Use Personal Access Token instead of the deprecated API key

[4rthem]

#5

[genebean]

Looking forward to this getting merged :)

[pouicr]

Yes pleaaassseee 🙏

[jessesimpson36]

I didn't know about the gandi api key deprecation until I was helping my coworker set up cert manager with gandi. I'm lucky enough to still have my deprecated API key available to me, but new users don't have access to that.

I'd like to see this merged.

[jessesimpson36]

I saw this comment,

#2 (comment)

so looks like the maintainer might not be updating this project. ill have to check out the rfc linked because im not aware of any issues with gandi

[fungiboletus]

Hello, sorry I wasn't watching this repository by mistake, so I didn't get any notification.

Thanks for the pull-request. I still have domains at Gandi so I also need it 😄 I will merge it, tidy up a bit the project, and release a new version. I don't want to give a date, but soon.

I think the main issue with gandi is the new pricing model. Gandi was created many years ago with low prices. One of the founder wrote about how domains are a cash machine in a book named "Confessions d'un voleur" (confessions of a thief). Gandi new owners significantly increased the prices. Especially the dns renewal and the emails.

You can compare with a competitor from the same country:
https://www.gandi.net/en/domain/tld
and
https://www.bookmyname.com/offres.cgi

[jessesimpson36]

I recently learned that I can pay gandi for my domain, and then have cloudflare manage the DNS records for that domain. And because I'm doing that now, I no longer care for a cert-manager webhook for gandi, because the certs will come from the gandi plugin in cert-manager. The author of the PR may still want it though.

I'm not sure if that could be a potential solution for any of the commenters so far.

[genebean]

I'm still interested in this too, thanks for taking a look. I'm sad about the pricing changes, but am still happy with the service overall. Hopefully it doesn't change much more.

[Uncurlhalo]

I recently learned that I can pay gandi for my domain, and then have cloudflare manage the DNS records for that domain. And because I'm doing that now, I no longer care for a cert-manager webhook for gandi, because the certs will come from the gandi plugin in cert-manager. The author of the PR may still want it though.

I'm not sure if that could be a potential solution for any of the commenters so far.

How is this possible? While i'm not opposed to using the webhook for managing my cert's, it would be nice to use a plugin officially supported by the cert-manager project. If you have a link to some documentation on this I would appreciate it!

[jessesimpson36]

https://developers.cloudflare.com/registrar/get-started/transfer-domain-to-cloudflare/#before-transferring-a-domain-to-cloudflare

Create a Cloudflare account.
Add the domain you are transferring to your Cloudflare account.
Review your DNS records in the Cloudflare dashboard.
Change your DNS nameservers to Cloudflare.

I only had to follow these 4 steps. The most important part was changing the external nameservers part of gandi to point to cloudflare:

[SylvainTW]

Hello,

I’m facing the same issue with this project. Since Gandi API keys are now deprecated, I had to create a Personal Access Token (PAT), but the current version of this project does not support this authentication method.

As a result, I can no longer use the project in its current state. Supporting PATs is crucial for me to continue automating my certificates with Gandi. Thank you so much for your work, and I hope this PR can be merged soon.