Merge pull request #88966 from PixelRobots/rh-faq-update

add aks addon update faq

Author: Court72

articles/aks/faq.md

@@ -305,6 +305,10 @@ AKS doesn't apply Network Security Groups (NSGs) to its subnet and doesn't modif
 
 AKS nodes run the "chrony" service which pulls time from the localhost.  Containers running on pods get the time from the AKS nodes.  Applications launched inside a container use time from the container of the pod.
 
+## How are AKS addons updated?
+
+Any patch, including security patches, is automatically applied to the AKS cluster. Anything bigger than a patch, like major or minor version changes (which can have breaking changes to your deployed objects), is updated when you update your cluster if a new release is available. You can find when a new release is available by visiting the [AKS release notes](https://github.com/Azure/AKS/releases). 
+
 <!-- LINKS - internal -->
 
 [aks-upgrade]: ./upgrade-cluster.md