Yeah most cloud providers have live migration and a reasonably-well-tested playbook for updating the node kernel + hypervisor.