diff --git a/.github/workflows/federation-helm.yml b/.github/workflows/federation-helm.yml
index caf3ef4..1350b1b 100644
--- a/.github/workflows/federation-helm.yml
+++ b/.github/workflows/federation-helm.yml
@@ -61,7 +61,8 @@ env:
   KIND_NODE_IMAGE: kindest/node:v1.31.0
   # The chart's image refs default to the Chart.yaml appVersion. The live jobs pull the
   # public DockerHub tags at this version so the chart DEFAULTS resolve the kind-loaded images.
-  IMAGE_TAG: '0.2.1'
+  # MUST match Chart.yaml appVersion — stale on the 0.2.2 train, reconciled on 0.2.3.
+  IMAGE_TAG: '0.2.3'
   FED_IMAGE: softnetwork/softclient4es-federation
   SIDECAR_IMAGE_PREFIX: softnetwork/softclient4es   # softclient4es<N>-arrow-flight-sql
   # A pre-baked ADBC client image avoids the smoke Job's runtime pip install (air-gap). When
diff --git a/softclient4es-federation/Chart.yaml b/softclient4es-federation/Chart.yaml
index df73f4d..91f2ad9 100644
--- a/softclient4es-federation/Chart.yaml
+++ b/softclient4es-federation/Chart.yaml
@@ -17,12 +17,17 @@ type: application
 #        qualifier preserved on the AST→SQL round-trip, #159 bare-alias sort
 #        rejected) + extensions 0.2.1, rolled into the federation + sidecar
 #        images (softclient4es-arrow#126).
-version: 0.3.2
+# 0.3.3: appVersion 0.2.3 — elasticsql 0.20.2 (REPL epic: layered CLI config
+#        precedence, -all bundle packaging, AppCDS cold-start; fixes #168 es6
+#        log4j-api, #171 resolver SPI service, #172 watcher substitutions)
+#        + extensions 0.2.2 + async DuckDB native-library warm-up, rolled into
+#        the federation + sidecar images (softclient4es-arrow#128).
+version: 0.3.3
 # The federation application/image version this chart deploys by default.
 # Keep in sync with docker.io/softnetwork/softclient4es-federation:<tag>.
 # Verified published on DockerHub for the federation image AND all four
 # softclient4es{6,7,8,9}-arrow-flight-sql sidecar images.
-appVersion: "0.2.2"
+appVersion: "0.2.3"
 keywords:
   - elasticsearch
   - flight-sql
diff --git a/softclient4es-federation/tests/golden/default.yaml b/softclient4es-federation/tests/golden/default.yaml
index babd7ca..3c9de38 100644
--- a/softclient4es-federation/tests/golden/default.yaml
+++ b/softclient4es-federation/tests/golden/default.yaml
@@ -5,10 +5,10 @@ kind: ServiceAccount
 metadata:
   name: fed-softclient4es-federation
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -20,10 +20,10 @@ kind: Service
 metadata:
   name: fed-softclient4es-federation
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -44,10 +44,10 @@ kind: Deployment
 metadata:
   name: fed-softclient4es-federation
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -60,10 +60,10 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: softclient4es-federation-0.3.2
+        helm.sh/chart: softclient4es-federation-0.3.3
         app.kubernetes.io/name: softclient4es-federation
         app.kubernetes.io/instance: fed
-        app.kubernetes.io/version: "0.2.2"
+        app.kubernetes.io/version: "0.2.3"
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/component: federation
         app.kubernetes.io/part-of: softclient4es
@@ -78,7 +78,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: federation
-          image: "docker.io/softnetwork/softclient4es-federation:0.2.2"
+          image: "docker.io/softnetwork/softclient4es-federation:0.2.3"
           imagePullPolicy: IfNotPresent
           securityContext:
             allowPrivilegeEscalation: false
diff --git a/softclient4es-federation/tests/golden/example-heterogeneous-ready.yaml b/softclient4es-federation/tests/golden/example-heterogeneous-ready.yaml
index f9b1379..5a7f1cc 100644
--- a/softclient4es-federation/tests/golden/example-heterogeneous-ready.yaml
+++ b/softclient4es-federation/tests/golden/example-heterogeneous-ready.yaml
@@ -5,10 +5,10 @@ kind: ServiceAccount
 metadata:
   name: fed-softclient4es-federation
