{"id":94386,"date":"2020-09-16T07:43:35","date_gmt":"2020-09-16T05:43:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/google-dobavil-podderzhku-kubernetes-v-confidential-computing"},"modified":"2020-09-16T07:43:35","modified_gmt":"2020-09-16T05:43:35","slug":"google-dobavil-podderzhku-kubernetes-v-confidential-computing","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/google-dobavil-podderzhku-kubernetes-v-confidential-computing","title":{"rendered":"Google ka shtuar mb\u00ebshtetje p\u00ebr Kubernetes n\u00eb Computacionin e Besuesh\u00ebm","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

TL;DR<\/strong>: Tani mund t\u00eb ekzekutoni Kubernetes n\u00eb Confidential VMs<\/a><\/noindex> nga Google.<\/p>\n

<\/p>\n

\"Google<\/p>\n

<\/a><\/noindex><\/p>\n

Google sot (08.09.2020, sh\u00ebn. e p\u00ebrkthyesit<\/em>) n\u00eb eventin Cloud Next OnAir<\/a><\/noindex> njoftoi zgjerimin e linj\u00ebs s\u00eb produkteve t\u00eb saj me lan\u00e7imin e nj\u00eb sh\u00ebrbimi t\u00eb ri.<\/p>\n

<\/p>\n

Nyjet Confidential GKE u shtojn\u00eb m\u00eb shum\u00eb privat\u00ebsi ngarkesave t\u00eb pun\u00ebs q\u00eb ekzekutohen n\u00eb Kubernetes. N\u00eb korrik u lan\u00e7ua produkti i par\u00eb me emrin Confidential VMs<\/a><\/noindex>, nd\u00ebrsa sot k\u00ebto makina virtuale jan\u00eb tashm\u00eb t\u00eb disponueshme publikisht p\u00ebr t\u00eb gjith\u00eb.<\/p>\n

<\/p>\n

Confidential Computing \u00ebsht\u00eb nj\u00eb risi q\u00eb parashikon ruajtjen e t\u00eb dh\u00ebnave n\u00eb form\u00eb t\u00eb enkriptuar gjat\u00eb p\u00ebrpunimit t\u00eb tyre. Kjo \u00ebsht\u00eb hallka e fundit n\u00eb zinxhirin e enkriptimit t\u00eb t\u00eb dh\u00ebnave, pasi ofruesit e sh\u00ebrbimeve cloud tashm\u00eb i enkriptojn\u00eb t\u00eb dh\u00ebnat n\u00eb hyrje dhe n\u00eb dalje. Deri von\u00eb, t\u00eb dh\u00ebnat duhej t\u00eb dekriptoheshin gjat\u00eb p\u00ebrpunimit, dhe shum\u00eb specialist\u00eb e shohin k\u00ebt\u00eb si nj\u00eb boshll\u00ebk t\u00eb duksh\u00ebm n\u00eb fush\u00ebn e enkriptimit t\u00eb t\u00eb dh\u00ebnave.<\/p>\n

<\/p>\n

Nisma Confidential Computing e Google bazohet n\u00eb bashk\u00ebpunimin me konsorciumin Confidential Computing, nj\u00eb grup industrial q\u00eb promovon konceptin e \u00abTrusted Execution Environments\u00bb (TEEs). TEE \u00ebsht\u00eb nj\u00eb pjes\u00eb e mbrojtur e procesorit, ku t\u00eb dh\u00ebnat dhe kodi i ngarkuar jan\u00eb t\u00eb enkriptuara, \u00e7ka do t\u00eb thot\u00eb se pjes\u00ebt e tjera t\u00eb t\u00eb nj\u00ebjtit procesor nuk mund t\u00eb ken\u00eb qasje n\u00eb k\u00ebt\u00eb informacion.<\/p>\n

