Istio-policy CrashLoopBackOff with EKS 1.5

Mixer logs:

Mixer started with
MaxMessageSize: 1048576
MaxConcurrentStreams: 1024
APIWorkerPoolSize: 1024
AdapterWorkerPoolSize: 1024
APIPort: 9091
APIAddress: unix:///sock/mixer.socket
MonitoringPort: 15014
EnableProfiling: true
SingleThreaded: false
NumCheckCacheEntries: 1500000
ConfigStoreURL: mcp://istio-galley.istio-system.svc:9901
CertificateFile: /etc/certs/cert-chain.pem
KeyFile: /etc/certs/key.pem
CACertificateFile: /etc/certs/root-cert.pem
ConfigDefaultNamespace: istio-system
ConfigWaitTimeout: 2m0s
LoggingOptions: log.Options{OutputPaths:string{“stdout”}, ErrorOutputPaths:string{“stderr”}, RotateOutputPath:"", RotationMaxSize:104857600, RotationMaxAge:30, RotationMaxBackups:1000, JSONEncoding:false, LogGrpc:true, outputLevels:“default:info”, logCallers:"", stackTraceLevels:“default:none”}
TracingOptions: tracing.Options{ZipkinURL:“http://zipkin.istio-system:9411/api/v1/spans”, JaegerURL:"", LogTraceSpans:false, SamplingRate:0}
IntrospectionOptions: ctrlz.Options{Port:0x2694, Address:“localhost”}
UseTemplateCRDs: false
LoadSheddingOptions: loadshedding.Options{Mode:0, AverageLatencyThreshold:0, SamplesPerSecond:1.7976931348623157e+308, SampleHalfLife:1000000000, LatencyEnforcementThreshold:100, MaxRequestsPerSecond:0, BurstSize:0}
UseAdapterCRDs: false

2020-05-08T15:32:08.594794Z info mcp Requesting following collections:
2020-05-08T15:32:08.594814Z info mcp [0] istio/policy/v1beta1/instances
2020-05-08T15:32:08.594818Z info mcp [1] istio/config/v1alpha2/templates
2020-05-08T15:32:08.594821Z info mcp [2] istio/policy/v1beta1/rules
2020-05-08T15:32:08.594825Z info mcp [3] istio/policy/v1beta1/handlers
2020-05-08T15:32:08.594827Z info mcp [4] istio/config/v1alpha2/adapters
2020-05-08T15:32:08.594830Z info mcp [5] istio/policy/v1beta1/attributemanifests
2020-05-08T15:32:08.594844Z info parsed scheme: “”
2020-05-08T15:32:08.594851Z info scheme “” not registered, fallback to default scheme
2020-05-08T15:32:08.594868Z info ccResolverWrapper: sending update to cc: {[{istio-galley.istio-system.svc:9901 0 }] }
2020-05-08T15:32:08.594874Z info ClientConn switching balancer to “pick_first”
2020-05-08T15:32:08.594928Z info Awaiting for config store sync…
2020-05-08T15:32:08.595135Z info mcp (re)trying to establish new MCP sink stream
2020-05-08T15:32:08.595223Z info blockingPicker: the picked transport is not ready, loop back to repick
2020-05-08T15:32:08.595597Z info pickfirstBalancer: HandleSubConnStateChange: 0xc000bb79a0, {CONNECTING }

proxy-logs:

2020-05-08T15:19:57.928231Z info PilotSAN string(nil)
2020-05-08T15:19:57.928255Z info Starting proxy agent
2020-05-08T15:19:57.928370Z info Received new config, creating new Envoy epoch 0
2020-05-08T15:19:57.928437Z info watching /etc/certs for changes
2020-05-08T15:19:57.928445Z info Epoch 0 starting
2020-05-08T15:19:57.928503Z info Envoy command: [-c /etc/istio/proxy/envoy.yaml --restart-epoch 0 --drain-time-s 45 --parent-shutdown-time-s 60 --service-cluster istio-policy --service-node sidecar~10.135.179.48~istio-policy-6c5f4689bc-6jpgs.istio-system~istio-system.svc.cluster.local --max-obj-name-len 189 --local-address-ip-version v4 --log-format [Envoy (Epoch 0)] [%Y-%m-%d %T.%e][%t][%l][%n] %v -l warning --component-log-level misc:error]
2020-05-08T15:20:13.353291Z info watchFileEvents: “/etc/certs/…2020_05_08_15_20_13.243302337”: CREATE
2020-05-08T15:20:13.353386Z info watchFileEvents: “/etc/certs/…2020_05_08_15_20_13.243302337”: MODIFY
2020-05-08T15:20:13.353462Z info watchFileEvents: “/etc/certs/cert-chain.pem”: CREATE
2020-05-08T15:20:13.353470Z info watchFileEvents: “/etc/certs/key.pem”: CREATE
2020-05-08T15:20:13.353475Z info watchFileEvents: “/etc/certs/root-cert.pem”: CREATE
2020-05-08T15:20:13.353493Z info watchFileEvents: “/etc/certs/…data_tmp”: RENAME
2020-05-08T15:20:13.353499Z info watchFileEvents: “/etc/certs/…data”: CREATE
2020-05-08T15:20:13.353506Z info watchFileEvents: “/etc/certs/…2020_05_08_15_19_46.923479336”: DELETE
2020-05-08T15:20:23.353489Z info watchFileEvents: notifying
2020-05-08T15:20:23.353629Z info Received new config, creating new Envoy epoch 1
2020-05-08T15:20:23.353639Z info waiting for epoch 0 to go live before performing a hot restart