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -20,10 +20,10 @@ kind: ConfigMap
 metadata:
   name: fed-softclient4es-federation-config
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -84,10 +84,10 @@ kind: Service
 metadata:
   name: fed-softclient4es-federation
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -108,12 +108,12 @@ kind: Service
 metadata:
   name: fed-softclient4es-federation-us-east-1
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
     app.kubernetes.io/component: sidecar
     softclient4es.app/sidecar: us-east-1
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: softclient4es
 spec:
@@ -135,12 +135,12 @@ kind: Service
 metadata:
   name: fed-softclient4es-federation-eu-west-1
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
     app.kubernetes.io/component: sidecar
     softclient4es.app/sidecar: eu-west-1
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: softclient4es
 spec:
@@ -162,12 +162,12 @@ kind: Service
 metadata:
   name: fed-softclient4es-federation-ap-south-1
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
     app.kubernetes.io/component: sidecar
     softclient4es.app/sidecar: ap-south-1
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: softclient4es
 spec:
@@ -189,10 +189,10 @@ kind: Deployment
 metadata:
   name: fed-softclient4es-federation
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -205,17 +205,17 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: softclient4es-federation-0.3.2
+        helm.sh/chart: softclient4es-federation-0.3.3
         app.kubernetes.io/name: softclient4es-federation
         app.kubernetes.io/instance: fed
-        app.kubernetes.io/version: "0.2.2"
+        app.kubernetes.io/version: "0.2.3"
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/component: federation
         app.kubernetes.io/part-of: softclient4es
       annotations:
         # Roll the federation Pod whenever the rendered servers ConfigMap changes
         # (add/remove/edit a sidecar) so `helm upgrade` actually takes effect.
-        checksum/config: a07fb5f2a2e1fe5705e351705fc1548ceb304499eb4fd89a78ee62a464fe0e33
+        checksum/config: fea05a6c0dfac5301dc240b1fa732d6a9076bdbc7bf069c3ecd6af48a402759b
     spec:
       serviceAccountName: fed-softclient4es-federation
       securityContext:
@@ -227,7 +227,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: federation
-          image: "docker.io/softnetwork/softclient4es-federation:0.2.2"
+          image: "docker.io/softnetwork/softclient4es-federation:0.2.3"
           imagePullPolicy: IfNotPresent
           securityContext:
             allowPrivilegeEscalation: false
@@ -359,12 +359,12 @@ kind: Deployment
 metadata:
   name: fed-softclient4es-federation-us-east-1
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
     app.kubernetes.io/component: sidecar
     softclient4es.app/sidecar: us-east-1
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: softclient4es
 spec:
@@ -378,12 +378,12 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: softclient4es-federation-0.3.2
+        helm.sh/chart: softclient4es-federation-0.3.3
         app.kubernetes.io/name: softclient4es-federation
         app.kubernetes.io/instance: fed
         app.kubernetes.io/component: sidecar
         softclient4es.app/sidecar: us-east-1
-        app.kubernetes.io/version: "0.2.2"
+        app.kubernetes.io/version: "0.2.3"
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: softclient4es
     spec:
@@ -397,7 +397,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: sidecar
-          image: "docker.io/softnetwork/softclient4es8-arrow-flight-sql:0.2.2"
+          image: "docker.io/softnetwork/softclient4es8-arrow-flight-sql:0.2.3"
           imagePullPolicy: IfNotPresent
           securityContext:
             allowPrivilegeEscalation: false
@@ -549,12 +549,12 @@ kind: Deployment
 metadata:
   name: fed-softclient4es-federation-eu-west-1
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
     app.kubernetes.io/component: sidecar
