diff --git a/.changelog/685.txt b/.changelog/685.txt
new file mode 100644
index 00000000..116e9d42
--- /dev/null
+++ b/.changelog/685.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+Update Envoy version from 1.32.1 to 1.33.0
+```
diff --git a/Dockerfile b/Dockerfile
index c292452a..a90c67e6 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -11,7 +11,7 @@
 # prebuilt binaries in any other form.
 #
 ARG GOLANG_VERSION
-FROM envoyproxy/envoy-distroless:v1.32.1 as envoy-binary
+FROM envoyproxy/envoy-distroless:v1.33.0 as envoy-binary
 
 # Modify the envoy binary to be able to bind to privileged ports (< 1024).
 FROM debian:bullseye-slim AS setcap-envoy-binary
@@ -27,7 +27,7 @@ RUN apt-get update && apt install -y libcap2-bin
 RUN setcap CAP_NET_BIND_SERVICE=+ep /usr/local/bin/envoy
 RUN setcap CAP_NET_BIND_SERVICE=+ep /usr/local/bin/$BIN_NAME
 
-FROM hashicorp/envoy-fips:1.32.1-fips1402 as envoy-fips-binary
+FROM hashicorp/envoy-fips:1.33.0-fips1402 as envoy-fips-binary
 
 # Modify the envoy-fips binary to be able to bind to privileged ports (< 1024).
 FROM debian:bullseye-slim AS setcap-envoy-fips-binary