Skip to content

[FEATURE] Add an option to turn on and off the certificate validation of llm connectors #4394

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
akolarkunnu wants to merge 4 commits into
base: main
Choose a base branch
from
Open

[FEATURE] Add an option to turn on and off the certificate validation of llm connectors #4394

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
2f5e82f
[FEATURE] Add an option to turn on and off the certificate validation…
akolarkunnu Nov 4, 2025
3027319
Merge branch 'opensearch-project:main' into sslverification
akolarkunnu Dec 7, 2025
564d401
[FEATURE] Add an option to turn on and off the certificate validation…
akolarkunnu Dec 7, 2025
de4ce11
Merge branch 'sslverification' of https://github.com/akolarkunnu/ml-c…
akolarkunnu Dec 7, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 7 additions & 2 deletions common/src/main/java/org/opensearch/ml/common/httpclient/MLHttpClientFactory.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,8 +10,10 @@
import java.time.Duration;

import lombok.extern.log4j.Log4j2;
import software.amazon.awssdk.http.SdkHttpConfigurationOption;
import software.amazon.awssdk.http.async.SdkAsyncHttpClient;
import software.amazon.awssdk.http.nio.netty.NettyNioAsyncHttpClient;
import software.amazon.awssdk.utils.AttributeMap;

@Log4j2
public class MLHttpClientFactory {
Expand All @@ -20,7 +22,8 @@ public static SdkAsyncHttpClient getAsyncHttpClient(
Duration connectionTimeout,
Duration readTimeout,
int maxConnections,
boolean connectorPrivateIpEnabled
boolean connectorPrivateIpEnabled,
boolean connectorSslVerificationEnabled
) {
return doPrivileged(() -> {
log
Expand All @@ -35,7 +38,9 @@ public static SdkAsyncHttpClient getAsyncHttpClient(
.connectionTimeout(connectionTimeout)
.readTimeout(readTimeout)
.maxConcurrency(maxConnections)
.build();
.buildWithDefaults(AttributeMap.builder()
.put(SdkHttpConfigurationOption.TRUST_ALL_CERTIFICATES, !connectorSslVerificationEnabled)
.build());
Copy link

@coderabbitai coderabbitai bot Dec 7, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

Using TRUST_ALL_CERTIFICATES creates significant security exposure.

Setting TRUST_ALL_CERTIFICATES to true completely disables SSL/TLS certificate validation, making the connection vulnerable to man-in-the-middle attacks. While this feature was explicitly requested for private network scenarios, operators should be clearly warned of the security implications.

Consider adding:

  1. A warning-level log message when SSL verification is disabled
  2. In-code documentation (JavaDoc) explicitly warning about the security risks
  3. Operational documentation highlighting that this setting should only be used in trusted environments
 return doPrivileged(() -> {
-            log
-                .debug(
-                    "Creating MLHttpClient with connectionTimeout: {}, readTimeout: {}, maxConnections: {}",
+            if (!connectorSslVerificationEnabled) {
+                log.warn(
+                    "SSL certificate verification is DISABLED. This connection is vulnerable to man-in-the-middle attacks. "
+                    + "Only use this setting in trusted environments."
+                );
+            }
+            log
+                .debug(
+                    "Creating MLHttpClient with connectionTimeout: {}, readTimeout: {}, maxConnections: {}, sslVerificationEnabled: {}",
                     connectionTimeout,
                     readTimeout,
-                    maxConnections
+                    maxConnections,
+                    connectorSslVerificationEnabled
                 );

Committable suggestion skipped: line range outside the PR's diff.

