Please take note of the following instructions for upgrading to Kubernetes version v1.33: Clusters with version v1.33 have a new deny-all NetworkPolicy in the kube-system namespace. If you have deployed anything to this namespace, this update may cause to break your deployment. Please keep in mind that we cannot figure out how you use managed namespaces, such as kube-system, metallb-system and firewall. Therefore, we cannot guarantee that no breaking changes will occur in these namespaces. Avoid using these namespaces and create your own instead (except for deploying ClusterwideNetworkPolicy resources to firewall, which is what we expect users to do).