     softclient4es.app/sidecar: eu-west-1
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: softclient4es
 spec:
@@ -568,12 +568,12 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: softclient4es-federation-0.3.2
+        helm.sh/chart: softclient4es-federation-0.3.3
         app.kubernetes.io/name: softclient4es-federation
         app.kubernetes.io/instance: fed
         app.kubernetes.io/component: sidecar
         softclient4es.app/sidecar: eu-west-1
-        app.kubernetes.io/version: "0.2.2"
+        app.kubernetes.io/version: "0.2.3"
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: softclient4es
     spec:
@@ -587,7 +587,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: sidecar
-          image: "docker.io/softnetwork/softclient4es8-arrow-flight-sql:0.2.2"
+          image: "docker.io/softnetwork/softclient4es8-arrow-flight-sql:0.2.3"
           imagePullPolicy: IfNotPresent
           securityContext:
             allowPrivilegeEscalation: false
@@ -739,12 +739,12 @@ kind: Deployment
 metadata:
   name: fed-softclient4es-federation-ap-south-1
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
     app.kubernetes.io/component: sidecar
     softclient4es.app/sidecar: ap-south-1
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: softclient4es
 spec:
@@ -758,12 +758,12 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: softclient4es-federation-0.3.2
+        helm.sh/chart: softclient4es-federation-0.3.3
         app.kubernetes.io/name: softclient4es-federation
         app.kubernetes.io/instance: fed
         app.kubernetes.io/component: sidecar
         softclient4es.app/sidecar: ap-south-1
-        app.kubernetes.io/version: "0.2.2"
+        app.kubernetes.io/version: "0.2.3"
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: softclient4es
     spec:
@@ -777,7 +777,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: sidecar
-          image: "docker.io/softnetwork/softclient4es9-arrow-flight-sql:0.2.2"
+          image: "docker.io/softnetwork/softclient4es9-arrow-flight-sql:0.2.3"
           imagePullPolicy: IfNotPresent
           securityContext:
             allowPrivilegeEscalation: false
@@ -929,10 +929,10 @@ kind: Pod
 metadata:
   name: fed-softclient4es-federation-test-catalogs
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
diff --git a/softclient4es-federation/tests/golden/example-single-cluster.yaml b/softclient4es-federation/tests/golden/example-single-cluster.yaml
index e58a687..4eccb1c 100644
--- a/softclient4es-federation/tests/golden/example-single-cluster.yaml
+++ b/softclient4es-federation/tests/golden/example-single-cluster.yaml
@@ -5,10 +5,10 @@ kind: ServiceAccount
 metadata:
   name: fed-softclient4es-federation
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -20,10 +20,10 @@ kind: ConfigMap
 metadata:
   name: fed-softclient4es-federation-config
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -49,10 +49,10 @@ kind: Service
 metadata:
   name: fed-softclient4es-federation
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -73,12 +73,12 @@ kind: Service
 metadata:
   name: fed-softclient4es-federation-primary
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
     app.kubernetes.io/component: sidecar
     softclient4es.app/sidecar: primary
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: softclient4es
 spec:
@@ -100,10 +100,10 @@ kind: Deployment
 metadata:
   name: fed-softclient4es-federation
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -116,17 +116,17 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: softclient4es-federation-0.3.2
+        helm.sh/chart: softclient4es-federation-0.3.3
         app.kubernetes.io/name: softclient4es-federation
         app.kubernetes.io/instance: fed
-        app.kubernetes.io/version: "0.2.2"
+        app.kubernetes.io/version: "0.2.3"
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/component: federation
         app.kubernetes.io/part-of: softclient4es
       annotations:
