k8s-topology-spread-audit — your three replicas may be one failure domain

A Deployment with three replicas and no spread rules is one node drain away from a full outage. k8s-topology-spread-audit reads your workloads, checks whether anything actually forces the replicas apart, and tells you which ones only look highly available.