I had similar questions a while back
and white/black-lists cannot be hard coded.
Not knowing much about ioBroker, where in your MQTT message is the retain flag set to true though? If the white-list is sent with the retain flag set to true the MQTT broker should send the white-list again after every restart of the ESP32.
If you connect to your MQTT broker with an app like MQTT.fx or MQTT Explorer, does the white-list message show up as retained there when you subsribe to your OpenMQTTGateway?
I actually resend different white-lists, depending on other variables like presence and security state, via OpenHAB, by monitoring for the LWT state of OMG, which sends an “online” after every restart (Actually also a retained message, along with another one containing the version number - both great for checking to see if retained messages correctly show up for you). I’m sure this would also be possible with ioBroker, but a correctly set retain=true with your white-list message should do the trick for you.
Hope this helps.