         # Roll the federation Pod whenever the rendered servers ConfigMap changes
         # (add/remove/edit a sidecar) so `helm upgrade` actually takes effect.
-        checksum/config: 1b4001f5738c9179c47622b86207ebbae749e338b38802ac0bc51c7b702e6e36
+        checksum/config: 601834c65d14088c9626f10817e4e38a784d442d0ccd99c58fc3b2ad4e559c4b
     spec:
       serviceAccountName: fed-softclient4es-federation
       securityContext:
@@ -138,7 +138,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: federation
-          image: "docker.io/softnetwork/softclient4es-federation:0.2.2"
+          image: "docker.io/softnetwork/softclient4es-federation:0.2.3"
           imagePullPolicy: IfNotPresent
           securityContext:
             allowPrivilegeEscalation: false
@@ -240,12 +240,12 @@ kind: Deployment
 metadata:
   name: fed-softclient4es-federation-primary
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
     app.kubernetes.io/component: sidecar
     softclient4es.app/sidecar: primary
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: softclient4es
 spec:
@@ -259,12 +259,12 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: softclient4es-federation-0.3.2
+        helm.sh/chart: softclient4es-federation-0.3.3
         app.kubernetes.io/name: softclient4es-federation
         app.kubernetes.io/instance: fed
         app.kubernetes.io/component: sidecar
         softclient4es.app/sidecar: primary
-        app.kubernetes.io/version: "0.2.2"
+        app.kubernetes.io/version: "0.2.3"
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: softclient4es
     spec:
@@ -278,7 +278,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: sidecar
-          image: "docker.io/softnetwork/softclient4es8-arrow-flight-sql:0.2.2"
+          image: "docker.io/softnetwork/softclient4es8-arrow-flight-sql:0.2.3"
           imagePullPolicy: IfNotPresent
           securityContext:
             allowPrivilegeEscalation: false
@@ -394,10 +394,10 @@ kind: Pod
 metadata:
   name: fed-softclient4es-federation-test-catalogs
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
diff --git a/softclient4es-federation/tests/golden/example-three-region.yaml b/softclient4es-federation/tests/golden/example-three-region.yaml
index f9b1379..5a7f1cc 100644
--- a/softclient4es-federation/tests/golden/example-three-region.yaml
+++ b/softclient4es-federation/tests/golden/example-three-region.yaml
@@ -5,10 +5,10 @@ kind: ServiceAccount
 metadata:
   name: fed-softclient4es-federation
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -20,10 +20,10 @@ kind: ConfigMap
 metadata:
   name: fed-softclient4es-federation-config
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -84,10 +84,10 @@ kind: Service
 metadata:
   name: fed-softclient4es-federation
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -108,12 +108,12 @@ kind: Service
 metadata:
   name: fed-softclient4es-federation-us-east-1
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
     app.kubernetes.io/component: sidecar
     softclient4es.app/sidecar: us-east-1
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: softclient4es
 spec:
@@ -135,12 +135,12 @@ kind: Service
 metadata:
   name: fed-softclient4es-federation-eu-west-1
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
     app.kubernetes.io/component: sidecar
     softclient4es.app/sidecar: eu-west-1
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: softclient4es
 spec:
@@ -162,12 +162,12 @@ kind: Service
 metadata:
   name: fed-softclient4es-federation-ap-south-1
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
     app.kubernetes.io/component: sidecar
     softclient4es.app/sidecar: ap-south-1
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: softclient4es
 spec:
@@ -189,10 +189,10 @@ kind: Deployment
 metadata:
   name: fed-softclient4es-federation
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -205,17 +205,17 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: softclient4es-federation-0.3.2
+        helm.sh/chart: softclient4es-federation-0.3.3
         app.kubernetes.io/name: softclient4es-federation
         app.kubernetes.io/instance: fed
-        app.kubernetes.io/version: "0.2.2"
+        app.kubernetes.io/version: "0.2.3"
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/component: federation
         app.kubernetes.io/part-of: softclient4es
       annotations:
         # Roll the federation Pod whenever the rendered servers ConfigMap changes
         # (add/remove/edit a sidecar) so `helm upgrade` actually takes effect.
-        checksum/config: a07fb5f2a2e1fe5705e351705fc1548ceb304499eb4fd89a78ee62a464fe0e33
+        checksum/config: fea05a6c0dfac5301dc240b1fa732d6a9076bdbc7bf069c3ecd6af48a402759b
     spec:
       serviceAccountName: fed-softclient4es-federation
       securityContext:
@@ -227,7 +227,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: federation
-          image: "docker.io/softnetwork/softclient4es-federation:0.2.2"
+          image: "docker.io/softnetwork/softclient4es-federation:0.2.3"
           imagePullPolicy: IfNotPresent
           securityContext:
             allowPrivilegeEscalation: false
@@ -359,12 +359,12 @@ kind: Deployment
 metadata:
   name: fed-softclient4es-federation-us-east-1
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
     app.kubernetes.io/component: sidecar
     softclient4es.app/sidecar: us-east-1
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: softclient4es
 spec:
@@ -378,12 +378,12 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: softclient4es-federation-0.3.2
+        helm.sh/chart: softclient4es-federation-0.3.3
         app.kubernetes.io/name: softclient4es-federation
         app.kubernetes.io/instance: fed
         app.kubernetes.io/component: sidecar
         softclient4es.app/sidecar: us-east-1
-        app.kubernetes.io/version: "0.2.2"
+        app.kubernetes.io/version: "0.2.3"
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: softclient4es
     spec:
@@ -397,7 +397,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: sidecar
-          image: "docker.io/softnetwork/softclient4es8-arrow-flight-sql:0.2.2"
+          image: "docker.io/softnetwork/softclient4es8-arrow-flight-sql:0.2.3"
           imagePullPolicy: IfNotPresent
           securityContext:
             allowPrivilegeEscalation: false
@@ -549,12 +549,12 @@ kind: Deployment
 metadata:
   name: fed-softclient4es-federation-eu-west-1
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
     app.kubernetes.io/component: sidecar
     softclient4es.app/sidecar: eu-west-1
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: softclient4es
 spec:
@@ -568,12 +568,12 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: softclient4es-federation-0.3.2
+        helm.sh/chart: softclient4es-federation-0.3.3
         app.kubernetes.io/name: softclient4es-federation
         app.kubernetes.io/instance: fed
         app.kubernetes.io/component: sidecar
         softclient4es.app/sidecar: eu-west-1
-        app.kubernetes.io/version: "0.2.2"
+        app.kubernetes.io/version: "0.2.3"
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: softclient4es
     spec:
@@ -587,7 +587,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: sidecar
-          image: "docker.io/softnetwork/softclient4es8-arrow-flight-sql:0.2.2"
+          image: "docker.io/softnetwork/softclient4es8-arrow-flight-sql:0.2.3"
           imagePullPolicy: IfNotPresent
           securityContext:
             allowPrivilegeEscalation: false
@@ -739,12 +739,12 @@ kind: Deployment
 metadata:
   name: fed-softclient4es-federation-ap-south-1
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
     app.kubernetes.io/component: sidecar
     softclient4es.app/sidecar: ap-south-1
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: softclient4es
 spec:
@@ -758,12 +758,12 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: softclient4es-federation-0.3.2
+        helm.sh/chart: softclient4es-federation-0.3.3
         app.kubernetes.io/name: softclient4es-federation
         app.kubernetes.io/instance: fed
         app.kubernetes.io/component: sidecar
         softclient4es.app/sidecar: ap-south-1
-        app.kubernetes.io/version: "0.2.2"
+        app.kubernetes.io/version: "0.2.3"
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: softclient4es
     spec:
@@ -777,7 +777,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: sidecar
-          image: "docker.io/softnetwork/softclient4es9-arrow-flight-sql:0.2.2"
+          image: "docker.io/softnetwork/softclient4es9-arrow-flight-sql:0.2.3"
           imagePullPolicy: IfNotPresent
           securityContext:
             allowPrivilegeEscalation: false
@@ -929,10 +929,10 @@ kind: Pod
 metadata:
   name: fed-softclient4es-federation-test-catalogs
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
diff --git a/softclient4es-federation/tests/golden/ingress-tls.yaml b/softclient4es-federation/tests/golden/ingress-tls.yaml
index c00dde9..65c07a1 100644
--- a/softclient4es-federation/tests/golden/ingress-tls.yaml
+++ b/softclient4es-federation/tests/golden/ingress-tls.yaml
@@ -5,10 +5,10 @@ kind: ServiceAccount
 metadata:
   name: fed-softclient4es-federation
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -20,10 +20,10 @@ kind: ConfigMap
 metadata:
   name: fed-softclient4es-federation-config
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -49,10 +49,10 @@ kind: Service
 metadata:
   name: fed-softclient4es-federation
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -73,12 +73,12 @@ kind: Service
 metadata:
   name: fed-softclient4es-federation-prod-us
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
     app.kubernetes.io/component: sidecar
     softclient4es.app/sidecar: prod-us
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: softclient4es
 spec:
@@ -100,10 +100,10 @@ kind: Deployment
 metadata:
   name: fed-softclient4es-federation
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -116,17 +116,17 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: softclient4es-federation-0.3.2
+        helm.sh/chart: softclient4es-federation-0.3.3
         app.kubernetes.io/name: softclient4es-federation
         app.kubernetes.io/instance: fed
-        app.kubernetes.io/version: "0.2.2"
+        app.kubernetes.io/version: "0.2.3"
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/component: federation
         app.kubernetes.io/part-of: softclient4es
       annotations:
