calico: Update tigera-operator to v3.33.0.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Change-Id: Iff23ba159e1a8666842b601007340fbd58cbeb4c
diff --git a/calico-values.yaml b/calico-values.yaml
index 50ffa20..b532383 100644
--- a/calico-values.yaml
+++ b/calico-values.yaml
@@ -1,11 +1,15 @@
 # Values for the "calico" Helm release (projectcalico/tigera-operator) in
 # namespace tigera-operator.
 #
-# Upgrade: apply the chart's CRDs first (Helm does not upgrade them), then
-#   helm show crds projectcalico/tigera-operator --version vX \
-#     | kubectl apply --server-side --force-conflicts -f -
+# Upgrade: apply the projectcalico.org v1 CRDs first (Helm does not upgrade
+# them; since 3.32 they are no longer part of the chart), then upgrade:
+#   kubectl apply --server-side --force-conflicts -f \
+#     https://raw.githubusercontent.com/projectcalico/calico/vX/manifests/v1_crd_projectcalico_org.yaml
 #   helm upgrade calico projectcalico/tigera-operator --version vX \
 #     -n tigera-operator -f calico-values.yaml
+# Read the upgrade notes first: going from 3.31 to 3.32+, Typha had to be held
+# with the annotation unsupported.operator.tigera.io/ignore=true until
+# calico-node had rolled out.
 
 installation:
   calicoNetwork: