add support for custom llm with ssl support

Add support for using custom llm that are served through https protocol.

arch/arch_config_schema.yaml

@@ -61,6 +61,11 @@ properties:
           type: boolean
         endpoint:
           type: string
+        protocol:
+          type: string
+          enum:
+            - http
+            - https
       additionalProperties: false
       required:
         - name

arch/envoy.template.yaml

@@ -567,6 +567,18 @@ static_resources:
                       address: {{ local_llm_provider.endpoint }}
                       port_value: {{ local_llm_provider.port }}
                   hostname: {{ local_llm_provider.endpoint }}
+      {% if local_llm_provider.protocol == "https" %}
+      transport_socket:
+        name: envoy.transport_sockets.tls
+        typed_config:
+          "@type": type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
+          sni: {{ local_llm_provider.endpoint }}
+          common_tls_context:
+            tls_params:
+              tls_minimum_protocol_version: TLSv1_2
+              tls_maximum_protocol_version: TLSv1_3
+      {% endif %}
+
 {% endfor %}
     - name: arch_internal
       connect_timeout: 5s

demos/currency_exchange_ollama/arch_config.yaml

@@ -7,12 +7,19 @@ listener:
   connect_timeout: 0.005s
 
 llm_providers:
+
   - name: local-llama
     provider_interface: openai
     model: llama3.2
     endpoint: host.docker.internal:11434
     default: true
 
+  - name: arch-fc-cloud
+    provider_interface: openai
+    model: Arch-Function
+    endpoint: api.fc.archgw.com:443
+    protocol: https
+
 system_prompt: |
   You are a helpful assistant.