{"id":13512,"date":"2019-12-01T21:44:20","date_gmt":"2019-12-01T21:44:20","guid":{"rendered":"https:\/\/www.cloudiqtech.com\/?p=13512"},"modified":"2019-12-09T13:50:42","modified_gmt":"2019-12-09T13:50:42","slug":"implementing-azure-ad-pod-identity-in-aks-cluster","status":"publish","type":"post","link":"https:\/\/www.cloudiqtech.com\/implementing-azure-ad-pod-identity-in-aks-cluster\/","title":{"rendered":"Implementing Azure AD Pod Identity in AKS Cluster"},"content":{"rendered":"\n<p>As organizations start to create and\nmaintain clusters in AKS (Azure Kubernetes Service), they also need to use\ncloud-based identity and access management service to access other Azure cloud\nresources and services. The Azure Active Directory (AAD) pod identity is a service\nthat gives users this control by assigning identities to individual pods. &nbsp;<\/p>\n\n\n\n<p>Without these controls, accounts may get\naccess to resources and services they don&#8217;t require. And it can also become\nhard for IT teams to track which set of credentials were used to make changes.<\/p>\n\n\n\n<p>Azure AD Pod identity is just one small part of the container and Kubernetes management process and as you delve deeper, you will realize the true power that Kubernetes and Containers bring to your DevOps ecosystem. <\/p>\n\n\n\n<p>Here is a more detailed look at how to use AAD pod identity for connecting pods in AKS cluster with Azure Key Vault.<\/p>\n\n\n\n<h5 id='pod-identity'  id=\"boomdevs_1\" ><strong>Pod Identity<\/strong><\/h5>\n\n\n\n<p>Integrate your key management system with Kubernetes using pod identity. Secrets, certificates, and keys in a key management system become a volume accessible to pods. The volume is mounted into the pod, and its data is available directly in the container file system for your application.<\/p>\n\n\n\n<p>On an existing AKS cluster &#8211;<\/p>\n\n\n\n<p>Deploy Key Vault FlexVolume to your AKS cluster with this command:<\/p>\n\n\n\n<ul><li>kubectl create -f https:\/\/raw.githubusercontent.com\/Azure\/kubernetes-keyvault-flexvol\/master\/deployment\/kv-flexvol-installer.yaml<\/li><\/ul>\n\n\n\n<h5 id='1-create-the-deployment'  id=\"boomdevs_2\" >1. <strong>Create the Deployment<\/strong><\/h5>\n\n\n\n<p>Run this command to create the&nbsp;<code>aad-pod-identity<\/code>&nbsp;deployment on an RBAC-enabled cluster:<\/p>\n\n\n\n<ul><li>kubectl\napply -f https:\/\/raw.githubusercontent.com\/Azure\/aad-pod-identity\/master\/deploy\/infra\/deployment-rbac.yaml<\/li><\/ul>\n\n\n\n<p>Or run this command to deploy to a non-RBAC cluster:<\/p>\n\n\n\n<ul><li>kubectl\napply -f https:\/\/raw.githubusercontent.com\/Azure\/aad-pod-identity\/master\/deploy\/infra\/deployment.yaml<\/li><\/ul>\n\n\n\n<h5 id='2-create-an-azure-identity'  id=\"boomdevs_3\" ><strong>2. Create an Azure Identity<\/strong><\/h5>\n\n\n\n<p><strong>Create azure managed identity<\/strong><\/p>\n\n\n\n<p>Command:- az identity create -g <strong>ResourceGroupNameOfAKsService<\/strong> -n aks-pod-identity<strong>(ManagedIdentity)<\/strong><\/p>\n\n\n\n<p>Output:-&nbsp;&nbsp; <\/p>\n\n\n\n<pre class=\"wp-block-code language-markup line-numbers\"><code>{\n\"clientId\": \"xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx \",\n\"clientSecretUrl\": \"https:\/\/control-westus.identity.azure.net\/subscriptions\/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx\/resourcegroups\/aks_dev_rg_wu\/providers\/Microsoft.ManagedIdentity\/userAssignedIdentities\/aks-pod-identity\/credentials?tid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx&amp;oid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxx&amp;aid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx \",\n\"id\": \"\/subscriptions\/xxxxxxxx-xxxx-XXXX-XXXX-XXXXXXXXXXXX\/resourcegroups\/aks_dev_rg_wu\/providers\/Microsoft.ManagedIdentity\/userAssignedIdentities\/aks-pod-identity\",\n\"location\": \"westus\",\n\"name\": \"aks-pod-identity\",\n\"principalId\": \"XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX\",\n\"resourceGroup\": \"au10515_aks_dev_rg_wu\",\n\"tags\": {},\n\"tenantId\": XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXX \",\n\"type\": \"Microsoft.ManagedIdentity\/userAssignedIdentities\"\n}\n<\/code><\/pre>\n\n\n\n<p><strong>Assign Cluster SPN Role<\/strong><\/p>\n\n\n\n<p>Command for Getting AKSServicePrincipalID:- az aks show -g &lt;resourcegroup&gt; -n &lt;name&gt; &#8211;query servicePrincipalProfile.clientId -o tsv<\/p>\n\n\n\n<p>Command:-az role assignment create &#8211;role &#8220;Managed Identity Operator&#8221; &#8211;assignee &lt;AKSServicePrincipalId&gt; &#8211;scope &lt; ID of Managed identity&gt;<\/p>\n\n\n\n<p><strong>Assign Azure Identity Roles<\/strong><\/p>\n\n\n\n<p>Command:- az role assignment create &#8211;role Reader &#8211;assignee &lt;Principal ID of Managed identity&gt; &#8211;scope &lt;KeyVault Resource ID&gt;<\/p>\n\n\n\n<p><strong>Set policy to access keys in your Key Vault<\/strong><\/p>\n\n\n\n<p>Command:-&nbsp;az keyvault set-policy -n dev-kv &#8211;key-permissions get &#8211;spn&nbsp; &lt;Client ID of Managed identity&gt;<\/p>\n\n\n\n<p><strong>Set policy to access secrets in your Key Vault<\/strong><\/p>\n\n\n\n<p>Command:- az keyvault set-policy -n dev-kv &#8211;secret-permissions get &#8211;spn &lt;Client ID of Managed identity&gt;<\/p>\n\n\n\n<p><strong>Set policy to access certs in your Key Vault<\/strong><\/p>\n\n\n\n<p>Command:- az keyvault set-policy -n dev-kv &#8211;certificate-permissions get \u2013spn &lt;Client ID of Managed identity&gt;<\/p>\n\n\n\n<h5 id='3-install-the-azure-identity'  id=\"boomdevs_4\" >3. <strong>Install the Azure Identity<\/strong><\/h5>\n\n\n\n<p>Save this Kubernetes manifest to a file named aadpodidentity.yaml:<\/p>\n\n\n\n<pre class=\"wp-block-code language-markup line-numbers\"><code>apiVersion: \"aadpodidentity.k8s.io\/v1\"\nkind: AzureIdentity\nmetadata:\nname: &lt;a-idname>\nspec:\ntype: 0\nResourceID: \/subscriptions\/&lt;subid>\/resourcegroups\/&lt;resourcegroup>\/providers\/Microsoft.ManagedIdentity\/userAssignedIdentities\/&lt;name>\nClientID: &lt;clientId><\/code><\/pre>\n\n\n\n<p>Replace the\nplaceholders with your user identity values. Set type: 0 for user-assigned MSI\nor type: 1 for Service Principal.<\/p>\n\n\n\n<p>Finally, save\nyour changes to the file, then create the AzureIdentity resource in your\ncluster:<\/p>\n\n\n\n<p>kubectl apply -f aadpodidentity.yaml<\/p>\n\n\n\n<h5 id='4-install-the-azure-identity-binding'  id=\"boomdevs_5\" >4. Install the Azure Identity Binding<\/h5>\n\n\n\n<p>Save this Kubernetes manifest to a file named aadpodidentitybinding.yaml:<\/p>\n\n\n\n<pre class=\"wp-block-code language-markup line-numbers\"><code>apiVersion: \"aadpodidentity.k8s.io\/v1\"\nkind: AzureIdentityBinding\nmetadata:\n  name: demo1-azure-identity-binding\nspec:\n  AzureIdentity: &lt;a-idname>\n  Selector: &lt;label value to match><\/code><\/pre>\n\n\n\n<p>Replace the\nplaceholders with your values. Ensure that the AzureIdentity name matches the\none in aadpodidentity.yaml.<\/p>\n\n\n\n<p>Finally, save\nyour changes to the file, then create the AzureIdentityBinding resource in your\ncluster:<\/p>\n\n\n\n<p>kubectl apply -f aadpodidentitybinding.yaml<\/p>\n\n\n\n<h5 id='sample-nginx-deployment-for-accessing-key-vault-secret-using-pod-identity'  id=\"boomdevs_6\" ><strong>Sample Nginx Deployment for accessing key vault secret using Pod Identity<\/strong><\/h5>\n\n\n\n<p>Save this sample nginx pod manifest file named nginx-pod.yaml:<\/p>\n\n\n\n<pre class=\"wp-block-code language-markup line-numbers\"><code>apiVersion: v1\nkind: Pod\nmetadata:\n  labels:\n    app: nginx-flex-kv-podid\n    aadpodidbinding: \n  name: nginx-flex-kv-podid\nspec:\n  