Answer
Check your database connection string in the installation values file for a DNS hostname where a CIDR/IP block is expected — a hostname used where the network policy needs a static IP/CIDR produces exactly this kind of invalid-CIDR validation error, and switching to the resolved static IP has resolved it.