eks/stresser/remote/stresser.go (5 lines):
	- line 61: // TODO: use kubemark
	- line 320: // TODO: error...
	- line 583: // TODO: no need to mount kubeconfig since we are creating in-cluster kubernetes client
	- line 730: // TODO: set resource limits
	- line 807: // TODO: 'TTLSecondsAfterFinished' is still alpha


k8s-tester/conformance/tester.go (3 lines):
	- line 28: // TODO: support e2e test binary runs without sonobuoy dependency
	- line 299: // TODO: check error
	- line 353: // TODO: check error


eks/nlb-guestbook/nlb-guestbook.go (3 lines):
	- line 65: redisLeaderRoleName       = "master"       // TODO: change this to "leader"
	- line 71: redisFollowerRoleName       = "slave" // TODO: change this to "follower"
	- line 1058: // TODO: is there any better way to find out the NLB name?


eks/cluster/cluster.go (3 lines):
	- line 163: // TODO: investigate why "ts.k8sClient == nil" after cluster creation
	- line 298: // TODO: parse response status code to decide retries?
	- line 412: // TODO: parse response status code to decide retries?


eks/cluster-loader/remote/cluster-loader.go (3 lines):
	- line 314: { // TODO: make it more restrictive
	- line 580: // TODO: set resource limits
	- line 657: // TODO: 'TTLSecondsAfterFinished' is still alpha


eks/eks.go (3 lines):
	- line 1410: // TODO: investigate why "ts.k8sClient == nil"
	- line 1443: // TODO: investigate why "ts.k8sClient == nil"
	- line 1517: // TODO: investigate why "ts.k8sClient == nil"


ec2config/config.go (2 lines):
	- line 285: // TODO: asg status
	- line 330: // TODO: support bootstrap arguments


eks/alb-2048/alb-2048.go (2 lines):
	- line 59: policyCFNStackID string // TODO: persist
	- line 499: // TODO: test in MNG


client/services.go (2 lines):
	- line 120: // TODO: find better way to find out the NLB/ELB name
	- line 209: // TODO: find better way to find out the NLB/ELB name


eksconfig/add-on-prometheus-grafana.go (2 lines):
	- line 73: // TODO: PVC not working on BottleRocket
	- line 77: // TODO: fix CSI EBS https://github.com/bottlerocket-os/bottlerocket/issues/877


eks/fluentd/tester.go (2 lines):
	- line 122: // TODO: fix this
	- line 140: // TODO: add "ShouldCreate/Delete" and dedup redundant code


eksconfig/config.go (2 lines):
	- line 484: // TODO: scope this down
	- line 980: // TODO: check for ARM/x86


eks/jupyter-hub/jupyter-hub.go (2 lines):
	- line 323: // TODO: test in MNG
	- line 496: // TODO: is there any better way to find out the NLB name?


eks/gpu/gpu.go (2 lines):
	- line 219: // TODO: filter by GPU?
	- line 305: // TODO: filter by GPU?


eksconfig/add-on-wordpress.go (2 lines):
	- line 81: // TODO: PVC not working on BottleRocket
	- line 85: // TODO: fix CSI EBS https://github.com/bottlerocket-os/bottlerocket/issues/877


k8s-tester/jobs-echo/tester.go (2 lines):
	- line 361: // TODO: 'TTLSecondsAfterFinished' is still alpha
	- line 378: // TODO: 'TTLSecondsAfterFinished' is still alpha


eks/wordpress/wordpress.go (2 lines):
	- line 176: // TODO: test in MNG
	- line 333: // TODO: is there any better way to find out the NLB name?


eksconfig/add-on-conformance.go (2 lines):
	- line 105: TODO: fix this... conformance with managed node group does not work
	- line 141: // TODO: fix this...


eks/secrets/remote/secrets.go (2 lines):
	- line 651: // TODO: set resource limits
	- line 728: // TODO: 'TTLSecondsAfterFinished' is still alpha


k8s-tester/nlb-guestbook/tester.go (2 lines):
	- line 137: redisLeaderRoleName             = "master"       // TODO: change this to "leader"
	- line 145: redisFollowerRoleName             = "slave" // TODO: change this to "follower"


eks/csrs/remote/csrs.go (2 lines):
	- line 646: // TODO: set resource limits
	- line 723: // TODO: 'TTLSecondsAfterFinished' is still alpha


eks/configmaps/remote/configmaps.go (2 lines):
	- line 646: // TODO: set resource limits
	- line 723: // TODO: 'TTLSecondsAfterFinished' is still alpha


eks/conformance/conformance.go (2 lines):
	- line 222: // TODO: check error
	- line 276: // TODO: check error


eksconfig/add-on-node-groups.go (1 line):
	- line 61: // TODO: handle conflicting flag '--cloud-provider aws'


ec2/logs.go (1 line):
	- line 26: // TODO: fetch logs via SSM + S3


cmd/aws-k8s-tester/eks/create-stresser.go (1 line):
	- line 91: // TODO: make take awhile for volume to be mounted complete...


k8s-tester/config.go (1 line):
	- line 59: // TODO: support https://github.com/onsi/ginkgo.


