Your command will be:

While it causes downtime, it is often faster for the overall maintenance window because patches are applied to the shared binaries once rather than node-by-node.