Upgrade Kubernetes to 1.33

[timtorChen]

Description

Kubernetes upgrade note.

• [x] Related PR(s):
  • https://github.com/timtorChen/homelab/pull/654

Kubernetes 1.33

Features

to Stable:

• Support backoffLimit on Jobs
• Support node-specifc restrictions on ServiceAccoun token
• Topology-aware routing and Service trafficDistribution: PreferClose are stable

to Beta

• Support for mounting images as volumes This feature opens the possibility of packaging application and extension separatly, as covered in the cnpg blog post

to Alpha

• Support fine-tune how CrashLoopBackOff
• Kubelet's on disk credential providers now support fetching image using Service Account

Deprecated

• Endpoints API is deprecated and replaced by EndpointSlices API

Upgrade process

Pre-upgrade Tasks

• [ ] Check Kubernetes cluster health

  talosctl health
  

• [ ] Backup etcd

  task kubernetes:etcd-backup:trigger
  

Upgrade execution

• [ ] Login to secrert provider

  aws sso login
  

• [ ] Upgrade control plane(s) first

  task talos:plan-pi4b-1
  task talos:apply-pi4b-1
  

• [ ] Upgrade worker(s)

  task talos:plan-nuc11tnhi50l-1
  task talos:apply-nuc11tnhi50l-1
  # continue to another worker
  

Post-upgrade verification

• [ ] Check Kubernetes cluster health again

  talosctl health
  

References

https://kubernetes.io/blog/2025/04/23/kubernetes-v1-33-release/