🤖 Prompt for AI Agents 
In
common/src/main/java/org/opensearch/ml/common/httpclient/MLHttpClientFactory.java
around lines 41 to 43, the code sets
SdkHttpConfigurationOption.TRUST_ALL_CERTIFICATES based on
connectorSslVerificationEnabled which disables SSL validation when true; add a
warning-level log message emitted when SSL verification is disabled to alert
operators, add a JavaDoc on the MLHttpClientFactory (or the method constructing
the client) explicitly describing the security risks of disabling certificate
validation and that it should only be used in trusted/private environments, and
update operational documentation/README to document this option and its risks
and recommended alternatives (e.g., install trusted CA or pin certificates).
Ensure the log message is clear and actionable and that code comments/Javadoc
reference the same guidance.

return new MLValidatableAsyncHttpClient(delegate, connectorPrivateIpEnabled);
});
}
Expand Down
4 changes: 4 additions & 0 deletions common/src/main/java/org/opensearch/ml/common/settings/MLCommonsSettings.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -483,4 +483,8 @@ private MLCommonsSettings() {}
// Feature flag for streaming feature
public static final Setting<Boolean> ML_COMMONS_STREAM_ENABLED = Setting
.boolSetting(ML_PLUGIN_SETTING_PREFIX + "stream_enabled", false, Setting.Property.NodeScope, Setting.Property.Dynamic);

// Feature flag to enable or disable SSL verification of remote llm connectors
public static final Setting<Boolean> ML_COMMONS_CONNECTOR_SSL_VERIFICATION_ENABLED = Setting
.boolSetting(ML_PLUGIN_SETTING_PREFIX + "connector.ssl_verification_enabled", true, Setting.Property.NodeScope, Setting.Property.Dynamic);
}
9 changes: 9 additions & 0 deletions common/src/main/java/org/opensearch/ml/common/settings/MLFeatureEnabledSetting.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,6 +22,7 @@
import static org.opensearch.ml.common.settings.MLCommonsSettings.ML_COMMONS_REMOTE_INFERENCE_ENABLED;
import static org.opensearch.ml.common.settings.MLCommonsSettings.ML_COMMONS_STATIC_METRIC_COLLECTION_ENABLED;
import static org.opensearch.ml.common.settings.MLCommonsSettings.ML_COMMONS_STREAM_ENABLED;
import static org.opensearch.ml.common.settings.MLCommonsSettings.ML_COMMONS_CONNECTOR_SSL_VERIFICATION_ENABLED;

import java.util.ArrayList;
import java.util.List;
Expand Down Expand Up @@ -63,6 +64,8 @@ public class MLFeatureEnabledSetting {

private volatile Boolean isStreamEnabled;

private volatile Boolean isConnectorSslVerificationEnabled;

private final List<SettingsChangeListener> listeners = new ArrayList<>();

public MLFeatureEnabledSetting(ClusterService clusterService, Settings settings) {
Expand All @@ -83,6 +86,7 @@ public MLFeatureEnabledSetting(ClusterService clusterService, Settings settings)
isAgenticMemoryEnabled = ML_COMMONS_AGENTIC_MEMORY_ENABLED.get(settings);
isIndexInsightEnabled = ML_COMMONS_INDEX_INSIGHT_FEATURE_ENABLED.get(settings);
isStreamEnabled = ML_COMMONS_STREAM_ENABLED.get(settings);
isConnectorSslVerificationEnabled = ML_COMMONS_CONNECTOR_SSL_VERIFICATION_ENABLED.get(settings);

clusterService
.getClusterSettings()
Expand All @@ -109,6 +113,7 @@ public MLFeatureEnabledSetting(ClusterService clusterService, Settings settings)
clusterService.getClusterSettings().addSettingsUpdateConsumer(ML_COMMONS_MCP_CONNECTOR_ENABLED, it -> isMcpConnectorEnabled = it);
clusterService.getClusterSettings().addSettingsUpdateConsumer(ML_COMMONS_AGENTIC_MEMORY_ENABLED, it -> isAgenticMemoryEnabled = it);
clusterService.getClusterSettings().addSettingsUpdateConsumer(ML_COMMONS_STREAM_ENABLED, it -> isStreamEnabled = it);
clusterService.getClusterSettings().addSettingsUpdateConsumer(ML_COMMONS_CONNECTOR_SSL_VERIFICATION_ENABLED, it -> isConnectorSslVerificationEnabled = it);
clusterService
.getClusterSettings()
.addSettingsUpdateConsumer(ML_COMMONS_INDEX_INSIGHT_FEATURE_ENABLED, it -> isIndexInsightEnabled = it);
Expand Down Expand Up @@ -245,4 +250,8 @@ public boolean isIndexInsightEnabled() {
public boolean isStreamEnabled() {
return isStreamEnabled;
}

