The GKE Upgrade That Took Down Our Production Pods for 45 Minutes

What actually happens when you trust GKE's default upgrade settings without understanding surge upgrades, pod disruption budgets and how they interact, learned the hard way in production.