I think the operator should remove the whitelisted IP from the list when the CR is deleted. Currently, deleting the CR do nothing.