containers:\n  - name: nginx-flex-kv-podid\n    image: nginx\n    volumeMounts:\n    - name: test\n      mountPath: \/kvmnt\n      readOnly: true\n  volumes:\n  - name: test\n    flexVolume:\n      driver: \"azure\/kv\"\n      options:\n        usepodidentity: \"true\"         # [OPTIONAL] if not provided, will default to \"false\"\n        keyvaultname: \"\"               # the name of the KeyVault\n        keyvaultobjectnames: \"\"        # list of KeyVault object names (semi-colon separated)\n        keyvaultobjecttypes: secret    # list of KeyVault object types: secret, key or cert (semi-colon separated)\n        keyvaultobjectversions: \"\"     # [OPTIONAL] list of KeyVault object versions (semi-colon separated), will get latest if empty\n        resourcegroup: \"\"              # the resource group of the KeyVault\n        subscriptionid: \"\"             # the subscription ID of the KeyVault\n        tenantid: \"\"            # the tenant ID of the KeyVault<\/code><\/pre>\n\n\n\n<h5 id='azure-ad-pod-identity-points-to-remember-when-implementing-in-cluster'  id=\"boomdevs_7\" ><strong>Azure AD Pod Identity points to remember when implementing in cluster<\/strong><\/h5>\n\n\n\n<ul><li>Azure AD Pod Identity is currently bound to the default namespace. Deploying an Azure Identity and it\u2019s binding to other namespaces, will not work!<\/li><li>Pods from all namespaces can be executed in the context of an Azure Identity deployed to the default namespace (related to point 1)<\/li><li>Every Pod Developer can add the&nbsp;aadpodidbinding&nbsp;label to his\/her pod and use your Azure Identity<\/li><li>Azure Identity Binding is not using default Kubernetes label selection mechanism<\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>As organizations start to create and maintain clusters in AKS (Azure Kubernetes Service), they also need to use cloud-based identity and access management service to access other Azure cloud resources and services. The Azure Active Directory (AAD) pod identity is a service that gives users this control by assigning identities to individual pods. &nbsp; Without [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":13694,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false},"categories":[29],"tags":[76],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v18.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Implementing Azure AD Pod Identity in AKS Cluster | CloudIQ Tech<\/title>\n<meta name=\"description\" content=\"Cloud-based identity and access management service becomes a necessity for connecting pods in AKS cluster to access other Azure cloud resources and services. The simple solution \u2013 Azure AD Pod Identity.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.cloudiqtech.com\/implementing-azure-ad-pod-identity-in-aks-cluster\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Implementing Azure AD Pod Identity in AKS Cluster | CloudIQ Tech\" \/>\n<meta property=\"og:description\" content=\"Cloud-based identity and access management service becomes a necessity for connecting pods in AKS cluster to access other Azure cloud resources and services. The simple solution \u2013 Azure AD Pod Identity.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.cloudiqtech.com\/implementing-azure-ad-pod-identity-in-aks-cluster\/\" \/>\n<meta property=\"og:site_name\" content=\"CloudIQ Tech\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/cloudiqtechnologies\/\" \/>\n<meta property=\"article:published_time\" content=\"2019-12-01T21:44:20+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-12-09T13:50:42+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.cloudiqtech.com\/wp-content\/uploads\/2019\/10\/AKS-Cluster-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"850\" \/>\n\t<meta property=\"og:image:height\" content=\"420\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@cloudiqtech\" \/>\n<meta name=\"twitter:site\" content=\"@cloudiqtech\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Veeramani G\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.cloudiqtech.com\/#website\",\"url\":\"https:\/\/www.cloudiqtech.com\/\",\"name\":\"CloudIQ Tech\",\"description\":\"Cloud Consulting and Solutioning Experts\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.cloudiqtech.