<\/p>\n

Confidential VMs nga Google funksionojn\u00eb n\u00eb makinat virtuale N2D, t\u00eb ekzekutuara n\u00eb procesor\u00ebt EPYC t\u00eb gjenerat\u00ebs s\u00eb dyt\u00eb nga AMD, q\u00eb p\u00ebrdorin teknologjin\u00eb Secure Encrypted Virtualization, e cila lejon izolimin e makinave virtuale nga hipervizori mbi t\u00eb cilin ekzekutohen. Garantohet q\u00eb t\u00eb dh\u00ebnat mbeten t\u00eb enkriptuara pavar\u00ebsisht m\u00ebnyr\u00ebs s\u00eb p\u00ebrdorimit t\u00eb tyre: ngarkesa pune, analitik\u00eb, k\u00ebrkesa p\u00ebr trajnimin e modeleve t\u00eb inteligjenc\u00ebs artificiale. K\u00ebto makina virtuale jan\u00eb krijuar p\u00ebr t\u00eb p\u00ebrmbushur nevojat e \u00e7do kompanie q\u00eb punon me t\u00eb dh\u00ebna konfidenciale n\u00eb sektor\u00eb t\u00eb rregulluar, si p.sh. industria bankare.<\/p>\n

<\/p>\n

Ndoshta edhe m\u00eb i r\u00ebnd\u00ebsish\u00ebm \u00ebsht\u00eb njoftimi p\u00ebr testimin e ardhsh\u00ebm beta t\u00eb nyjeve Confidential GKE, t\u00eb cilat, sipas Google, do t\u00eb prezantohen n\u00eb versionin e ardhsh\u00ebm 1.18 t\u00eb Google Kubernetes Engine<\/a><\/noindex> (GKE). GKE \u00ebsht\u00eb nj\u00eb mjedis i menaxhuar, i gatsh\u00ebm p\u00ebr p\u00ebrdorim n\u00eb prodhim, p\u00ebr ekzekutimin e kontejner\u00ebve ku vendosen pjes\u00eb t\u00eb aplikacioneve moderne q\u00eb mund t\u00eb funksionojn\u00eb n\u00eb disa mjedise kompjuterike. Kubernetes \u00ebsht\u00eb nj\u00eb mjet orkestrimi me burim t\u00eb hapur q\u00eb p\u00ebrdoret p\u00ebr menaxhimin e k\u00ebtyre kontejner\u00ebve.<\/p>\n

<\/p>\n

Shtimi i nyjeve Confidential GKE siguron nj\u00eb nivel m\u00eb t\u00eb lart\u00eb konfidencialiteti gjat\u00eb nisjes s\u00eb klaster\u00ebve GKE. Me zgjerimin e linj\u00ebs s\u00eb produkteve Confidential Computing, ne synonim t\u00eb ofronim nj\u00eb nivel t\u00eb ri
\nkonfidencialiteti dhe portabiliteti p\u00ebr ngarkesat e kontejnerizuara. Nyjet Confidential GKE t\u00eb Google jan\u00eb nd\u00ebrtuar mbi t\u00eb nj\u00ebjt\u00ebn teknologji si Confidential VMs dhe ju lejojn\u00eb t\u00eb enkriptoni t\u00eb dh\u00ebnat n\u00eb RAM me nj\u00eb \u00e7el\u00ebs enkriptimi unik p\u00ebr secil\u00ebn nyje, i krijuar dhe i menaxhuar nga procesori AMD EPYC. K\u00ebto nyje p\u00ebrdorin enkriptim harduerik t\u00eb memories RAM bazuar n\u00eb funksionin AMD SEV, q\u00eb do t\u00eb thot\u00eb se ngarkesat tuaja t\u00eb pun\u00ebs q\u00eb ekzekutohen n\u00eb k\u00ebto nyje do t\u00eb jen\u00eb t\u00eb enkriptuara gjat\u00eb funksionimit t\u00eb tyre.<\/p><\/blockquote>\n

Sunil Potti dhe Eyal Manor, inxhinier\u00eb t\u00eb teknologjive cloud, Google<\/em><\/p>\n

