Hi @ceastman-ibm,
It seems to me that you have a slightly different (authorization) problem.
Have you checked that the envoyproxy stats endpoint is available from the metricbeat pod?
Try something like:
kubectl exec -it [metricbeat pod name] -n [namespace] -- /bin/bash
When you in the metricbeat pod, ping the envoy stats endpoint.