         # Roll the federation Pod whenever the rendered servers ConfigMap changes
         # (add/remove/edit a sidecar) so `helm upgrade` actually takes effect.
-        checksum/config: 210fc3e8fba4a1127d5b16c14e73d57af3f7f46ecc1fd452c58ca52f0e4efe7d
+        checksum/config: e690ee430404f6b2976d5d7c1194dfa1d5ac440a55a38b056c1f691a38817521
     spec:
       serviceAccountName: fed-softclient4es-federation
       securityContext:
@@ -138,7 +138,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: federation
-          image: "docker.io/softnetwork/softclient4es-federation:0.2.2"
+          image: "docker.io/softnetwork/softclient4es-federation:0.2.3"
           imagePullPolicy: IfNotPresent
           securityContext:
             allowPrivilegeEscalation: false
@@ -240,12 +240,12 @@ kind: Deployment
 metadata:
   name: fed-softclient4es-federation-prod-us
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
     app.kubernetes.io/component: sidecar
     softclient4es.app/sidecar: prod-us
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: softclient4es
 spec:
@@ -259,12 +259,12 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: softclient4es-federation-0.3.2
+        helm.sh/chart: softclient4es-federation-0.3.3
         app.kubernetes.io/name: softclient4es-federation
         app.kubernetes.io/instance: fed
         app.kubernetes.io/component: sidecar
         softclient4es.app/sidecar: prod-us
-        app.kubernetes.io/version: "0.2.2"
+        app.kubernetes.io/version: "0.2.3"
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: softclient4es
     spec:
@@ -278,7 +278,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: sidecar
-          image: "docker.io/softnetwork/softclient4es8-arrow-flight-sql:0.2.2"
+          image: "docker.io/softnetwork/softclient4es8-arrow-flight-sql:0.2.3"
           imagePullPolicy: IfNotPresent
           securityContext:
             allowPrivilegeEscalation: false
@@ -362,10 +362,10 @@ kind: Ingress
 metadata:
   name: fed-softclient4es-federation
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -401,10 +401,10 @@ kind: Pod
 metadata:
   name: fed-softclient4es-federation-test-catalogs
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
diff --git a/softclient4es-federation/tests/golden/secret-auth.yaml b/softclient4es-federation/tests/golden/secret-auth.yaml
index f98ddb4..4f16383 100644
--- a/softclient4es-federation/tests/golden/secret-auth.yaml
+++ b/softclient4es-federation/tests/golden/secret-auth.yaml
@@ -5,10 +5,10 @@ kind: ServiceAccount
 metadata:
   name: fed-softclient4es-federation
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -20,10 +20,10 @@ kind: ConfigMap
 metadata:
   name: fed-softclient4es-federation-config
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -58,10 +58,10 @@ kind: Service
 metadata:
   name: fed-softclient4es-federation
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -82,12 +82,12 @@ kind: Service
 metadata:
   name: fed-softclient4es-federation-prod-us
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
     app.kubernetes.io/component: sidecar
     softclient4es.app/sidecar: prod-us
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: softclient4es
 spec:
@@ -109,10 +109,10 @@ kind: Deployment
 metadata:
   name: fed-softclient4es-federation
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -125,17 +125,17 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: softclient4es-federation-0.3.2
+        helm.sh/chart: softclient4es-federation-0.3.3
         app.kubernetes.io/name: softclient4es-federation
         app.kubernetes.io/instance: fed
-        app.kubernetes.io/version: "0.2.2"
+        app.kubernetes.io/version: "0.2.3"
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/component: federation
         app.kubernetes.io/part-of: softclient4es
       annotations:
