diff --git a/cluster-stamp.json b/cluster-stamp.json
index 1cf4ba1b..056d5f4d 100644
--- a/cluster-stamp.json
+++ b/cluster-stamp.json
@@ -103,7 +103,7 @@
         }
     },
     "variables": {
-        "kubernetesVersion": "1.21.1",
+        "kubernetesVersion": "1.21.2",
 
         "networkContributorRole": "[concat(subscription().Id, '/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7')]",
         "monitoringMetricsPublisherRole": "[concat(subscription().Id, '/providers/Microsoft.Authorization/roleDefinitions/3913510d-42f4-4e42-8a64-420c390055eb')]",
diff --git a/cluster-stamp.v2.json b/cluster-stamp.v2.json
index ef2dfc25..40dfe7d8 100644
--- a/cluster-stamp.v2.json
+++ b/cluster-stamp.v2.json
@@ -103,7 +103,7 @@
         }
     },
     "variables": {
-        "kubernetesVersion": "1.21.1",
+        "kubernetesVersion": "1.21.2",
 
         "networkContributorRole": "[concat(subscription().Id, '/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7')]",
         "monitoringMetricsPublisherRole": "[concat(subscription().Id, '/providers/Microsoft.Authorization/roleDefinitions/3913510d-42f4-4e42-8a64-420c390055eb')]",
diff --git a/networking/hub-region.v2.json b/networking/hub-region.v2.json
index 5575d169..a887488b 100644
--- a/networking/hub-region.v2.json
+++ b/networking/hub-region.v2.json
@@ -660,10 +660,9 @@
                             "rules": [
                                 {
                                     "name": "ntp",
-                                    "description": "Network Time Protocol (NTP) time synchronization for image builder VMs, nodepool nodes, and jumpboxes.",
+                                    "description": "Network Time Protocol (NTP) time synchronization for image builder VMs and jumpboxes.",
                                     "sourceIpGroups": [
                                         "[resourceId('Microsoft.Network/ipGroups', variables('imageBuilderIpGroupName'))]",
-                                        "[resourceId('Microsoft.Network/ipGroups', variables('aksIpGroupName'))]",
                                         "[resourceId('Microsoft.Network/ipGroups', variables('aksJumpBoxIpGroupName'))]"
                                     ],
                                     "protocols": [
@@ -672,12 +671,9 @@
                                     "destinationPorts": [
                                         "123"
                                     ],
-                                    "destinationAddresses": [
-                                        "*"
-                                    ]/*,
                                     "destinationFqdns": [
                                         "ntp.ubuntu.com"
-                                    ]*/
+                                    ]
                                 }
                             ]
                         }