diff --git a/pipelines/dockerfile-builders/pipeline.yml b/pipelines/dockerfile-builders/pipeline.yml
index ebe863afe..ea71d0e2a 100644
--- a/pipelines/dockerfile-builders/pipeline.yml
+++ b/pipelines/dockerfile-builders/pipeline.yml
@@ -41,12 +41,12 @@ meta:
     BUILD_ARG_GO_VERSION: '1.24.3'
     # Choose which version of sigs.k8s.io/controller-tools/cmd/controller-gen to install
     # in the codegen container images.
-    BUILD_ARG_CONTROLLER_GEN_VERSION: 0.17.2
+    BUILD_ARG_CONTROLLER_GEN_VERSION: 0.18.0
     # Choose which version of github.com/elastic/crd-ref-docs to install in the codegen
     # container images. We use a commit sha instead of a release semver because this project
     # does not create releases very often. They seem to only release 1-2 times per year, but
     # commit to main more often.
-    BUILD_ARG_CRD_REF_DOCS_COMMIT_SHA: 33be403
+    BUILD_ARG_CRD_REF_DOCS_COMMIT_SHA: ade917a
 
 resources:
 
@@ -252,6 +252,16 @@ resources:
       password: ((ci-ghcr-pusher-token))
       tag: latest
 
+  - name: k8s-code-generator-1.33-image-ghcr
+    type: registry-image
+    icon: docker
+    <<: *check-every-for-image
+    source:
+      repository: ((ci-ghcr-registry))/k8s-code-generator-1.33
+      username: ((ci-ghcr-pusher-username))
+      password: ((ci-ghcr-pusher-token))
+      tag: latest
+
   - name: k8s-code-generator-dockerfile
     type: git
     icon: github
@@ -840,7 +850,7 @@ jobs:
             - path: cache
           params:
             CONTEXT: k8s-code-generator-dockerfile/dockerfiles/k8s-code-generator
-            BUILD_ARG_K8S_PKG_VERSION: 0.30.10
+            BUILD_ARG_K8S_PKG_VERSION: 0.30.12
             <<: *codegen-versions
             OUTPUT_OCI: true # needed for building multi-arch images
             IMAGE_PLATFORM: "linux/amd64,linux/arm64" # build a multi-arch images which includes these platforms
@@ -876,7 +886,7 @@ jobs:
             - path: cache
           params:
             CONTEXT: k8s-code-generator-dockerfile/dockerfiles/k8s-code-generator
-            BUILD_ARG_K8S_PKG_VERSION: 0.31.6
+            BUILD_ARG_K8S_PKG_VERSION: 0.31.8
             <<: *codegen-versions
             OUTPUT_OCI: true # needed for building multi-arch images
             IMAGE_PLATFORM: "linux/amd64,linux/arm64" # build a multi-arch images which includes these platforms
@@ -912,7 +922,7 @@ jobs:
         - path: cache
         params:
           CONTEXT: k8s-code-generator-dockerfile/dockerfiles/k8s-code-generator
-          BUILD_ARG_K8S_PKG_VERSION: 0.32.2
+          BUILD_ARG_K8S_PKG_VERSION: 0.32.4
           <<: *codegen-versions
           OUTPUT_OCI: true # needed for building multi-arch images
           IMAGE_PLATFORM: "linux/amd64,linux/arm64" # build a multi-arch images which includes these platforms
@@ -922,6 +932,42 @@ jobs:
       params:
         image: image/image # this is a directory for OCI (multi-arch images)
 
+  - name: build-k8s-code-generator-1.33
+    public: true # all logs are publicly visible
+    serial: true
+    plan:
+    - get: k8s-code-generator-dockerfile
+      trigger: true
+    - get: daily
+      trigger: true
+    - task: build-image
+      privileged: true
+      config:
+        platform: linux
+        image_resource:
+          type: registry-image
+          source:
+            repository: concourse/oci-build-task
+        inputs:
+        - name: k8s-code-generator-dockerfile
+        outputs:
+        - name: image
+        run:
+          path: build
+        caches:
+        - path: cache
+        params:
+          CONTEXT: k8s-code-generator-dockerfile/dockerfiles/k8s-code-generator
+          BUILD_ARG_K8S_PKG_VERSION: 0.33.0
+          <<: *codegen-versions
+          OUTPUT_OCI: true # needed for building multi-arch images
+          IMAGE_PLATFORM: "linux/amd64,linux/arm64" # build a multi-arch images which includes these platforms
+    - put: k8s-code-generator-1.33-image-ghcr
+      get_params:
+        format: oci # needed for multi-arch images
+      params:
+        image: image/image # this is a directory for OCI (multi-arch images)
+
   - name: build-test-forward-proxy
     public: true # all logs are publicly visible
     serial: true