# Keamanan Pipeline CI/CD (DevOps) > Autentikasi OIDC, manajemen secrets, provenance SLSA, izin minimal, keamanan supply chain - 20 pertanyaan wawancara - Mid-Level - [Pertanyaan Wawancara: DevOps](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara.md) ## 1. Apa itu OIDC (OpenID Connect) dalam konteks pipeline CI/CD? **Jawaban** OIDC adalah protokol autentikasi yang memungkinkan pipeline CI/CD untuk diautentikasi ke penyedia cloud tanpa menggunakan secret statis. Alih-alih menyimpan credential berumur panjang, pipeline menukar token JWT yang ditandatangani dengan credential sementara. Pendekatan ini menghilangkan risiko terkait penyimpanan dan rotasi secret, sekaligus memberikan keterlacakan yang lebih baik melalui claim token yang mengidentifikasi workflow dan repository secara tepat. ## 2. Apa keuntungan utama dari External Secrets Operator di Kubernetes? **Jawaban** External Secrets Operator secara otomatis menyinkronkan secret dari manajer eksternal (Vault, AWS Secrets Manager, Azure Key Vault) ke Secrets Kubernetes native. Pendekatan ini memusatkan manajemen secret di sistem khusus sambil memungkinkan aplikasi mengonsumsi secret dengan cara standar. Ini juga memfasilitasi rotasi secret otomatis dan menghindari penyimpanan credential sensitif langsung di manifest Kubernetes atau repositori Git. ## 3. Apa arti prinsip least privilege dalam konteks pipeline CI/CD? **Jawaban** Prinsip least privilege adalah memberikan kepada pipeline hanya izin yang benar-benar diperlukan untuk menyelesaikan tugasnya. Misalnya, pipeline build hanya boleh memiliki hak baca pada kode sumber, sedangkan pipeline deployment hanya mengakses sumber daya di lingkungan target. Pendekatan ini membatasi kerusakan jika pipeline dikompromikan dan mengurangi permukaan serangan keseluruhan dari infrastruktur. ## 17 pertanyaan lagi tersedia - Apa itu SBOM (Software Bill of Materials)? - Mengapa menggunakan HashiCorp Vault daripada variabel lingkungan untuk menyimpan secret? Daftar gratis: https://sharpskill.dev/id/login ## Topik wawancara DevOps lainnya - [Kontrol Versi & Git](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/version-control-git.md): 20 pertanyaan, Junior - [Dasar-dasar Linux](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/linux-fundamentals.md): 22 pertanyaan, Junior - [Shell Scripting & Bash](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/shell-scripting-bash.md): 20 pertanyaan, Mid-Level - [Dasar-Dasar Networking](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/networking-basics.md): 22 pertanyaan, Junior - [Dasar-Dasar Docker](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/docker-fundamentals.md): 24 pertanyaan, Junior - [Dasar-Dasar CI/CD](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/ci-cd-fundamentals.md): 18 pertanyaan, Junior - [GitHub Actions](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/github-actions.md): 22 pertanyaan, Mid-Level - [GitLab CI/CD](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/gitlab-ci.md): 22 pertanyaan, Mid-Level - [Jenkins](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/jenkins.md): 22 pertanyaan, Mid-Level - [Dasar-dasar Kubernetes](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/kubernetes-basics.md): 26 pertanyaan, Mid-Level - [Networking Kubernetes](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/kubernetes-networking.md): 24 pertanyaan, Mid-Level - [Kubernetes Lanjutan](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/kubernetes-advanced.md): 24 pertanyaan, Mid-Level - [Ingress & API Gateway](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/ingress-api-gateway.md): 20 pertanyaan, Mid-Level - [Dasar-dasar Terraform](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/terraform-basics.md): 22 pertanyaan, Mid-Level - [Terraform Lanjutan](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/terraform-advanced.md): 22 pertanyaan, Mid-Level - [Ansible & Configuration Management](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/ansible-configuration.md): 20 pertanyaan, Mid-Level - [Dasar-Dasar AWS](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/aws-essentials.md): 26 pertanyaan, Mid-Level - [Dasar-Dasar Azure](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/azure-fundamentals.md): 22 pertanyaan, Mid-Level - [Dasar-Dasar GCP](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/gcp-fundamentals.md): 22 pertanyaan, Mid-Level - [Monitoring & Prometheus](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/monitoring-prometheus.md): 22 pertanyaan, Mid-Level - [Logging & ELK Stack](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/logging-elk.md): 20 pertanyaan, Mid-Level - [Alerting & Incident Response](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/alerting-incident-response.md): 20 pertanyaan, Mid-Level - [Cloud Identity & Secrets](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/cloud-identity-secrets.md): 22 pertanyaan, Mid-Level - [Helm & Kubernetes](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/helm-kubernetes.md): 20 pertanyaan, Mid-Level - [Keamanan Runtime & Cluster](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/runtime-cluster-security.md): 24 pertanyaan, Senior - [Container Supply Chain Security](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/container-supply-chain.md): 22 pertanyaan, Senior - [Service Mesh & Istio](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/service-mesh-istio.md): 24 pertanyaan, Senior - [GitOps & ArgoCD](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/gitops-argocd.md): 22 pertanyaan, Senior - [Progressive Delivery](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/progressive-delivery.md): 20 pertanyaan, Senior - [Observability Terdistribusi](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/observability-distributed.md): 22 pertanyaan, Senior - [Disaster Recovery & Backup](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/disaster-recovery.md): 20 pertanyaan, Senior - [Optimasi Performa](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/performance-optimization.md): 22 pertanyaan, Senior - [Optimasi Biaya Cloud](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/infrastructure-cost.md): 20 pertanyaan, Senior - [Prinsip SRE](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/sre-principles.md): 24 pertanyaan, Senior - [Chaos Engineering](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/chaos-engineering.md): 20 pertanyaan, Senior - [Platform Engineering](https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/platform-engineering.md): 22 pertanyaan, Senior --- Source: SharpSkill (https://sharpskill.dev), tech interview preparation for your real stack. HTML version of this page: https://sharpskill.dev/id/technologies/devops/pertanyaan-wawancara/cicd-pipeline-security