When running below az aks command, it also (unexpectedly) upgrades the node image of all the nodes in all the node pools of this AKS cluster to the latest version...
az aks update \
--resource-group {resource_group} \
--subscription {subscription} \
--name {cluster_name} \
--load-balancer-outbound-ips {ip_entry}
Cannot find any AKS documentation that mentions why and how this would behave. It's expected that the command above only update the LB outbound IP but the unexpected node image upgrade which took much longer (i.e. one additional hour) to complete just a single and simple operation.