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.cloudiqtech.com\/implementing-azure-ad-pod-identity-in-aks-cluster\/#primaryimage\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/www.cloudiqtech.com\/wp-content\/uploads\/2019\/10\/AKS-Cluster-1.png\",\"contentUrl\":\"https:\/\/www.cloudiqtech.com\/wp-content\/uploads\/2019\/10\/AKS-Cluster-1.png\",\"width\":850,\"height\":420},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.cloudiqtech.com\/implementing-azure-ad-pod-identity-in-aks-cluster\/#webpage\",\"url\":\"https:\/\/www.cloudiqtech.com\/implementing-azure-ad-pod-identity-in-aks-cluster\/\",\"name\":\"Implementing Azure AD Pod Identity in AKS Cluster | CloudIQ Tech\",\"isPartOf\":{\"@id\":\"https:\/\/www.cloudiqtech.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.cloudiqtech.com\/implementing-azure-ad-pod-identity-in-aks-cluster\/#primaryimage\"},\"datePublished\":\"2019-12-01T21:44:20+00:00\",\"dateModified\":\"2019-12-09T13:50:42+00:00\",\"author\":{\"@id\":\"https:\/\/www.cloudiqtech.com\/#\/schema\/person\/17c57cdddd6ec22c64dbf4e5654a16bb\"},\"description\":\"Cloud-based identity and access management service becomes a necessity for connecting pods in AKS cluster to access other Azure cloud resources and services. The simple solution \u2013 Azure AD Pod Identity.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.cloudiqtech.com\/implementing-azure-ad-pod-identity-in-aks-cluster\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.cloudiqtech.com\/implementing-azure-ad-pod-identity-in-aks-cluster\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.cloudiqtech.com\/implementing-azure-ad-pod-identity-in-aks-cluster\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.cloudiqtech.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Implementing Azure AD Pod Identity in AKS Cluster\"}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.cloudiqtech.com\/#\/schema\/person\/17c57cdddd6ec22c64dbf4e5654a16bb\",\"name\":\"Veeramani G\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.cloudiqtech.com\/#personlogo\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/460b21ad1d6ef74cfa3bfc91b7942464?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/460b21ad1d6ef74cfa3bfc91b7942464?s=96&d=mm&r=g\",\"caption\":\"Veeramani G\"},\"url\":\"https:\/\/www.cloudiqtech.com\/author\/veera\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Implementing Azure AD Pod Identity in AKS Cluster | CloudIQ Tech","description":"Cloud-based identity and access management service becomes a necessity for connecting pods in AKS cluster to access other Azure cloud resources and services. The simple solution \u2013 Azure AD Pod Identity.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.cloudiqtech.com\/implementing-azure-ad-pod-identity-in-aks-cluster\/","og_locale":"en_US","og_type":"article","og_title":"Implementing Azure AD Pod Identity in AKS Cluster | CloudIQ Tech","og_description":"Cloud-based identity and access management service becomes a necessity for connecting pods in AKS cluster to access other Azure cloud resources and services. The simple solution \u2013 Azure AD Pod Identity.","og_url":"https:\/\/www.cloudiqtech.com\/implementing-azure-ad-pod-identity-in-aks-cluster\/","og_site_name":"CloudIQ Tech","article_publisher":"https:\/\/www.facebook.com\/cloudiqtechnologies\/","article_published_time":"2019-12-01T21:44:20+00:00","article_modified_time":"2019-12-09T13:50:42+00:00","og_image":[{"width":850,"height":420,"url":"https:\/\/www.cloudiqtech.com\/wp-content\/uploads\/2019\/10\/AKS-Cluster-1.