@spec flush_vault_cache(
  Tesla.Env.client(),
  keyword()
) ::
  {:ok, ExBifrost.Model.Logout200Response.t()}
  | {:ok, ExBifrost.Model.GetVirtualKeyQuota401Response.t()}
  | {:ok, ExBifrost.Model.BifrostError.t()}
  | {:error, Tesla.Env.t()}

Flush vault secret cache Clears the in-memory vault secret cache so the next resolution of every vault.<path> reference re-fetches from the configured backend (AWS Secrets Manager, GCP Secret Manager, or HashiCorp Vault). Use this after rotating a secret when you cannot wait for the hourly background refresh. In a clustered deployment the flush is broadcast to all peer nodes automatically — you only need to call this on one node. Returns 400 if vault integration is not enabled.

Parameters

• connection (ExBifrost.Connection): Connection to server
• opts (keyword): Optional parameters

Returns

• {:ok, ExBifrost.Model.Logout200Response.t} on success
• {:error, Tesla.Env.t} on failure