I would upgrade one node after the other:
* evict vm/lxc to other nodes before upgrading
* conduct the upgrade like you said (pv8to8 checks...) (and doing it on an empty node)
* migrate back a few "ginea pigs" vm ( to verify network...)
* once one node is upgraded and back on stage, empty...