Validate base images used in Kubeflow Pipelines components and pipelines.
From the repo root:
uv run scripts/validate_base_images/validate_base_images.pyThe validator accepts:
ghcr.io/kubeflow/*images- unset/empty images
- images matching the allowlist file:
scripts/validate_base_images/base_image_allowlist.yaml
To update the allowlist, edit scripts/validate_base_images/base_image_allowlist.yaml and add either:
allowed_images: exact image stringsallowed_image_patterns: regex patterns matched against the full image string
To use a different allowlist file:
uv run scripts/validate_base_images/validate_base_images.py \
--allow-list /path/to/allowlist.yamlValidate a single component (directory or component.py):
uv run scripts/validate_base_images/validate_base_images.py \
--component components/training/sample_model_trainerValidate a single pipeline (directory or pipeline.py):
uv run scripts/validate_base_images/validate_base_images.py \
--pipeline pipelines/training/simple_trainingValidate multiple targets (repeat the flags):
uv run scripts/validate_base_images/validate_base_images.py \
--component components/training/sample_model_trainer \
--component components/evaluation/some_component \
--pipeline pipelines/training/simple_training