From 973ce0649c91cc9af78ddedb4b256bfe597b3168 Mon Sep 17 00:00:00 2001
From: Cristian Magherusan-Stanciu <cristi.magherusan@gmail.com>
Date: Tue, 9 Jun 2026 09:55:17 -0700
Subject: [PATCH] ci: remove Infracost cost-estimate job

The cost-estimate job calls infracost/actions/setup with secrets.INFRACOST_API_KEY, which is not configured, so the job failed on every PR. It only surfaced after PRs were retargeted to main (ci.yml runs on PRs to main, not the former integration branch). The project does not use Infracost; removing the job. Note: if 'Cost Estimation' is a required status check in branch protection, remove it there too so PRs are not blocked waiting for a check that no longer runs.
---
 .github/workflows/ci.yml | 52 ----------------------------------------
 1 file changed, 52 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 33dbf2f00..7444797f4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -399,58 +399,6 @@ jobs:
         run: |
           docker-compose -f docker-compose.test.yml down -v
 
-  # Cost estimation with Infracost
-  cost-estimate:
-    name: Cost Estimation
-    runs-on: ubuntu-latest
-    if: github.event_name == 'pull_request'
-    permissions:
-      contents: read
-      pull-requests: write
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
-        with:
-          persist-credentials: false
-
-      - name: Setup Infracost
-        uses: infracost/actions/setup@d51fc54d23c9ad90f984b884257bd96dc2625067 # v4.1.0
-        with:
-          api-key: ${{ secrets.INFRACOST_API_KEY }}
-
-      - name: Checkout base branch
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
-        with:
-          persist-credentials: false
-          ref: '${{ github.event.pull_request.base.ref }}'
-
-      - name: Generate Infracost cost estimate baseline
-        run: |
-          infracost breakdown --path=terraform/environments \
-            --format=json \
-            --out-file=/tmp/infracost-base.json
-
-      - name: Checkout PR branch
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
-        with:
-          persist-credentials: false
-
-      - name: Generate Infracost diff
-        run: |
-          infracost diff --path=terraform/environments \
-            --format=json \
-            --compare-to=/tmp/infracost-base.json \
-            --out-file=/tmp/infracost.json
-
-      - name: Post Infracost comment
-        run: |
-          infracost comment github --path=/tmp/infracost.json \
-            --repo=$GITHUB_REPOSITORY \
-            --github-token=${{ github.token }} \
-            --pull-request=${{ github.event.pull_request.number }} \
-            --behavior=update
-
   # Assert that the Azure custom-role actions list is identical in the TF module
   # and the ARM onboarding template.  Fast (shell + jq only), so it always runs.
   # Path changes that trigger drift will be caught regardless of PR context.