<\/p>\n

N\u00eb nyjet Confidential GKE, klient\u00ebt mund t\u00eb konfigurojn\u00eb klaster\u00ebt GKE n\u00eb m\u00ebnyr\u00eb q\u00eb pool-et e nyjeve t\u00eb nisen n\u00eb makinat virtuale Confidential VMs. E th\u00ebn\u00eb thjesht, \u00e7do ngarkes\u00eb pune q\u00eb ekzekutohet n\u00eb k\u00ebto nyje do t\u00eb enkriptohet gjat\u00eb p\u00ebrpunimit t\u00eb t\u00eb dh\u00ebnave.<\/p>\n

<\/p>\n

Shum\u00eb nd\u00ebrmarrjeve u duhet edhe m\u00eb shum\u00eb konfidencialitet gjat\u00eb p\u00ebrdorimit t\u00eb sh\u00ebrbimeve cloud publike sesa p\u00ebr ngarkesat lokale q\u00eb ekzekutohen n\u00eb infrastruktur\u00ebn e tyre, p\u00ebr t\u2019u mbrojtur nga keqb\u00ebr\u00ebsit. Duke zgjeruar linj\u00ebn e saj Confidential Computing, Google Cloud e ngre edhe m\u00eb lart k\u00ebt\u00eb standard, duke u dh\u00ebn\u00eb p\u00ebrdoruesve mund\u00ebsin\u00eb t\u00eb sigurojn\u00eb konfidencialitet p\u00ebr klaster\u00ebt GKE. Dhe duke pasur parasysh popullaritetin e Kubernetes, ky \u00ebsht\u00eb nj\u00eb hap ky\u00e7 p\u00ebrpara p\u00ebr industrin\u00eb, q\u00eb u jep kompanive m\u00eb shum\u00eb mund\u00ebsi p\u00ebr vendosjen e sigurt t\u00eb aplikacioneve t\u00eb gjenerat\u00ebs s\u00eb ardhshme n\u00eb cloud publik.<\/p><\/blockquote>\n

Holger Mueller, analist n\u00eb Constellation Research.<\/em><\/p>\n

<\/p>\n

Sh\u00ebnim:<\/strong> Kompania jon\u00eb m\u00eb 28\u201330 shtator nis nj\u00eb intensi t\u00eb p\u00ebrdit\u00ebsuar Kubernetes Baza<\/a><\/noindex> p\u00ebr ata q\u00eb ende nuk e njohin Kubernetes, por duan ta zbulojn\u00eb dhe t\u00eb fillojn\u00eb t\u00eb punojn\u00eb me t\u00eb. Pas k\u00ebtij eventi, m\u00eb 14\u201316 tetor ne nisim nj\u00eb Kubernetes Mega<\/a><\/noindex> p\u00ebr p\u00ebrdoruesit me p\u00ebrvoj\u00eb t\u00eb Kubernetes, p\u00ebr t\u00eb cil\u00ebt \u00ebsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb njohin t\u00eb gjitha zgjidhjet praktike m\u00eb t\u00eb fundit p\u00ebr pun\u00ebn me versionet e fundit t\u00eb Kubernetes dhe v\u00ebshtir\u00ebsit\u00eb e mundshme. N\u00eb Kubernetes Mega<\/a><\/noindex> do t\u00eb shqyrtojm\u00eb n\u00eb teori dhe n\u00eb praktik\u00eb holl\u00ebsit\u00eb e instalimit dhe konfigurimit t\u00eb nj\u00eb klasteri production-ready (\u201cthe-not-so-easy-way\u201d), si edhe mekanizmat p\u00ebr garantimin e siguris\u00eb dhe q\u00ebndrueshm\u00ebris\u00eb s\u00eb aplikacioneve.<\/p><\/blockquote>\n

P\u00ebrve\u00e7 k\u00ebsaj, Google njoftoi se Confidential VMs do t\u00eb marrin disa ve\u00e7ori t\u00eb reja, pasi nga sot b\u00ebhen p\u00ebrgjith\u00ebsisht t\u00eb disponueshme. P\u00ebr shembull, jan\u00eb shtuar raporte auditimi q\u00eb p\u00ebrmbajn\u00eb regjistra t\u00eb detajuar t\u00eb verifikimit t\u00eb integritetit t\u00eb firmware-it t\u00eb AMD Secure Processor, i p\u00ebrdorur p\u00ebr krijimin e \u00e7el\u00ebsave p\u00ebr \u00e7do instanc\u00eb t\u00eb Confidential VMs.<\/p>\n

