This should again be easy after we update Toolforge in T280402: Upgrade Toolforge Kubernetes to latest 1.20.
https://etherpad.wikimedia.org/p/WMCS-2021-11-10-paws-k8s-upgrade
JupyterHub does not use podpresets so we can just live patch https://gerrit.wikimedia.org/r/c/operations/puppet/+/724101 into the kubeadm-config configmap and update /etc/kubernetes/manifests/kube-apiserver.yaml on all control nodes