hack/deployer/runner/kyverno/install/kyverno.yaml (8 lines):
	- line 2764: of an object. TODO: this design is not final and this field
	- line 2852: way of referencing a part of an object. TODO: this design is not
	- line 3126: of an object. TODO: this design is not final and this field
	- line 3214: way of referencing a part of an object. TODO: this design is not
	- line 6248: of an object. TODO: this design is not final and this field
	- line 6336: way of referencing a part of an object. TODO: this design is not
	- line 6610: of an object. TODO: this design is not final and this field
	- line 6698: way of referencing a part of an object. TODO: this design is not


pkg/dev/portforward/service_forwarder.go (2 lines):
	- line 85: // TODO: /could/ consider snipping connections here when pods turn unready, but that does not match the default
	- line 110: // TODO: support named ports? how it's supposed to work is not quite clear atm, and we don't use it ourselves


config/recipes/beats/stack_monitoring.yaml (2 lines):
	- line 43: # TODO: switch this to "certificate" when available: https://github.com/elastic/beats/issues/8164
	- line 58: # TODO: switch this to "certificate" when available: https://github.com/elastic/beats/issues/8164


pkg/controller/elasticsearch/driver/upgrade_pods_deletion.go (2 lines):
	- line 76: // TODO: If master is changed into a data node (or the opposite) it must be excluded or we should update m_m_n
	- line 159: // TODO: Add some priority to unhealthy (bootlooping) Pods


pkg/apis/elasticsearch/v1/elasticsearch_types.go (1 line):
	- line 223: // TODO: Allow the user to specify some options (transport.compress, transport.ping_schedule)


pkg/controller/kibana/driver.go (1 line):
	- line 122: // TODO: consider updating some status here?


pkg/controller/common/statefulset/validation.go (1 line):
	- line 91: // TODO: Before moving to `common`, this would state `es_name` in place of `name`, indicating that this was an


pkg/controller/common/license/verifier.go (1 line):
	- line 100: // TODO optional pubkey fingerprint check


pkg/controller/common/certificates/http_reconcile.go (1 line):
	- line 84: // TODO: reconcile annotations?


hack/deployer/config/local-disks/ssd-provisioner.yaml (1 line):
	- line 35: # TODO custom docker image


pkg/controller/elasticsearch/driver/upgrade.go (1 line):
	- line 184: // TODO: should we at least log this one in debug mode ?


pkg/controller/beat/common/stackmon/stackmon.go (1 line):
	- line 145: // TODO: Enable when Beats as containers in Windows is supported: https://github.com/elastic/beats/issues/16814


pkg/controller/agent/pod.go (1 line):
	- line 93: // TODO: Decrease back to 350Mi once https://github.com/elastic/elastic-agent/issues/4730 is addressed


hack/api-docs/templates/gv_details.tpl (1 line):
	- line 4: % TODO add function to crd-ref-docs return anchor used in links docs-v3 does not seem to produce valid markdown anchors


pkg/controller/elasticsearch/nodespec/statefulset.go (1 line):
	- line 101: // TODO: inherit user-provided labels and annotations from the CRD?


pkg/controller/elasticsearch/client/model.go (1 line):
	- line 222: } // TODO awareness settings


pkg/controller/elasticsearch/driver/driver.go (1 line):
	- line 258: // TODO: support user-supplied certificate (non-ca)


pkg/dev/portforward/forwarder_store.go (1 line):
	- line 58: // TODO: cancel this at some point to GC?


pkg/controller/elasticsearch/user/reconcile.go (1 line):
	- line 185: // TODO: factorize with https://github.com/elastic/cloud-on-k8s/issues/2626