eks/ng/logs.go (1 line):
	- line 22: // TODO: fetch logs via SSM + S3


cmd/aws-k8s-tester/eks/create-configmaps.go (1 line):
	- line 81: // TODO: make take awhile for volume to be mounted complete...


eks/cron-jobs/cron-jobs.go (1 line):
	- line 268: // TODO: 'TTLSecondsAfterFinished' is still alpha


eks/kubeflow/kubeflow.go (1 line):
	- line 673: // TODO: fix


eks/mng/wait/wait.go (1 line):
	- line 159: // TODO: handle DHCP option domain name


cmd/aws-k8s-tester/eks/create-secrets.go (1 line):
	- line 89: // TODO: make take awhile for volume to be mounted complete...


ec2/ec2.go (1 line):
	- line 170: // TODO: include opt-in zones?


eks/jobs-pi/jobs-pi.go (1 line):
	- line 219: // TODO: 'TTLSecondsAfterFinished' is still alpha


eks/mng/security-groups.go (1 line):
	- line 21: // TODO: restrict ports


pkg/aws/ec2/ec2.go (1 line):
	- line 21: // TODO: make method (e.g. asgClient."WaitUntilRunning")


pkg/aws/elb/elb.go (1 line):
	- line 19: // TODO: is there a better way to clean up resources?


pkg/aws/ecr/ecr.go (1 line):
	- line 445: // TODO: get auth token


eks/stresser/local/stresser.go (1 line):
	- line 49: // TODO: use kubemark


eks/jobs-echo/jobs-echo.go (1 line):
	- line 252: // TODO: 'TTLSecondsAfterFinished' is still alpha


cmd/aws-k8s-tester/eks/create-csrs.go (1 line):
	- line 76: // TODO: make take awhile for volume to be mounted complete...


eks/mng/role.go (1 line):
	- line 305: // TODO: update based on add-on setups


eks/cluster/vpc.go (1 line):
	- line 1048: // TODO: if pending, retry


k8s-tester/jobs-pi/tester.go (1 line):
	- line 228: // TODO: 'TTLSecondsAfterFinished' is still alpha


utils/aws/v1/ecr/ecr.go (1 line):
	- line 483: // TODO: get auth token


eks/ng/role.go (1 line):
	- line 314: // TODO: update based on add-on setups


pkg/k8s-client/eks-deprecate.go (1 line):
	- line 119: // TODO: this runs highly redundant queries... optimize...


ec2/role.go (1 line):
	- line 319: // TODO: update based on add-on setups


eks/stresser2/stresser.go (1 line):
	- line 114: // TODO waits for all the job spawned by cronJob up and running


eks/nlb-hello-world/nlb-hello-world.go (1 line):
	- line 425: // TODO: is there any better way to find out the NLB name?


k8s-tester/stress/in-cluster/tester.go (1 line):
	- line 717: // TODO: 'TTLSecondsAfterFinished' is still alpha


eks/irsa-fargate/irsa-fargate.go (1 line):
	- line 1058: // TODO: "aws sts get-caller-identity" fails with


eks/ng/wait/wait.go (1 line):
	- line 169: // TODO: handle DHCP option domain name


eks/prometheus-grafana/prometheus-grafana.go (1 line):
	- line 488: // TODO: is there any better way to find out the NLB name?


eks/kubernetes-dashboard/kubernetes-dashboard.go (1 line):
	- line 75: // TODO: use ingress


eks/ng/security-groups.go (1 line):
	- line 21: // TODO: restrict ports


pkg/cloud/autoscaling.go (1 line):
	- line 81: // TODO: probably make this only deal with one ASG at a time because it will loop through an ASG that is already all in service again


k8s-tester/clusterloader/tester.go (1 line):
	- line 30: // TODO: support s3 uploads


ec2/vpc.go (1 line):
	- line 1033: // TODO: if pending, retry


eks/ng/configmap.go (1 line):
	- line 74: // TODO: use client-go


k8s-tester/cloudwatch-agent/cmd/k8s-tester-cloud-watch-agent/main.go (1 line):
	- line 95: // TODO: notify stopc


eks/secrets/secrets.go (1 line):
	- line 157: // TODO: create Pod with created secrets mounted as volume, read them, measure latency


k8s-tester/csi-ebs/tester.go (1 line):
	- line 594: // TODO: Determine whether "retry with timeout" is appropriate here. Maybe we should only retry on version conflict.


eks/irsa/irsa.go (1 line):
	- line 1174: // TODO: require success >= expects


utils/aws/v1/aws.go (1 line):
	- line 82: // TODO: support temporary credentials with refresh mechanism


eks/fluentd/fluentd.go (1 line):
	- line 785: // TODO: do we need this?


eks/fargate/fargate.go (1 line):
	- line 818: // TODO: expected output not found, fail the whole tester


pkg/aws/aws.go (1 line):
	- line 82: // TODO: support temporary credentials with refresh mechanism


eks/cluster/role.go (1 line):
	- line 310: // TODO: update based on add-on setups


utils/aws/v1/elb/elb.go (1 line):
	- line 16: // TODO: is there a better way to clean up resources?


ec2config/validate-defaults.go (1 line):
	- line 229: if pv == "ec2.amazonaws.com" { // TODO: support China regions ec2.amazonaws.com.cn or eks.amazonaws.com.cn