How to deny url in IngressRoute

version: traefik 2.1.6
providers: kubernetescrd
how to config like nginx url deny

server {
    listen       80;
    server_name  my.domain.com;
    location ^~ /monitor {
       deny all;
    }
    location ^~ /hystrix {
       deny all;
    }
    location ^~ /druid {
       deny all;
    }
    location / {            
        proxy_pass http://myserver;
    }
}

IngressRoute yaml

apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: traefik-dashboard
  annotations:
    kubernetes.io/ingress.class: traefik-internet
spec:
  entryPoints:
  - web
  routes:
   - match: Host(`my.domain.com`) && PathPrefix(`/`)  how to configure?
    kind: Rule
    services:
    - name: whoami
      port: 80
      terminationDelay: 60000
    middlewares:
    - name: ui-auth
    - name: retry-two

Hi @qisong
Were you able to solve this? I too have the same requirement and currently using v2.6
One workaround I found is to use ReplacePathRegex middleware and permanently redirect sensitive URLs to other page.