For those that come across this, I believe I have figured it out. The key was this: https://docs.traefik.io/v2.1/routing/routers/#tls where it mentions that: "When a TLS section is specified, it instructs Traefik that the current router is dedicated to HTTPS requests only (and that the router should ignore HTTP (non TLS) requests). Traefik will terminate the SSL connections (meaning that it will send decrypted data to the services)." In the kubernetes-crd realm, this means adding an empty "tls" block to the ingressroute like so:
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
name: helloworld-ingressroute
namespace: hello
annotations:
kubernetes.io/ingress.class: shared-ingress
spec:
tls: {}
entryPoints:
- https
routes:
- match: Host(`helloworld.mydomain.com`)
kind: Rule
services:
- name: helloworld
port: 8081