Add my todo list.

Author: Mike O'Brien

todo.md

@@ -0,0 +1,20 @@
+* Templatize number of GPUs, size of GPU, etc
+* Add LLM model for deployment
+* Templatize the NeMo services
+* Harden Terraform network defaults: replace 0.0.0.0/0 in allowed_cidr and bastion_ssh_cidr with safe defaults and add validation/docs
+* Fix AWS subnet data count: set data.aws_subnet.existing_subnets count to length(var.subnet_ids) to avoid index errors
+* Prefix EBS CSI IAM role with name_prefix in iam_oidc to avoid cross-environment name collisions
+* Make ALB/Target Group creation optional in loadbalancer module and auto-detect or document pre-existing resource requirement
+* Harmonize provider and Kubernetes version pins across root and modules; define single source-of-truth for versions
+* Parameterize EC2 snapshot IDs and avoid pre-provisioning large GPU instances by default; gate with variables
+* Parameterize storage class names in kubernetes module (gp3/standard) and add fallback handling
+* Tighten EKS node security group: restrict kubelet port 10250 ingress from 0.0.0.0/0 to cluster SG/cidr
+* Clarify Azure/AKS support in docs vs code; add AKS module or adjust claims
+* Configure initial models/NIMs to deploy: add config surface (.env or YAML) and defaults for embedder/reranker
+* Document and support "existing cluster" install path (no Terraform): clear steps using --local/VIA_BASTION=false
+* Evaluate and, if needed, separate Langflow from GPU/NIM workloads (namespace/nodepool or separate cluster) and document
+* Document GKE private endpoint guidance; consider enabling private endpoint + authorized networks for production
+* Add preflight to detect missing ALB/TGs and emit actionable errors with names expected by loadbalancer module
+* Migrate from NGINX Ingress Controller to alternative (NGINX Ingress being retired March 2026 per https://www.kubernetes.dev/blog/2025/11/12/ingress-nginx-retirement/). Recommended: Gateway API (modern replacement) or Traefik/Istio Ingress controllers. Update Helm charts in modules/gke, scripts (deploy_ingress.sh, deploy_nginx_*.sh, cli.sh), and all ingress resources with nginx-specific annotations across GKE/EKS/RKE2 platforms
+
+