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_creator":"@cloudiqtech","twitter_site":"@cloudiqtech","twitter_misc":{"Written by":"Veeramani G","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebSite","@id":"https:\/\/www.cloudiqtech.com\/#website","url":"https:\/\/www.cloudiqtech.com\/","name":"CloudIQ Tech","description":"Cloud Consulting and Solutioning Experts","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.cloudiqtech.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"ImageObject","@id":"https:\/\/www.cloudiqtech.com\/implementing-azure-ad-pod-identity-in-aks-cluster\/#primaryimage","inLanguage":"en-US","url":"https:\/\/www.cloudiqtech.com\/wp-content\/uploads\/2019\/10\/AKS-Cluster-1.png","contentUrl":"https:\/\/www.cloudiqtech.com\/wp-content\/uploads\/2019\/10\/AKS-Cluster-1.png","width":850,"height":420},{"@type":"WebPage","@id":"https:\/\/www.cloudiqtech.com\/implementing-azure-ad-pod-identity-in-aks-cluster\/#webpage","url":"https:\/\/www.cloudiqtech.com\/implementing-azure-ad-pod-identity-in-aks-cluster\/","name":"Implementing Azure AD Pod Identity in AKS Cluster | CloudIQ Tech","isPartOf":{"@id":"https:\/\/www.cloudiqtech.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.cloudiqtech.com\/implementing-azure-ad-pod-identity-in-aks-cluster\/#primaryimage"},"datePublished":"2019-12-01T21:44:20+00:00","dateModified":"2019-12-09T13:50:42+00:00","author":{"@id":"https:\/\/www.cloudiqtech.com\/#\/schema\/person\/17c57cdddd6ec22c64dbf4e5654a16bb"},"description":"Cloud-based identity and access management service becomes a necessity for connecting pods in AKS cluster to access other Azure cloud resources and services. The simple solution \u2013 Azure AD Pod Identity.","breadcrumb":{"@id":"https:\/\/www.cloudiqtech.com\/implementing-azure-ad-pod-identity-in-aks-cluster\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.cloudiqtech.com\/implementing-azure-ad-pod-identity-in-aks-cluster\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.cloudiqtech.com\/implementing-azure-ad-pod-identity-in-aks-cluster\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.cloudiqtech.com\/"},{"@type":"ListItem","position":2,"name":"Implementing Azure AD Pod Identity in AKS Cluster"}]},{"@type":"Person","@id":"https:\/\/www.cloudiqtech.com\/#\/schema\/person\/17c57cdddd6ec22c64dbf4e5654a16bb","name":"Veeramani G","image":{"@type":"ImageObject","@id":"https:\/\/www.cloudiqtech.com\/#personlogo","inLanguage":"en-US","url":"https:\/\/secure.gravatar.com\/avatar\/460b21ad1d6ef74cfa3bfc91b7942464?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/460b21ad1d6ef74cfa3bfc91b7942464?s=96&d=mm&r=g","caption":"Veeramani G"},"url":"https:\/\/www.cloudiqtech.com\/author\/veera"}]}},"_links":{"self":[{"href":"https:\/\/www.cloudiqtech.com\/wp-json\/wp\/v2\/posts\/13512"}],"collection":[{"href":"https:\/\/www.cloudiqtech.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cloudiqtech.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cloudiqtech.com\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cloudiqtech.com\/wp-json\/wp\/v2\/comments?post=13512"}],"version-history":[{"count":0,"href":"https:\/\/www.cloudiqtech.com\/wp-json\/wp\/v2\/posts\/13512\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cloudiqtech.com\/wp-json\/wp\/v2\/media\/13694"}],"wp:attachment":[{"href":"https:\/\/www.cloudiqtech.com\/wp-json\/wp\/v2\/media?parent=13512"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cloudiqtech.com\/wp-json\/wp\/v2\/categories?post=13512"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cloudiqtech.com\/wp-json\/wp\/v2\/tags?post=13512"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}