public boolean isConnectorSslVerificationEnabled() {
return isConnectorSslVerificationEnabled;
}
}
4 changes: 3 additions & 1 deletion common/src/test/java/org/opensearch/ml/common/httpclient/MLHttpClientFactoryTests.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,9 @@ public class MLHttpClientFactoryTests {

@Test
public void test_getSdkAsyncHttpClient_success() {
SdkAsyncHttpClient client = MLHttpClientFactory.getAsyncHttpClient(Duration.ofSeconds(100), Duration.ofSeconds(100), 100, false);
SdkAsyncHttpClient client = MLHttpClientFactory.getAsyncHttpClient(Duration.ofSeconds(100), Duration.ofSeconds(100), 100, false, true);
assertNotNull(client);
client = MLHttpClientFactory.getAsyncHttpClient(Duration.ofSeconds(100), Duration.ofSeconds(100), 100, false, false);
assertNotNull(client);
}

Expand Down
5 changes: 5 additions & 0 deletions common/src/test/java/org/opensearch/ml/common/settings/MLCommonsSettingsTests.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -107,4 +107,9 @@ public void testAgenticMemoryDisabledMessage() {
public void testStreamDisabledByDefault() {
assertFalse(MLCommonsSettings.ML_COMMONS_STREAM_ENABLED.getDefault(null));
}

@Test
public void testConnectorSSLVerificationByDefault() {
assertTrue(MLCommonsSettings.ML_COMMONS_CONNECTOR_SSL_VERIFICATION_ENABLED.getDefault(null));
}
}
7 changes: 6 additions & 1 deletion common/src/test/java/org/opensearch/ml/common/settings/MLFeatureEnabledSettingTests.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,8 @@ public void setUp() {
MLCommonsSettings.ML_COMMONS_MCP_CONNECTOR_ENABLED,
MLCommonsSettings.ML_COMMONS_AGENTIC_MEMORY_ENABLED,
MLCommonsSettings.ML_COMMONS_INDEX_INSIGHT_FEATURE_ENABLED,
MLCommonsSettings.ML_COMMONS_STREAM_ENABLED
MLCommonsSettings.ML_COMMONS_STREAM_ENABLED,
MLCommonsSettings.ML_COMMONS_CONNECTOR_SSL_VERIFICATION_ENABLED
)
);
when(mockClusterService.getClusterSettings()).thenReturn(mockClusterSettings);
Expand All @@ -74,6 +75,7 @@ public void testDefaults_allFeaturesEnabled() {
.put("plugins.ml_commons.agentic_search_enabled", true)
.put("plugins.ml_commons.agentic_memory_enabled", true)
.put("plugins.ml_commons.stream_enabled", true)
.put("plugins.ml_commons.connector.ssl_verification_enabled", true)
.build();

MLFeatureEnabledSetting setting = new MLFeatureEnabledSetting(mockClusterService, settings);
Expand All @@ -93,6 +95,7 @@ public void testDefaults_allFeaturesEnabled() {
assertTrue(setting.isMcpConnectorEnabled());
assertTrue(setting.isAgenticMemoryEnabled());
assertTrue(setting.isStreamEnabled());
assertTrue(setting.isConnectorSslVerificationEnabled());
}

@Test
Expand All @@ -115,6 +118,7 @@ public void testDefaults_someFeaturesDisabled() {
.put("plugins.ml_commons.agentic_search_enabled", false)
.put("plugins.ml_commons.agentic_memory_enabled", false)
.put("plugins.ml_commons.stream_enabled", false)
.put("plugins.ml_commons.connector.ssl_verification_enabled", false)
.build();

