Hi,
Im really sorry for my late response.
When I tried to reproduce this issue in our unsecured cluster i found out that everything works as expected when default envoy image is pulled. After that I checked our private docker registry what kind of envoy image we use and envoy:distroless has been spotted. So you were on the right track to solve this issue.
Thank you