feat: change some little security risks, add another ingress that has ip whitelist for admin panel and update some OCI image versions

charts/values.yaml

@@ -54,6 +54,10 @@ readinessProbe:
     path: /
     port: http
 
+middlewares:
+  httpsIPWhitelist:
+    name: ipwhitelist-fsrim-subnet
+
 ingress:
   https:
     annotations:
@@ -69,6 +73,18 @@ ingress:
                   name: *service_ical
                   port:
                     number: *service_ical_port
+  httpsIPWhitelist:
+    hosts:
+      - host: *frontend_host
+        http:
+          paths:
+            - path: /_
+              pathType: ImplementationSpecific
+              backend:
+                service:
+                  name: *service_data_manager
+                  port:
+                    number: *service_data_manager_port
   httpsRedirect:
     hosts:
       - host: *frontend_host
@@ -123,10 +139,3 @@ ingress:
                   name: *service_data_manager
                   port:
                     number: *service_data_manager_port
-            - path: /_
-              pathType: ImplementationSpecific
-              backend:
-                service:
-                  name: *service_data_manager
-                  port:
-                    number: *service_data_manager_port