Implement traffic routing/stealing via CNI

[aviramha]

Since Kubernetes 1.29 you can have chained CNIs, meaning we can have another layer that would do the redirection without needing elevated permissions. It requires installing a CNI, so probably would come with the operator as an option but need the agent to support it.
Istio is a good example - https://istio.io/latest/docs/setup/additional-setup/cni/