cluster/gce/windows/k8s-node-setup.psm1 (6 lines):
	- line 45: # TODO: update scripts for these style guidelines:
	- line 65: # Writes a TODO with $Message to the console.
	- line 70: Log-Output "TODO: ${Message}"
	- line 1408: # TODO: Fix this in the base image.
	- line 2127: # TODO: Add custom parser for containerd logs once format is settled.
	- line 2458: # TODO: detect exceptions and forward them as one log entry using the


providers/gce/gce_instances.go (3 lines):
	- line 493: // TODO: this should be removed from the cloud provider.
	- line 522: // TODO: remove this method.
	- line 794: // TODO: We could store the tags in gceInstance, so we could have already fetched it


providers/gce/gce_loadbalancer_external.go (3 lines):
	- line 741: // TODO: we report loadbalancer IP through status, so we want to verify if
	- line 778: // TODO: If the user modifies their Service's session affinity, it *should*
	- line 1012: // TODO: Make this more generic. Currently this method is only


providers/gce/gce_clusters.go (3 lines):
	- line 43: // TODO: Scoping?  Do we need to qualify the cluster name?
	- line 94: // TODO: Issue/68913 migrate metric to list_location instead of list_zone.
	- line 96: // TODO: use PageToken to list all not just the first 500


providers/gce/gce.go (2 lines):
	- line 182: // TODO: replace gcfg with json
	- line 892: // TODO: use PageToken to list all not just the first 500


providers/gce/gce_interfaces.go (2 lines):
	- line 35: // TODO: Mock Global endpoints
	- line 46: // TODO: Expand the interface to include more methods.


cluster/addons/fluentd-gcp/podsecuritypolicies/event-exporter-psp.yaml (2 lines):
	- line 23: # TODO: This only needs a hostPath to read /etc/ssl/certs,
	- line 30: # TODO: This doesn't need to run as root.


providers/gce/gce_instancegroup.go (2 lines):
	- line 83: // TODO: should cull operation above this layer.
	- line 100: // TODO: should cull operation above this layer.


cluster/addons/volumesnapshots/crd/snapshot.storage.k8s.io_volumesnapshotcontents.yaml (2 lines):
	- line 96: description: 'If referring to a piece of an object instead of an entire object, this string should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2]. For example, if the object reference is to a container within a pod, this would take on a value like: "spec.containers{name}" (where "name" refers to the name of the container that triggered the event) or if no container name is specified "spec.containers[2]" (container with index 2 in this pod). This syntax is chosen only to have some well-defined way of referencing a part of an object. TODO: this design is not final and this field is subject to change in the future.'
	- line 228: description: 'If referring to a piece of an object instead of an entire object, this string should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2]. For example, if the object reference is to a container within a pod, this would take on a value like: "spec.containers{name}" (where "name" refers to the name of the container that triggered the event) or if no container name is specified "spec.containers[2]" (container with index 2 in this pod). This syntax is chosen only to have some well-defined way of referencing a part of an object. TODO: this design is not final and this field is subject to change in the future.'


cluster/addons/dns/kube-dns/kube-dns.yaml.sed (1 line):
	- line 119: # TODO: Set memory limits when we've profiled the container for large


pkg/controller/nodeipam/ipam/cidr_allocator.go (1 line):
	- line 55: // TODO: figure out the good setting for those constants.


pkg/util/controller_utils.go (1 line):
	- line 39: // TODO: This requires a transaction, either both node status is updated


cmd/gcp-controller-manager/node_csr_approver.go (1 line):
	- line 686: // TODO: short-circuit


providers/gce/gce_healthchecks.go (1 line):
	- line 41: // TODO: use a shared constant once ports in pkg/cluster/ports are in a common external repo.


providers/gce/gce_networkendpointgroup.go (1 line):
	- line 63: // TODO: filter for the region the cluster is in.


cluster/addons/calico-policy-controller/bgppeers-crd.yaml (1 line):
	- line 67: TODO: Add other useful fields. apiVersion, kind, uid?'


cluster/gce/addons/podsecuritypolicies/unprivileged-addon.yaml (1 line):
	- line 46: # TODO: The addons using this profile should not run as root.


cmd/gcp-controller-manager/node_annotator.go (1 line):
	- line 279: // TODO: move this to instance.Labels. This is gross.


pkg/controller/nodeipam/config/v1alpha1/conversion.go (1 line):
	- line 29: // TODO: Fix the bug in conversion-gen so it automatically discovers these Convert_* functions


cluster/addons/rbac/legacy-kubelet-user/kubelet-binding.yaml (1 line):
	- line 3: # TODO: remove this once new nodes are granted individual identities and the


crd/client/gcpfirewall/informers/externalversions/generic.go (1 line):
	- line 52: // TODO extend this to unknown resources with a client pool


providers/gce/gce_routes.go (1 line):
	- line 57: // TODO: Should we lastComponent(target) this?


cmd/auth-provider-gcp/main.go (1 line):
	- line 30: // TODO: remove the import after https://github.com/kubernetes/cloud-provider-gcp/issues/211 solved.


providers/gce/gce_loadbalancer.go (1 line):
	- line 125: // TODO: replace DefaultLoadBalancerName to generate more meaningful loadbalancer names.


pkg/controller/nodeipam/node_ipam_controller.go (1 line):
	- line 125: // TODO: Abstract this check into a generic controller manager should run method.


cluster/addons/dns/kube-dns/kube-dns.yaml.in (1 line):
	- line 119: # TODO: Set memory limits when we've profiled the container for large


providers/gce/support.go (1 line):
	- line 51: // TODO: the current cloud provider policy doesn't seem to be correct as it


pkg/controller/nodeipam/ipam/cidrset/cidr_set.go (1 line):
	- line 57: // TODO: https://github.com/kubernetes/kubernetes/issues/44918


cluster/addons/calico-policy-controller/ipamblock-crd.yaml (1 line):
	- line 41: # TODO: This nullable is manually added in. We should update controller-gen


cluster/addons/rbac/cluster-loadbalancing/glbc/roles.yaml (1 line):
	- line 29: # TODO: switch to patch services/status