# Infisical Certificate Manager integration test

This test is opt-in and makes real requests only when all required environment
variables are present and `INFISICAL_TEST_CONFIRM_NON_PRODUCTION=true`.

```bash
pytest -m integration tests/integration/infisical
```

Use only a disposable Certificate Manager project and Machine Identity. The test
generates ephemeral RSA test material in memory. It never prints credentials,
PEM material, private keys, or Bearer tokens. Certificates created remotely may
remain if the API does not provide an explicitly verified delete endpoint.