MLFeatureEnabledSetting setting = new MLFeatureEnabledSetting(mockClusterService, settings);
Expand All @@ -134,6 +138,7 @@ public void testDefaults_someFeaturesDisabled() {
assertFalse(setting.isMcpConnectorEnabled());
assertFalse(setting.isAgenticMemoryEnabled());
assertFalse(setting.isStreamEnabled());
assertFalse(setting.isConnectorSslVerificationEnabled());
}

@Test
Expand Down
5 changes: 4 additions & 1 deletion ...rithms/src/main/java/org/opensearch/ml/engine/algorithms/remote/AwsConnectorExecutor.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -82,6 +82,9 @@ public class AwsConnectorExecutor extends AbstractConnectorExecutor {
@Setter
private boolean connectorPrivateIpEnabled;

@Setter
private boolean connectorSslVerificationEnabled;

public AwsConnectorExecutor(Connector connector) {
super.initialize(connector);
this.connector = (AwsConnector) connector;
Expand Down Expand Up @@ -193,7 +196,7 @@ protected SdkAsyncHttpClient getHttpClient() {
this.httpClientRef
.compareAndSet(
null,
MLHttpClientFactory.getAsyncHttpClient(connectionTimeout, readTimeout, maxConnection, connectorPrivateIpEnabled)
MLHttpClientFactory.getAsyncHttpClient(connectionTimeout, readTimeout, maxConnection, connectorPrivateIpEnabled, connectorSslVerificationEnabled)
);
Comment on lines 197 to 202
Copy link

@coderabbitai coderabbitai bot Dec 7, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Fix spotless formatting violation.

The pipeline indicates a formatting violation. Run the following command to fix:

./gradlew :opensearch-ml-algorithms:spotlessApply
🧰 Tools
🪛 GitHub Actions: Build and Test ml-commons

[error] 196-196: spotlessJavaCheck failed: formatting violations detected in AwsConnectorExecutor.java. Run './gradlew :opensearch-ml-algorithms:spotlessApply' to fix.

🤖 Prompt for AI Agents 
In
ml-algorithms/src/main/java/org/opensearch/ml/engine/algorithms/remote/AwsConnectorExecutor.java
around lines 196 to 200, the code fails Spotless formatting checks; run the
formatter to apply the project's code-style fixes by executing ./gradlew
:opensearch-ml-algorithms:spotlessApply, then re-run the build or pre-commit
checks and commit the reformatted file(s).

}
return httpClientRef.get();
Expand Down
4 changes: 3 additions & 1 deletion ...s/src/main/java/org/opensearch/ml/engine/algorithms/remote/HttpJsonConnectorExecutor.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -74,6 +74,8 @@ public class HttpJsonConnectorExecutor extends AbstractConnectorExecutor {
private MLGuard mlGuard;
@Setter
private volatile boolean connectorPrivateIpEnabled;
@Setter
private boolean connectorSslVerificationEnabled;

private final AtomicReference<SdkAsyncHttpClient> httpClientRef = new AtomicReference<>();

Expand Down Expand Up @@ -183,7 +185,7 @@ protected SdkAsyncHttpClient getHttpClient() {
this.httpClientRef
.compareAndSet(
null,
MLHttpClientFactory.getAsyncHttpClient(connectionTimeout, readTimeout, maxConnection, connectorPrivateIpEnabled)
MLHttpClientFactory.getAsyncHttpClient(connectionTimeout, readTimeout, maxConnection, connectorPrivateIpEnabled, connectorSslVerificationEnabled)
);
}
return httpClientRef.get();
Expand Down
2 changes: 2 additions & 0 deletions ...hms/src/main/java/org/opensearch/ml/engine/algorithms/remote/RemoteConnectorExecutor.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -184,6 +184,8 @@ default void setClient(Client client) {}

default void setConnectorPrivateIpEnabled(boolean connectorPrivateIpEnabled) {}

default void setConnectorSslVerificationEnabled(boolean connectorSslVerificationEnabled) {}

