staging/provisioning/windows/kubeletstart.ps1 (4 lines):
	- line 28: #TODO ksbrmnn refactor to be sensical instead of if if if ...
	- line 36: # $KubeletArgList += "--hostname-override=$global:AzureHostname" TODO: remove - dead code?
	- line 56: # TODO ksbrmnn figure out what's going on here re tick marks
	- line 65: # TODO move this to CSE


parts/k8s/windowskubeletfunc.ps1 (3 lines):
	- line 180: # TODO: Deprecate this and replace with methods that get individual components instead of zip containing everything
	- line 237: # TODO: replace KubeletStartFile with a Kubelet config, remove NSSM, and use built-in service integration
	- line 310: # TODO ksbrmnn fix callers to this function


pkg/helpers/ssh/ssh.go (3 lines):
	- line 72: // TODO Granular retry func
	- line 155: // TODO we may be able to return both methods, not changing behavior for now
	- line 156: // TODO this can be reworked so it is executed once per command


parts/k8s/addons/azuredisk-csi-driver-deployment.yaml (2 lines):
	- line 1498: description: 'If referring to a piece of an object instead of an entire object, this string should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2]. For example, if the object reference is to a container within a pod, this would take on a value like: "spec.containers{name}" (where "name" refers to the name of the container that triggered the event) or if no container name is specified "spec.containers[2]" (container with index 2 in this pod). This syntax is chosen only to have some well-defined way of referencing a part of an object. TODO: this design is not final and this field is subject to change in the future.'
	- line 1639: description: 'If referring to a piece of an object instead of an entire object, this string should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2]. For example, if the object reference is to a container within a pod, this would take on a value like: "spec.containers{name}" (where "name" refers to the name of the container that triggered the event) or if no container name is specified "spec.containers[2]" (container with index 2 in this pod). This syntax is chosen only to have some well-defined way of referencing a part of an object. TODO: this design is not final and this field is subject to change in the future.'


pkg/api/const.go (2 lines):
	- line 20: Ubuntu            Distro = "ubuntu" // Ubuntu 16.04-LTS is at EOL, TODO deprecate this distro
	- line 479: // TODO: Move other values defined in WindowsProfiles (like DefaultWindowsSSHEnabled) here.


extensions/choco/v1/ChocolateyPackageInstaller.ps1 (2 lines):
	- line 170: #  - @TODO: Write to $chocolateyInstallLog log file.
	- line 171: #  - @TODO: Currently no errors are being written to the log file ($chocolateyInstallLog). This needs to be fixed.


parts/windowsparams.t (2 lines):
	- line 21: "description": "TODO: containerd - these binaries are not available yet"
	- line 27: "description": "TODO: containerd - these binaries are not available yet"


pkg/engine/systemroleassignments.go (1 line):
	- line 131: // TODO: Use `copy` in ARM template instead of Go loops:


cmd/rotatecerts/operations.go (1 line):
	- line 79: // TODO rolloutStatefulSets


pkg/api/convertertoapi.go (1 line):
	- line 236: // TODO (hack): this validation should be done as part of the main validation, but deploy does it only after loading the container.


pkg/api/vlabs/const.go (1 line):
	- line 25: Ubuntu            Distro = "ubuntu" // Ubuntu 16.04-LTS is at EOL, TODO deprecate this distro


parts/k8s/windowsconfigfunc.ps1 (1 line):
	- line 63: # TODO: should this be in this PR?


parts/k8s/kuberneteswindowssetup.ps1 (1 line):
	- line 333: # TODO: CNI may need to move to c:\program files\containerd\cni\bin with ContainerD


pkg/engine/armtype.go (1 line):
	- line 190: // TODO: Should we skip this type and add the `ResourceGroup` field directly to `DeploymentARM` ?


pkg/api/defaults-cloud-controller-manager.go (1 line):
	- line 211: // TODO add RBAC support


pkg/api/vlabs/validate.go (1 line):
	- line 1702: // TODO: These validations should be relaxed once ContainerD and CNI plugins are more readily available


parts/k8s/windowscnifunc.ps1 (1 line):
	- line 27: # TODO: Move the code that creates the wincni configuration file out of windowskubeletfunc.ps1 and put it here


parts/k8s/windowscontainerdfunc.ps1 (1 line):
	- line 161: # TODO: check if containerd is already installed and is the same version before this.


parts/k8s/kuberneteswindowsfunctions.ps1 (1 line):
	- line 216: # TODO ksubrmnn parameterize this fully


staging/provisioning/windows/windowsnodereset.ps1 (1 line):
	- line 99: # TODO Remove this once the bug is fixed in hns.


pkg/engine/const.go (1 line):
	- line 92: // kubernetesKubeletMonitorSystemdTimer     = "k8s/cloud-init/artifacts/kubelet-monitor.timer" // TODO enable


pkg/engine/images.go (1 line):
	- line 62: // TODO: Expose Hyper-V generation for VHD URL refs in apimodel


parts/k8s/addons/kube-dns.yaml (1 line):
	- line 96: {{- /* TODO: Set memory limits when we've profiled the container for large


pkg/engine/artifacts.go (1 line):
	- line 76: // TODO validate that each of these addons are actually wired in to the conveniences in getAddonFuncMap


pkg/kubernetes/interfaces.go (1 line):
	- line 15: // TODO These interfaces do not follow best practices


cmd/generate.go (1 line):
	- line 253: //TODO remove these debug statements when we're new template generation implementation is enabled!


pkg/engine/loadbalancers.go (1 line):
	- line 20: // TODO (aramase)


pkg/engine/masterarmresources.go (1 line):
	- line 128: // TODO: This is only necessary if the resource group of the masters is different from the RG of the node pool


cmd/rotate_certs.go (1 line):
	- line 187: // TODO validate certificates metadata


pkg/armhelpers/utils/util.go (1 line):
	- line 20: // TODO: merge with the RP code