8BA49A3003.html<\/a><br>Using Encryption in a vSAN Cluster<br><a href=\"https:\/\/docs.vmware.com\/en\/VMware-vSphere\/7.0\/com.vmware.vsphere.vsan.doc\/GUID-F3B2714F-3406-48E7-AC2D-3677355C94D3.html \">https:\/\/docs.vmware.com\/en\/VMware-vSphere\/7.0\/com.vmware.vsphere.vsan.doc\/GUID-F3B2714F-3406-48E7-AC2D-3677355C94D3.html <\/a><br>Rekey an Encrypted Virtual Machine Using the CLI<a href=\"\nhttps:\/\/docs.vmware.com\/en\/VMware-vSphere\/8.0\/vsphere-security\/GUID-E24D65FA-88F0-4724-AAC3-32BCCC2BEC28.html \"><br>https:\/\/docs.vmware.com\/en\/VMware-vSphere\/8.0\/vsphere-security\/GUID-E24D65FA-88F0-4724-AAC3-32BCCC2BEC28.html <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Migration des workloads chiffr\u00e9s sur le Native Key Provider (NKP) vers un External KMS<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[24,15,18],"tags":[25,26,23,22,21],"class_list":["post-620","post","type-post","status-publish","format-standard","hentry","category-securite","category-vmware","category-vsphere-7-0","tag-article","tag-cli","tag-guide","tag-powershell","tag-vmware"],"_links":{"self":[{"href":"https:\/\/kdslabs.fr\/index.php\/wp-json\/wp\/v2\/posts\/620","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kdslabs.fr\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kdslabs.fr\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kdslabs.fr\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kdslabs.fr\/index.php\/wp-json\/wp\/v2\/comments?post=620"}],"version-history":[{"count":0,"href":"https:\/\/kdslabs.fr\/index.php\/wp-json\/wp\/v2\/posts\/620\/revisions"}],"wp:attachment":[{"href":"https:\/\/kdslabs.fr\/index.php\/wp-json\/wp\/v2\/media?parent=620"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kdslabs.fr\/index.php\/wp-json\/wp\/v2\/categories?post=620"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kdslabs.fr\/index.php\/wp-json\/wp\/v2\/tags?post=620"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}