default void setXContentRegistry(NamedXContentRegistry xContentRegistry) {}

default void setClusterService(ClusterService clusterService) {}
Expand Down
2 changes: 2 additions & 0 deletions ml-algorithms/src/main/java/org/opensearch/ml/engine/algorithms/remote/RemoteModel.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -53,6 +53,7 @@ public class RemoteModel implements Predictable {
public static final String USER_RATE_LIMITER_MAP = "user_rate_limiter_map";
public static final String GUARDRAILS = "guardrails";
public static final String CONNECTOR_PRIVATE_IP_ENABLED = "connectorPrivateIpEnabled";
public static final String CONNECTOR_SSL_VERIFICATION_ENABLED = "connectorSslVerificationEnabled";
Copy link

@coderabbitai coderabbitai bot Dec 7, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

RemoteModel wiring for SSL verification is correct; fix Spotless formatting

The new CONNECTOR_SSL_VERIFICATION_ENABLED constant and use of:

(boolean) params.getOrDefault(CONNECTOR_SSL_VERIFICATION_ENABLED, true)

correctly default remote connectors to verify certificates unless explicitly disabled, and cleanly forwards the flag into the RemoteConnectorExecutor.

However, the pipeline indicates a spotlessJavaCheck failure in this file, and the new setConnectorSslVerificationEnabled call is long enough to likely violate the line-length/formatting rules. You can fix this by wrapping the call, for example:

-            this.connectorExecutor.setConnectorSslVerificationEnabled((boolean) params.getOrDefault(CONNECTOR_SSL_VERIFICATION_ENABLED, true));
+            this.connectorExecutor
+                .setConnectorSslVerificationEnabled(
+                    (boolean) params.getOrDefault(CONNECTOR_SSL_VERIFICATION_ENABLED, true)
+                );

and then re-running ./gradlew :opensearch-ml-algorithms:spotlessApply.

Also applies to: 131-132

🤖 Prompt for AI Agents 
In
ml-algorithms/src/main/java/org/opensearch/ml/engine/algorithms/remote/RemoteModel.java
around lines 56 and 131-132, Spotless is failing due to a
long/setConnectorSslVerificationEnabled call that exceeds line-length/formatting
rules; wrap the long method call across multiple lines (for example break the
argument expression and method call onto separate indented lines or split the
chained calls) so it conforms to the project's line-length and formatting
conventions, then run ./gradlew :opensearch-ml-algorithms:spotlessApply to
reformat and verify.

public static final String SDK_CLIENT = "sdk_client";
public static final String SETTINGS = "settings";