<\/p>\n

Jan\u00eb shtuar gjithashtu m\u00eb shum\u00eb kontrolle p\u00ebr p\u00ebrcaktimin e t\u00eb drejtave specifike t\u00eb aksesit, si dhe Google ka shtuar mund\u00ebsin\u00eb p\u00ebr t\u00eb \u00e7aktivizuar \u00e7do makin\u00eb virtuale jo-konfidenciale brenda nj\u00eb projekti t\u00eb caktuar. Po ashtu, Google po i integron Confidential VMs me mekanizma t\u00eb tjer\u00eb t\u00eb ruajtjes s\u00eb konfidencialitetit p\u00ebr t\u00eb garantuar sigurin\u00eb.<\/p>\n

<\/p>\n

Mund t\u00eb p\u00ebrdorni nj\u00eb kombinim t\u00eb VPC-ve t\u00eb p\u00ebrbashk\u00ebta me rregulla firewall dhe kufizime t\u00eb politikave t\u00eb organizat\u00ebs p\u00ebr t\u00eb siguruar q\u00eb Confidential VMs t\u00eb mund t\u00eb shk\u00ebmbejn\u00eb t\u00eb dh\u00ebna me Confidential VMs t\u00eb tjera, edhe n\u00ebse funksionojn\u00eb n\u00eb projekte t\u00eb ndryshme. P\u00ebrve\u00e7 k\u00ebsaj, mund t\u00eb p\u00ebrdorni VPC Service Controls p\u00ebr t\u00eb p\u00ebrcaktuar kufirin e burimeve GCP p\u00ebr Confidential VMs tuaja.<\/p><\/blockquote>\n

Sunil Potti dhe Eyal Manor<\/em><\/p>\n

Burimi: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

TL;DR: \u0422\u0435\u043f\u0435\u0440\u044c \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c Kubernetes \u043d\u0430 Confidential VMs \u043e\u0442 Google. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0441\u0435\u0433\u043e\u0434\u043d\u044f (08.09.2020, \u043f\u0440\u0438\u043c. \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0447\u0438\u043a\u0430) \u043d\u0430 \u043c\u0435\u0440\u043e\u043f\u0440\u0438\u044f\u0442\u0438\u0438 Cloud Next OnAir \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 \u043b\u0438\u043d\u0435\u0439\u043a\u0438 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u043c \u043d\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430. \u0423\u0437\u043b\u044b Confidential GKE \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044e\u0442 \u0431\u043e\u043b\u044c\u0448\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u043e\u0441\u0442\u0438 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430\u043c, \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u043c \u0432 Kubernetes. \u0412 \u0438\u044e\u043b\u0435 \u0431\u044b\u043b \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u043f\u0435\u0440\u0432\u044b\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0442 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Confidential VMs, \u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":94387,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-94386","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google shtoi mb\u00ebshtetjen p\u00ebr Kubernetes n\u00eb Confidential Computing | ProHoster","description":"TL;DR: Tani mund t\u00eb nisni Kubernetes n\u00eb Confidential VMs t\u00eb Google.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/google-dobavil-podderzhku-kubernetes-v-confidential-computing","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u0434\u043e\u0431\u0430\u0432\u0438\u043b \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 Kubernetes \u0432 Confidential Computing | ProHoster","og:description":"TL;DR: \u0422\u0435\u043f\u0435\u0440\u044c \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c Kubernetes \u043d\u0430 Confidential VMs \u043e\u0442 Google.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/google-dobavil-podderzhku-kubernetes-v-confidential-computing","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-16T05:43:35+00:00","article:modified_time":"2020-09-16T05:43:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94386","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:27:34","updated":"2022-10-03 07:05:15","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/94386","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=94386"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/94386\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/94387"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=94386"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=94386"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=94386"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}