Auto download envoy when missing

Author: sjmiller609

Makefile

@@ -1,5 +1,5 @@
 SHELL := /bin/bash
-.PHONY: oapi-generate generate-vmm-client generate-wire generate-all dev build test install-tools gen-jwt download-ch-binaries download-ch-spec ensure-ch-binaries
+.PHONY: oapi-generate generate-vmm-client generate-wire generate-all dev build test install-tools gen-jwt download-ch-binaries download-ch-spec ensure-ch-binaries download-envoy-binaries ensure-envoy-binaries
 
 # Directory where local binaries will be installed
 BIN_DIR ?= $(CURDIR)/bin
@@ -49,6 +49,19 @@ download-ch-binaries:
 	@chmod +x lib/vmm/binaries/cloud-hypervisor/v*/*/cloud-hypervisor
 	@echo "Binaries downloaded successfully"
 
+# Download Envoy binaries
+download-envoy-binaries:
+	@echo "Downloading Envoy binaries..."
+	@mkdir -p lib/ingress/binaries/envoy/v1.36/{x86_64,aarch64}
+	@echo "Downloading Envoy v1.36.3 for x86_64..."
+	@curl -L -o lib/ingress/binaries/envoy/v1.36/x86_64/envoy \
+		https://github.com/envoyproxy/envoy/releases/download/v1.36.3/envoy-1.36.3-linux-x86_64
+	@echo "Downloading Envoy v1.36.3 for aarch64..."
+	@curl -L -o lib/ingress/binaries/envoy/v1.36/aarch64/envoy \
+		https://github.com/envoyproxy/envoy/releases/download/v1.36.3/envoy-1.36.3-linux-aarch_64
+	@chmod +x lib/ingress/binaries/envoy/v1.36/*/envoy
+	@echo "Envoy binaries downloaded successfully"
+
 # Download Cloud Hypervisor API spec
 download-ch-spec:
 	@echo "Downloading Cloud Hypervisor API spec..."
@@ -86,21 +99,29 @@ generate-grpc:
 # Generate all code
 generate-all: oapi-generate generate-vmm-client generate-wire generate-grpc
 
-# Check if binaries exist, download if missing
+# Check if CH binaries exist, download if missing
 .PHONY: ensure-ch-binaries
 ensure-ch-binaries:
 	@if [ ! -f lib/vmm/binaries/cloud-hypervisor/v48.0/x86_64/cloud-hypervisor ]; then \
 		echo "Cloud Hypervisor binaries not found, downloading..."; \
 		$(MAKE) download-ch-binaries; \
 	fi
 
+# Check if Envoy binaries exist, download if missing
+.PHONY: ensure-envoy-binaries
+ensure-envoy-binaries:
+	@if [ ! -f lib/ingress/binaries/envoy/v1.36/x86_64/envoy ]; then \
+		echo "Envoy binaries not found, downloading..."; \
+		$(MAKE) download-envoy-binaries; \
+	fi
+
 # Build exec-agent (guest binary) into its own directory for embedding
 lib/system/exec_agent/exec-agent: lib/system/exec_agent/main.go
 	@echo "Building exec-agent..."
 	cd lib/system/exec_agent && CGO_ENABLED=0 go build -ldflags="-s -w" -o exec-agent .
 
 # Build the binary
-build: ensure-ch-binaries lib/system/exec_agent/exec-agent | $(BIN_DIR)
+build: ensure-ch-binaries ensure-envoy-binaries lib/system/exec_agent/exec-agent | $(BIN_DIR)
 	go build -tags containers_image_openpgp -o $(BIN_DIR)/hypeman ./cmd/api
 
 # Build exec CLI
@@ -118,7 +139,7 @@ dev: $(AIR)
 # Compile test binaries and grant network capabilities (runs as user, not root)
 # Usage: make test                              - runs all tests
 #        make test TEST=TestCreateInstanceWithNetwork  - runs specific test
-test: ensure-ch-binaries lib/system/exec_agent/exec-agent
+test: ensure-ch-binaries ensure-envoy-binaries lib/system/exec_agent/exec-agent
 	@echo "Building test binaries..."
 	@mkdir -p $(BIN_DIR)/tests
 	@for pkg in $$(go list -tags containers_image_openpgp ./...); do \