blueprints/gke/patterns/batch/manifest-templates/kueue.yaml (29 lines):
	- line 1847: TODO: Add other useful fields.
	- line 1920: TODO: Add other useful fields.
	- line 1956: TODO: Add other useful fields. apiVersion,
	- line 1976: TODO: Add other useful fields. apiVersion,
	- line 3332: TODO: Add other useful fields.
	- line 3405: TODO: Add other useful fields.
	- line 3441: TODO: Add other useful fields. apiVersion,
	- line 3461: TODO: Add other useful fields. apiVersion,
	- line 4728: TODO: Add other useful fields. apiVersion, kind,
	- line 4827: TODO: Add other useful fields.
	- line 4900: TODO: Add other useful fields.
	- line 4936: TODO: Add other useful fields. apiVersion,
	- line 4956: TODO: Add other useful fields. apiVersion,
	- line 6894: TODO: how do we prevent errors in the filesystem
	- line 7018: TODO: Add other useful fields. apiVersion,
	- line 7057: TODO: Add other useful fields. apiVersion,
	- line 7138: TODO: Add other useful fields. apiVersion,
	- line 7178: TODO: Add other useful fields. apiVersion,
	- line 7686: "ext4" if unspecified. TODO: how do we prevent
	- line 7754: TODO: Add other useful fields. apiVersion,
	- line 7792: TODO: how do we prevent errors in the filesystem
	- line 7913: TODO: how do we prevent errors in the filesystem
	- line 7957: TODO: Add other useful fields. apiVersion,
	- line 8149: TODO: Add other useful fields.
	- line 8323: TODO: Add other useful fields.
	- line 8426: TODO: how do we prevent errors in the filesystem
	- line 8461: TODO: Add other useful fields. apiVersion,
	- line 8507: TODO: Add other useful fields. apiVersion,
	- line 8640: TODO: Add other useful fields. apiVersion,


fast/project-templates/os-apt-registries/project.yaml (3 lines):
	- line 17: # TODO: edit and uncomment the following line to create the project in a folder
	- line 26: # TODO: edit the automation project and optionally edit resource names
	- line 43: # TODO: add instance service accounts that need access to the registries


fast/project-templates/secops-anonymization-pipeline/project.yaml (3 lines):
	- line 17: # TODO: edit and uncomment the following line to create the project in a folder
	- line 32: # TODO: edit the automation project and optionally edit resource names
	- line 50: # TODO: add instance service accounts that need access to the registries


modules/dataproc/outputs.tf (2 lines):
	- line 19: # FIXME: 2024-03-08: broken in provider
	- line 35: # FIXME: 2024-03-08: broken in provider


modules/project-factory/variables.tf (2 lines):
	- line 129: # TODO: allow defining notification channels via YAML files
	- line 133: # TODO: add KMS keys


blueprints/data-solutions/data-playground/main.tf (2 lines):
	- line 128: #TODO Remove and rely on 'ssh' tag once terraform-provider-google/issues/9273 is fixed
	- line 226: #TODO Uncomment once terraform-provider-google/issues/9273 is fixed


modules/project/cmek.tf (1 line):
	- line 23: # TODO: extend to support dependencies for all products


fast/stages/0-bootstrap/variables.tf (1 line):
	- line 387: # TODO: fix validation


fast/stages/1-resman/templates/workflow-gitlab.yaml (1 line):
	- line 43: # TODO: document project-level deploy key used to fetch modules


modules/project/outputs.tf (1 line):
	- line 124: # TODO: deprecate in favor of id


modules/artifact-registry/main.tf (1 line):
	- line 72: # TODO: open a bug on the provider for this permadiff


modules/vpc-sc/factory.tf (1 line):
	- line 130: # TODO: add checks that emulate the variable validations


fast/stages/0-bootstrap/organization.tf (1 line):
	- line 68: # TODO: add a check block to ensure our custom roles exist in the factory files


blueprints/cloud-operations/network-quota-monitoring/src/plugins/series-subnets.py (1 line):
	- line 80: # TODO: add counter functions for PSA


modules/compute-vm/variables.tf (1 line):
	- line 42: # TODO: size can be null when source_type is attach


modules/net-vpn-dynamic/main.tf (1 line):
	- line 133: # FIXME: can bgp_session_range be null?


modules/project/service-agents.tf (1 line):
	- line 81: # FIXME: granting roles to the non-primary agents listed below


modules/folder/variables-logging.tf (1 line):
	- line 38: # TODO: add support for CMEK


modules/organization/variables-logging.tf (1 line):
	- line 38: # TODO: add support for CMEK


modules/organization/outputs.tf (1 line):
	- line 72: # TODO: deprecate in favor of id


blueprints/data-solutions/shielded-folder/log-export.tf (1 line):
	- line 118: #TODO check if logging bucket support encryption.


fast/addons/1-resman-tenants/templates/workflow-gitlab.yaml (1 line):
	- line 43: # TODO: document project-level deploy key used to fetch modules


fast/stages/2-networking-b-nva/nva-bgp.tf (1 line):
	- line 135: # TODO: use address module


modules/compute-vm/tags.tf (1 line):
	- line 106: # TODO: enable once the template id is available


modules/project-factory/automation.tf (1 line):
	- line 123: # TODO: also support short form for service accounts in this project


blueprints/data-solutions/bq-ml/vertex.tf (1 line):
	- line 105: #TODO Uncomment once terraform-provider-google/issues/9273 is fixed


blueprints/data-solutions/data-platform-foundations/locals-03-orchestration.tf (1 line):
	- line 47: # TODO: use new artifact registry module output


modules/vpc-sc/outputs.tf (1 line):
	- line 35: # TODO: deprecate in favor of id


fast/stages/1-resman/variables-toplevel-folders.tf (1 line):
	- line 35: # TODO: remember to document this, and how to use the same value in other folders


fast/addons/1-resman-tenants/variables.tf (1 line):
	- line 17: # TODO: backport names variable from resman stage


modules/net-vpn-ha/main.tf (1 line):
	- line 139: # FIXME: can bgp_session_range be null?


modules/project-factory/main.tf (1 line):
	- line 49: # TODO: concat lists for each key


blueprints/cloud-operations/network-quota-monitoring/src/plugins/discover-compute-quota.py (1 line):
	- line 76: # TODO: regions


blueprints/data-solutions/bq-ml/vpc.tf (1 line):
	- line 40: #TODO Remove and rely on 'ssh' tag once terraform-provider-google/issues/9273 is fixed


fast/stages/2-project-factory/variables.tf (1 line):
	- line 28: # TODO: add KMS keys


modules/compute-vm/main.tf (1 line):
	- line 138: # TODO: check if self link works here


blueprints/data-solutions/shielded-folder/main.tf (1 line):
	- line 109: #TODO VPCSC: Access levels


modules/project/sharedvpc-agent-iam.yaml (1 line):
	- line 24: # TODO: identify docs


fast/stages/0-bootstrap/templates/workflow-gitlab.yaml (1 line):
	- line 43: # TODO: document project-level deploy key used to fetch modules


blueprints/third-party-solutions/gitlab/assets/config.rb.tpl (1 line):
	- line 25: # TODO: use auth


blueprints/gke/patterns/mysql/manifest-templates/01-02-mysql-secret.yaml (1 line):
	- line 15: # TODO: Should terraform generate the secret?


blueprints/cloud-operations/network-quota-monitoring/deploy-cloudrun-job/main.tf (1 line):
	- line 17: # TODO: support custom quota file


fast/stages/0-bootstrap/outputs-providers.tf (1 line):
	- line 19: # TODO: templates should probably use provider::terraform::encode_expr