appconfigmgrv2/controllers/appenvconfigtemplatev2_controller.go (3 lines):
	- line 72: /* TODO: Check that app labels are valid via listing instances.
	- line 159: // TODO: Garbage collect istio/non-istio resources on namespace istio injection label update?
	- line 235: // TODO: Consider pulling from a kube ConfigMap resources instead.


appconfigmgrv2/controllers/istio_service_entries.go (2 lines):
	- line 72: // TODO: Validate no duplicate spec.allowedEgress.type fields.
	- line 97: // TODO: Validation on known types.


appconfigmgrv2/api/webhooks/builtins/pod_webhook.go (2 lines):
	- line 154: //TODO - Decide how to fail or just warning
	- line 284: // TODO - This did not work so we introduced a check and this might be outside vault


appconfigmgrv2/controllers/opa_constraints.go (1 line):
	- line 40: // TODO: What to do about owner?


appconfigmgrv2/controllers/network_policies.go (1 line):
	- line 139: // TODO: What to do with namespace? You can only select namespaces by labels,


appconfigmgrv2/controllers/config.go (1 line):
	- line 35: // TODO: Update this to be longer for production.


builder/kubebuilder-build/utils/acmsplit/main.go (1 line):
	- line 151: //TODO - This could use a shared utitlity