Hello @krobbo,
You can find a recent tutorial to start with Istio and Traefik here.
It sounds like the preferred approach would be once on Traefik 3.2 to set the global option so as traffic goes to the k8s cluster IP versus straight to the backends?
Indeed, setting the option to the provider level is relevant in this context.