[ci:component:github.com/gardener/gardener-extension-provider-openstack:v1.33.0->v1.36.0]

[gardener-robot-ci-1]

Release Notes:

Update alpine base image to `v3.17.3`

Update golang to `v1.20.4`

Builder base image has been updated from `golang:1.19.6` to `golang:1.20.4`

Restrict security group ingress port-range to kubernetes node-port range

machineDeployment will have the label `topology.cinder.csi.openstack.org/zone` when created.

`node` field is removed from machine status. controller will now depend on the node label which already was present in the machine object's metadata. If you(or your controller) are dependent on the `status.node` field of the machine object, then kindly use `node` label under `.metadata.labels`

Add observability configuration for Manila CSI Driver. 

Revendor gardener to `v1.69.3`

Alpine has been updated to v1.18.2

Add topology awareness support for Manila

Terrafomer base image has been updated from `alpine:3.17.2` to `alpine:3.18.0`

Deletion of 'Driver.GenerateMachineClassForMigration'. Providers need to adapt to this.

add a bastion ingress rule in the worker node security group to establish the ssh connection to fit different networks.

The flags which went out-of-support in MCM v0.49.0 have been cleaned up from MCM deployment yaml.

CVE categorization for MCM has been added.

Included `UnavailableReplicas` in determining if a machine deployment status update is needed

Provider-extension will attempt to delete all kubernetes loadbalancers that were not cleaned up by the CCM on infrastructure deletion.

`CrashloopBackoff` machines will turn to `Running` quicker

Gardener dependency has been updated from `v1.59.1` to `v1.71.2`

Remove limits from critical control plane components.

Removal of the following flags (and corresponding fields in associated structs): 'machine-creation-timeout' 'machine-drain-timeout', 'machine-pv-detach-timeout', 'machine-health-timeout=10m', 'machine-safety-apiserver-statuscheck-timeout', 'machine-safety-apiserver-statuscheck-period', 'machine-safety-orphan-vms-period', 'machine-max-evict-retries', 'node-conditions', 'bootstrap-token-auth-extra-groups', 'delete-migrated-machine-class'. The MCM no longer accepts these flags since these are options handled by the Machine Controller invoked by platform specific provider launchers.

Machine object won't turn from `Pending`  to `Running` state if `node.gardener.cloud/critical-components-not-ready` taint is there on the corresponding node.

Support for migration of machineClass is dropped by the mcm-provider

The bastion with try to reserve Floating IPs from the router's external subnet

The provider-openstack extension does now support shoot clusters with Kubernetes version 1.27. You should consider the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md) before upgrading to 1.27. 

The `gardener-extension-admission-openstack` chart allows to optionally configure a projected volume based kubeconfig.

The `security.gardener.cloud/pod-security-enforce` annotation in the ControllerRegistration is set to `baseline`. With this, the pods running in the extension namespace should comply with `baseline` pod-security standard.

The following dependency is updated:
- github.com/gardener/gardener: v1.67.1 -> v1.71.0
- k8s.io/* : v0.26.2 -> v0.26.3
- sigs.k8s.io/controller-runtime: v0.14.5-> v0.14.6

With https://github.com/gardener/gardener-extension-provider-openstack/pull/297 provider-openstack migrated the volumesnapshot CRDs to a new dedicated ManagedResources. provider-openstack does now remove the ignored CRDs.
Before updating to this version of provider-openstack, make sure that the migration of the volumesnapshot CRDs from the `extension-controlplane-shoot` to the `extension-controlplane-shoot-crds`  ManagedResource completed. If the migration did not complete yet, GRM will interpret the removal of the CRDs as deletion and will delete the CRDs.

An edge case where all the machineSets were scaled down to zero has been dealt with.

Updated golang version to v1.19.4

Golang has been updated to v1.20.5

An issue causing nil pointer panic on scaleup of the machinedeployment along with trigger of rolling update, is fixed

Fix a bug in the bootstrap token creation that caused node to not be able to join the cluster due to an expired bootstrap token.

Using `kubectl get machines` will display `Node` of the corresponding machine as a column. If `-owide` flag is used then the corresponding `ProviderID` will also be displayed.

Fix rendering of CSI manila storageclass if creating infrastructure fails.

The following dependencies were updated:
  - registry.k8s.io/sig-storage/csi-provisioner v3.4.0 -> v3.4.1

CVE categorization for mcm-provider-openstack has been added.

Added new short names for machine(mc), machineClass(mcc), machineDeployment(mcd), and machineSet(mcs) resources.

The API generation now works again. Previously the API docs was generated to a location that was ignored by git and other API docs file was maintained.

Old and obsolete logging configurations are removed.

This extension is now compatible with the `MachineControllerManagerDeployment` feature gate of `gardenlet`.

Updated golang version to v1.19.2

If during a rolling update scale-up is done, MCM scales up only the new machineSet, while in case of scale-down the scale-down amount is split among old machineSets, in proportion to their sizes.

go version updated to 1.19.4 in pipeline and Dockerfile

MachineDeployment would now have `Progressing` condition even when no progress Deadline is specified. This condition would never go to the reason `ProgressDeadlineExceeded` in that case.

Revendor MCM to `v0.49.0`

Bump `k8s.io/*` dependencies to v1.26.2

Added proposal for hot-update of resources (instance/Nic/Disk)

The admission/validation component is now adapted such that it works well in garden cluster with enabled `NetworkPolicy` protection (default since `gardener/gardener@v1.71` when garden cluster is managed by `gardener-operator`).

Flow-based infrastructure reconciliation without Terraformer

All code related to the removed `APIServerSNI` feature gate of `gardenlet` has been removed from this extension.

Add missing network policy labels to extension controller pod template

`provider-openstack` no longer supports Seeds or Shoots with Кubernetes version < 1.22.

An edge case where outdated DesiredReplicas annotation blocked a rolling update is fixed.

Update cloud-provider-openstack images v1.26.2 -> v1.26.3

Allow changing share network section in `InfrastructureConfig` for existing cluster.

upgraded dependency:

github.com/gardener/machine-controller-manager -> v0.49.1

Update golang to `v1.20.4`

Update cloud-provider-openstack images v1.25.5 -> v1.25.6

[gardener-robot]

@gardener-robot-ci-1 Thank you for your contribution.