The update.yml would be a smaller set of tasks than most of the container roles run.yml. The container image needs to be updated in the container-startup-config, the container redefined, then restarted.