How are updates applied to Tanzu Kubernetes clusters?

The cluster is shutdown, Update Manager applies patches to VMs, and the cluster is restarted.

Worker nodes are shutdown while Controllers are patched and restarted after the update.

New nodes are incrementally added with new Kubernetes versions so as a new node is added, an older node is removed.

A new cluster is completely configured and runs in parallel to the primary cluster prior to switchover.