is there an altenative to ip_allow.yaml for security ?

[Cameron Braid]

Hi,

I am running ats in a kubernetes cluster with istio.  The ip based rules
are not usable in this configuration as every connection comes from
127.0.0.1 due to the traffic originating from the istio sidecar proxy

I would like to block access to PURGE requests from the public at large,
but allow it from an internal service.  Is there an alternative way to
achieve this ?

Cheers

Cameron