Expand Down Expand Up @@ -127,6 +128,7 @@ public CompletionStage<Boolean> initModelAsync(MLModel model, Map<String, Object
this.connectorExecutor.setUserRateLimiterMap((Map<String, TokenBucket>) params.get(USER_RATE_LIMITER_MAP));
this.connectorExecutor.setMlGuard((MLGuard) params.get(GUARDRAILS));
this.connectorExecutor.setConnectorPrivateIpEnabled((boolean) params.getOrDefault(CONNECTOR_PRIVATE_IP_ENABLED, false));
this.connectorExecutor.setConnectorSslVerificationEnabled((boolean) params.getOrDefault(CONNECTOR_SSL_VERIFICATION_ENABLED, true));
return CompletableFuture.completedStage(true);
}).exceptionally(e -> {
log.error("Failed to init remote model.", e);
Expand Down
1 change: 1 addition & 0 deletions plugin/src/main/java/org/opensearch/ml/action/connector/ExecuteConnectorTransportAction.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -84,6 +84,7 @@ protected void doExecute(Task task, ActionRequest request, ActionListener<MLTask
RemoteConnectorExecutor connectorExecutor = MLEngineClassLoader
.initInstance(connector.getProtocol(), connector, Connector.class);
connectorExecutor.setConnectorPrivateIpEnabled(mlFeatureEnabledSetting.isConnectorPrivateIpEnabled());
connectorExecutor.setConnectorSslVerificationEnabled(mlFeatureEnabledSetting.isConnectorSslVerificationEnabled());
connectorExecutor.setScriptService(scriptService);
connectorExecutor.setClusterService(clusterService);
connectorExecutor.setClient(client);
Expand Down
2 changes: 2 additions & 0 deletions plugin/src/main/java/org/opensearch/ml/model/MLModelManager.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,6 +42,7 @@
import static org.opensearch.ml.engine.algorithms.remote.RemoteModel.SETTINGS;
import static org.opensearch.ml.engine.algorithms.remote.RemoteModel.USER_RATE_LIMITER_MAP;
import static org.opensearch.ml.engine.algorithms.remote.RemoteModel.XCONTENT_REGISTRY;
import static org.opensearch.ml.engine.algorithms.remote.RemoteModel.CONNECTOR_SSL_VERIFICATION_ENABLED;
import static org.opensearch.ml.engine.algorithms.text_embedding.TextEmbeddingDenseModel.ML_ENGINE;
import static org.opensearch.ml.engine.algorithms.text_embedding.TextEmbeddingDenseModel.MODEL_HELPER;
import static org.opensearch.ml.engine.algorithms.text_embedding.TextEmbeddingDenseModel.MODEL_ZIP_FILE;
Expand Down Expand Up @@ -1509,6 +1510,7 @@ private Map<String, Object> setUpParameterMap(String modelId, String tenantId) {
log.info("Setting up ML guard parameter for ML predictor.");
}
params.put(CONNECTOR_PRIVATE_IP_ENABLED, mlFeatureEnabledSetting.isConnectorPrivateIpEnabled());
params.put(CONNECTOR_SSL_VERIFICATION_ENABLED, mlFeatureEnabledSetting.isConnectorSslVerificationEnabled());
params.put(SDK_CLIENT, sdkClient);
params.put(SETTINGS, settings);
return Collections.unmodifiableMap(params);
Expand Down
3 changes: 2 additions & 1 deletion plugin/src/main/java/org/opensearch/ml/plugin/MachineLearningPlugin.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1364,7 +1364,8 @@ public List<Setting<?>> getSettings() {
MLCommonsSettings.ML_COMMONS_INDEX_INSIGHT_FEATURE_ENABLED,
MLCommonsSettings.REMOTE_METADATA_GLOBAL_TENANT_ID,
MLCommonsSettings.REMOTE_METADATA_GLOBAL_RESOURCE_CACHE_TTL,
MLCommonsSettings.ML_COMMONS_STREAM_ENABLED
MLCommonsSettings.ML_COMMONS_STREAM_ENABLED,
MLCommonsSettings.ML_COMMONS_CONNECTOR_SSL_VERIFICATION_ENABLED
);
return settings;
}
Expand Down
4 changes: 3 additions & 1 deletion plugin/src/test/java/org/opensearch/ml/settings/MLFeatureEnabledSettingTests.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,6 +28,7 @@
import static org.opensearch.ml.common.settings.MLCommonsSettings.ML_COMMONS_REMOTE_INFERENCE_ENABLED;
import static org.opensearch.ml.common.settings.MLCommonsSettings.ML_COMMONS_STATIC_METRIC_COLLECTION_ENABLED;
import static org.opensearch.ml.common.settings.MLCommonsSettings.ML_COMMONS_STREAM_ENABLED;
import static org.opensearch.ml.common.settings.MLCommonsSettings.ML_COMMONS_CONNECTOR_SSL_VERIFICATION_ENABLED;

import java.util.Set;

Expand Down Expand Up @@ -80,7 +81,8 @@ public void setUp() {
ML_COMMONS_AGENTIC_MEMORY_ENABLED,
ML_COMMONS_MCP_CONNECTOR_ENABLED,
ML_COMMONS_INDEX_INSIGHT_FEATURE_ENABLED,
ML_COMMONS_STREAM_ENABLED
ML_COMMONS_STREAM_ENABLED,
ML_COMMONS_CONNECTOR_SSL_VERIFICATION_ENABLED
)
)
);
Expand Down
Loading