app/controllermanager.go (3 lines):
	- line 166: // TODO: handle stoppedCh and listenerStoppedCh returned by c.SecureServing.Serve
	- line 462: // TODO: In general, any controller checking this needs to be dynamic so
	- line 501: // TODO: extract this function into staging/controller-manager


controllers/node/node_controller.go (3 lines):
	- line 61: // TODO: switch the primary key to GA labels in v1.21
	- line 69: // TODO: switch the primary key to GA labels in v1.21
	- line 77: // TODO: switch the primary key to GA labels in v1.21


cloud.go (2 lines):
	- line 34: // TODO: Make this depend on the separate controller utilities repo (issues/68947)
	- line 134: // TODO: Break this up into different interfaces (LB, etc) when we have more than one type of service


options/options.go (2 lines):
	- line 65: // TODO: remove insecure serving mode
	- line 209: // TODO: find more elegant way than syncing back the values.


controllers/route/route_controller.go (2 lines):
	- line 50: // TODO: This should be per-provider.
	- line 112: // TODO: If we do just the full Resync every 5 minutes (default value)


controllers/service/controller.go (1 line):
	- line 632: // TODO: Should we check name?  (In theory, an LB could expose it)


app/config/config.go (1 line):
	- line 37: // TODO: remove deprecated insecure serving


controllers/service/config/v1alpha1/conversion.go (1 line):
	- line 28: // TODO: Fix the bug in conversion-gen so it automatically discovers these Convert_* functions


config/v1alpha1/conversion.go (1 line):
	- line 28: // TODO: Fix the bug in conversion-gen so it automatically discovers these Convert_* functions


fake/fake.go (1 line):
	- line 194: // TODO: replace DefaultLoadBalancerName to generate more meaningful loadbalancer names.