Skip to content

Conversation

@pboyd
Copy link
Member

@pboyd pboyd commented Dec 22, 2025

Description

Support wildcards for including Hugging Face models and add an allowedOrganization property to limit access to a single org.

Wildcards already worked when previewing a source, but this brings it into the normal flow.

How Has This Been Tested?

Locally on a kind cluster.

Merge criteria:

  • All the commits have been signed-off (To pass the DCO check)
  • The commits have meaningful messages
  • Automated tests are provided as part of the PR for major new functionalities; testing instructions have been added in the PR body (for PRs involving changes that are not immediately obvious).
  • The developer has manually tested the changes and verified that the changes work.
  • Code changes follow the kubeflow contribution guidelines.

It's invalid to put a wildcard in the HF org (`foo*bar/`) or omit the
model name (`foo/`).

Signed-off-by: Paul Boyd <paul@pboyd.io>
Extends the Hugging Face source to support wildcard patterns like:
- org/* (all models from organization)
- org/prefix* (models with specific prefix)

This was already supported when previewing a source.

Signed-off-by: Paul Boyd <paul@pboyd.io>
Signed-off-by: Paul Boyd <paul@pboyd.io>
@pboyd
Copy link
Member Author

pboyd commented Jan 5, 2026

/cc @adysenrothman

Copy link
Contributor

@adysenrothman adysenrothman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

Tested locally and looks good! Thanks, Paul.

Copy link
Member

@jonburdo jonburdo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

Comment on lines +406 to +417
**Valid patterns:**
- `"org/model"` - Exact model name
- `"org/prefix*"` - Models starting with prefix
- `"org/*"` - All models from organization
- `"*"` - All models (only when using `allowedOrganization`)

**Invalid patterns (will be rejected):**
- `"*"` - Global wildcard (without `allowedOrganization`)
- `"*/*"` - Global organization wildcard
- `"org*"` - Wildcard in organization name
- `"org/"` - Empty model name
- `"*prefix*"` - Multiple wildcards
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nit: Doesn't mention if it's valid to have wildcard at beginning or middle: *something or some*thing. Maybe it's implied well enough. Just noting in case we want to add now or in a follow-up

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good call out. I pushed a commit that attempts to clarify this. includedModels only allows a prefix or an exact name, but excludedModels supports wildcards anywhere.

Signed-off-by: Paul Boyd <paul@pboyd.io>
@google-oss-prow google-oss-prow bot removed the lgtm label Jan 6, 2026
Copy link
Member

@jonburdo jonburdo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@google-oss-prow google-oss-prow bot added the lgtm label Jan 6, 2026
@pboyd
Copy link
Member Author

pboyd commented Jan 6, 2026

/approve

@google-oss-prow
Copy link

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: pboyd

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@google-oss-prow google-oss-prow bot merged commit 9b49686 into kubeflow:main Jan 6, 2026
22 checks passed
@pboyd pboyd deleted the feature/hf-wildcard-support branch January 6, 2026 17:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants