Best practices for jobs

We have cronjobs that make extensive use of another service. So it would make sense for the pods created from these cronjobs be part of the service mesh. But I don’t understand how:
In https://istio.io/docs/ops/deployment/requirements/ it is stated that “Service association : A pod must belong to at least one Kubernetes service even if the pod does NOT expose any port. If a pod belongs to multiple Kubernetes services, the services cannot use the same port number for different protocols, for instance HTTP and TCP.”

How would I achieve that with a cronjob?

Then there is the question of quitting the istio-proxy when the job is done, but I think I have figured that out by executing curl -sf -XPOST http://127.0.0.1:15020/quitquitquit in the end.