I still don't mind upgrading a k8s cluster on the UI, monitoring it's healthy and than patching the tf code for the newest minor version.