pkg/cluster/cluster.go (5 lines):
	- line 84: interfaces               network.InterfacesClient // TODO: use armInterfaces instead. https://issues.redhat.com/browse/ARO-4665
	- line 87: loadBalancers            network.LoadBalancersClient // TODO: use armLoadBalancers instead. https://issues.redhat.com/browse/ARO-4665
	- line 100: fpPrivateEndpoints       network.PrivateEndpointsClient // TODO: use armFPPrivateEndpoints instead. https://issues.redhat.com/browse/ARO-4665
	- line 108: subnet  subnet.Manager // TODO: use armSubnets instead. https://issues.redhat.com/browse/ARO-4665
	- line 158: // TODO: Delete once the replacement to track2 is done


pkg/env/prod.go (4 lines):
	- line 195: if p.ACRResourceID() != "" { // TODO: ugh!
	- line 203: p.acrDomain = "arointsvc." + azure.PublicCloud.ContainerRegistryDNSSuffix                             // TODO: make cloud aware once this is set up for US Gov Cloud
	- line 204: acrDataDomain = "arointsvc." + p.Location() + ".data." + azure.PublicCloud.ContainerRegistryDNSSuffix // TODO: make cloud aware once this is set up for US Gov Cloud
	- line 367: // TODO: Delete FPAuthorizer once the replace from track1 to track2 is done.


python/az/aro/azext_aro/custom.py (4 lines):
	- line 187: name='worker',  # TODO: 'worker' should not be hard-coded
	- line 201: name='default',  # TODO: 'default' should not be hard-coded
	- line 219: # TODO - perform client-side validation of required identity permissions
	- line 395: # TODO: clean up rbac


pkg/cluster/deploybaseresources.go (3 lines):
	- line 154: // TODO [gv]: Keeping this for retro-compatibility, but probably this can be removed
	- line 366: // TODO: there is probably an undesirable race condition here - check if etags can help.
	- line 423: // TODO: there is probably an undesirable race condition here - check if etags can help.


pkg/deploy/generator/resources_rp.go (3 lines):
	- line 357: // TODO: there is a lot of duplication with gatewayVMSS() (and other places)
	- line 402: // TODO: Replace with Live Service Configuration in KeyVault
	- line 1477: // TODO: INT ACR has wrong location - should be redeployed at globalResourceGroupLocation then remove acrLocationOverride configurable.


pkg/deploy/generator/templates_rp.go (3 lines):
	- line 87: // TODO: Replace with Live Service Configuration in KeyVault
	- line 147: // TODO: Replace with Live Service Configuration in KeyVault
	- line 167: // TODO: AKS Sharding: add rules for additional AKS shards for this RP instance. Currently only shard 1, which has subnet ClusterSubnet-001, is set above.


pkg/cluster/deploybaseresources_additional.go (3 lines):
	- line 180: // TODO: add AKS shard support
	- line 231: // TODO: Move to development on VPN so we can make this IPRule.  Will be done as part of Simply secure v2 work
	- line 336: // TODO: in the future we will need multiple PLSes.


pkg/monitor/cluster/cache.go (3 lines):
	- line 31: // TODO: remove this function and paginate
	- line 42: // TODO: remove this function and paginate
	- line 53: // TODO: remove this function and paginate


pkg/util/liveconfig/hive.go (3 lines):
	- line 99: // TODO: Replace with RP Live Service Config (KeyVault)
	- line 108: // TODO: we should probably not have an override in prod, but it may have unintended
	- line 114: // TODO: Replace with RP Live Service Config (KeyVault)


pkg/monitor/worker.go (2 lines):
	- line 149: // TODO: improve memory usage by storing a subset of doc in mon.docs
	- line 239: // TODO: later can modify here to poll once per N minutes and re-issue


pkg/operator/controllers/routefix/routefix.go (2 lines):
	- line 166: // TODO: specify requests/limits
	- line 219: // TODO: specify requests/limits


pkg/util/status/clusterversionoperator_status.go (2 lines):
	- line 12: // TODO: this is duplicate from clusterversioncondition.go
	- line 18: //TODO: Once https://github.com/openshift/cluster-version-operator/issues/437 this can go away,


pkg/gateway/gateway.go (2 lines):
	- line 91: // TODO: may one day want to limit gateway readiness on # active connections
	- line 231: // TODO: wait some more


pkg/validate/dynamic/loadbalancerprofile.go (2 lines):
	- line 85: // TODO: update once allocatedOutboundPorts is implemented
	- line 88: // TODO: add OutboundIPs and OutboundIPPrefixes


pkg/cluster/loadbalancerprofile.go (2 lines):
	- line 269: // TODO: add customer provided ip and ip prefixes
	- line 440: // TODO: add check for publicIPorIPPrefixID


pkg/deploy/devconfig.go (2 lines):
	- line 201: // TODO update this to support FF
	- line 216: // TODO: Replace with Live Service Configuration in KeyVault


pkg/cluster/kubeconfig.go (1 line):
	- line 52: // TODO remove this after PUCM has been run on all clusters.


