Skip to content
masterclass Buddy
Start learning

DevOps · Concept

CircleCI

Use CircleCI's organization-scoped OIDC token to log in to Vault without storing a long-lived secret. Bind the Vault role to claims such as project, context, and branch, then read only the required secrets.

Last updated

Syntax

vault write auth/jwt/login role=<vault-role> jwt=$CIRCLE_OIDC_TOKEN_V2

In-depth API docs are only for subscribers: parameters, examples, common mistakes and interview practice.

Subscribe
  • CircleCI OIDC token v2
  • Vault JWT auth method
  • CircleCI contexts
  • bound_claims
  • AWS auth method
  • Azure auth method
  • GCP auth method
  • Kubernetes auth method

Source: Secure CircleCI secrets with HashiCorp Vault | Well-Architected Framework | HashiCorp Developer. Checked 2026-11-03.