pkg/cluster/install.go (1 line):
	- line 366: // TODO: ensuring credential IDs relies on authorizers that aren't exposed in the


pkg/swagger/paths.go (1 line):
	- line 107: // TODO: refactor this entire function to make sense


pkg/util/buckets/cache.go (1 line):
	- line 58: // TODO: bucketing logic


pkg/api/v20230701preview/openshiftcluster.go (1 line):
	- line 78: // TODO: ProvisioningStateCancelled is included to pass upstream CI. It is currently unused in ARO.


pkg/deploy/config.go (1 line):
	- line 107: // TODO: Replace with Live Service Configuration in KeyVault


pkg/deploy/generator/resources_gateway.go (1 line):
	- line 190: // TODO: there is a lot of duplication with rpVMSS()


pkg/monitor/cluster/prometheusalerts.go (1 line):
	- line 43: // TODO: consider persisting hc between calls to Monitor().  If


pkg/util/cluster/cluster.go (1 line):
	- line 554: // TODO: ick


pkg/operator/controllers/genevalogging/genevalogging.go (1 line):
	- line 161: // TODO: specify requests/limits


pkg/operator/controllers/clusteroperatoraro/clusteroperatoraro_controller.go (1 line):
	- line 52: // TODO: Decide whether we actually going to make any progress on this. If not - clean up.


pkg/api/openshiftcluster.go (1 line):
	- line 209: // TODO: ProvisioningStateCanceled is included to pass upstream CI. It is currently unused in ARO.


pkg/metrics/statsd/golang/metrics.go (1 line):
	- line 22: // metrics to statsd.  TODO: I think new versions of the mdm agent can now poll


pkg/api/v20240812preview/openshiftcluster.go (1 line):
	- line 92: // TODO: ProvisioningStateCanceled is included to pass upstream CI. It is currently unused in ARO.


pkg/util/cmp/cmp.go (1 line):
	- line 19: // FIXME: Remove x509CertComparer after upgrading to a Go version that includes https://github.com/golang/go/issues/28743


pkg/env/env.go (1 line):
	- line 95: // TODO: Delete FPAuthorizer once the replace from track1 to track2 is done.


pkg/cluster/version.go (1 line):
	- line 30: // TODO: Refactor to use changefeeds rather than querying the database every time


pkg/deploy/predeploy.go (1 line):
	- line 351: // TODO: ugh


pkg/frontend/frontend.go (1 line):
	- line 122: // TODO: Get the number of function parameters under control :D


pkg/backend/openshiftcluster.go (1 line):
	- line 204: // TODO: Provide better communication between RP and Monitor


pkg/util/restconfig/restconfig.go (1 line):
	- line 48: // TODO: Revert or adapt when upstream fix is available


pkg/deploy/generator/templates_gateway.go (1 line):
	- line 88: // TODO: use rpLBAlert() to define Azure monitoring alerts around the readiness of the gateway ILB


pkg/cluster/ipaddresses.go (1 line):
	- line 362: // TODO: in the future we will need multiple vnets for our PEs.


pkg/operator/controllers/workaround/systemreserved.go (1 line):
	- line 37: verFixed, err := version.ParseVersion("4.99.0") // TODO set this correctly when known.


pkg/frontend/admin_openshiftcluster_etcdrecovery.go (1 line):
	- line 38: // TODO write integration test that skips f.fixEtcd


pkg/hive/install.go (1 line):
	- line 217: // TODO: remove until we use a version of hive at minimal install


python/az/aro/azext_aro/_validators.py (1 line):
	- line 119: # TODO: add aka.ms link here


pkg/api/v20250725/openshiftcluster.go (1 line):
	- line 92: // TODO: ProvisioningStateCanceled is included to pass upstream CI. It is currently unused in ARO.


pkg/operator/controllers/checkers/internetchecker/checker.go (1 line):
	- line 68: // TODO: Consider replacing with multi error wrapping with Go 1.20: https://github.com/golang/go/issues/53435#issuecomment-1320343377


pkg/frontend/validate.go (1 line):
	- line 231: // TODO convert this into static validation instead of this receiver function in the validation for frontend.


pkg/api/v20231122/openshiftcluster.go (1 line):
	- line 81: // TODO: ProvisioningStateCanceled is included to pass upstream CI. It is currently unused in ARO.


pkg/cluster/delete.go (1 line):
	- line 90: // TODO: there is probably an undesirable race condition here - check if etags can help.


pkg/operator/apis/aro.openshift.io/v1alpha1/cluster_types.go (1 line):
	- line 90: // TODO: Is this the best behaviour?


pkg/env/dev.go (1 line):
	- line 92: // TODO: Delete FPAuthorizer once the replace from track1 to track2 is done.