         # Roll the federation Pod whenever the rendered servers ConfigMap changes
         # (add/remove/edit a sidecar) so `helm upgrade` actually takes effect.
-        checksum/config: 1045ddaf4d863d61c02d519f81bea624ac7e3999b4f896d31a0ba5882fd92130
+        checksum/config: ffe684773505d70251055fb6c65c5aeedffe0b5d2dbe2e84cfbad6d14a67cf58
     spec:
       serviceAccountName: fed-softclient4es-federation
       securityContext:
@@ -147,7 +147,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: federation
-          image: "docker.io/softnetwork/softclient4es-federation:0.2.2"
+          image: "docker.io/softnetwork/softclient4es-federation:0.2.3"
           imagePullPolicy: IfNotPresent
           securityContext:
             allowPrivilegeEscalation: false
@@ -255,12 +255,12 @@ kind: Deployment
 metadata:
   name: fed-softclient4es-federation-prod-us
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
     app.kubernetes.io/component: sidecar
     softclient4es.app/sidecar: prod-us
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: softclient4es
 spec:
@@ -274,12 +274,12 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: softclient4es-federation-0.3.2
+        helm.sh/chart: softclient4es-federation-0.3.3
         app.kubernetes.io/name: softclient4es-federation
         app.kubernetes.io/instance: fed
         app.kubernetes.io/component: sidecar
         softclient4es.app/sidecar: prod-us
-        app.kubernetes.io/version: "0.2.2"
+        app.kubernetes.io/version: "0.2.3"
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: softclient4es
     spec:
@@ -293,7 +293,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: sidecar
-          image: "docker.io/softnetwork/softclient4es8-arrow-flight-sql:0.2.2"
+          image: "docker.io/softnetwork/softclient4es8-arrow-flight-sql:0.2.3"
           imagePullPolicy: IfNotPresent
           securityContext:
             allowPrivilegeEscalation: false
@@ -433,10 +433,10 @@ kind: Pod
 metadata:
   name: fed-softclient4es-federation-test-catalogs
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
diff --git a/softclient4es-federation/tests/golden/two-sidecars.yaml b/softclient4es-federation/tests/golden/two-sidecars.yaml
index 6b0e8db..8ba73fd 100644
--- a/softclient4es-federation/tests/golden/two-sidecars.yaml
+++ b/softclient4es-federation/tests/golden/two-sidecars.yaml
@@ -5,10 +5,10 @@ kind: ServiceAccount
 metadata:
   name: fed-softclient4es-federation
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -20,10 +20,10 @@ kind: ConfigMap
 metadata:
   name: fed-softclient4es-federation-config
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -53,10 +53,10 @@ kind: Service
 metadata:
   name: fed-softclient4es-federation
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -77,12 +77,12 @@ kind: Service
 metadata:
   name: fed-softclient4es-federation-prod-us
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
     app.kubernetes.io/component: sidecar
     softclient4es.app/sidecar: prod-us
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: softclient4es
 spec:
@@ -104,12 +104,12 @@ kind: Service
 metadata:
   name: fed-softclient4es-federation-prod-eu
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
     app.kubernetes.io/component: sidecar
     softclient4es.app/sidecar: prod-eu
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: softclient4es
 spec:
@@ -131,10 +131,10 @@ kind: Deployment
 metadata:
   name: fed-softclient4es-federation
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es
@@ -147,17 +147,17 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: softclient4es-federation-0.3.2
+        helm.sh/chart: softclient4es-federation-0.3.3
         app.kubernetes.io/name: softclient4es-federation
         app.kubernetes.io/instance: fed
-        app.kubernetes.io/version: "0.2.2"
+        app.kubernetes.io/version: "0.2.3"
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/component: federation
         app.kubernetes.io/part-of: softclient4es
       annotations:
         # Roll the federation Pod whenever the rendered servers ConfigMap changes
         # (add/remove/edit a sidecar) so `helm upgrade` actually takes effect.
-        checksum/config: 9405eb86a1e1f0fda67b60a46b5f87a008038a07c2a346ac133a8cdcbb30fc30
+        checksum/config: 6c096a1601ef8b99ff85cc76b8fa6ed5b8a36fc72002db39b7686171b1747b36
     spec:
       serviceAccountName: fed-softclient4es-federation
       securityContext:
@@ -169,7 +169,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: federation
-          image: "docker.io/softnetwork/softclient4es-federation:0.2.2"
+          image: "docker.io/softnetwork/softclient4es-federation:0.2.3"
           imagePullPolicy: IfNotPresent
           securityContext:
             allowPrivilegeEscalation: false
@@ -283,12 +283,12 @@ kind: Deployment
 metadata:
   name: fed-softclient4es-federation-prod-us
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
     app.kubernetes.io/component: sidecar
     softclient4es.app/sidecar: prod-us
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: softclient4es
 spec:
@@ -302,12 +302,12 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: softclient4es-federation-0.3.2
+        helm.sh/chart: softclient4es-federation-0.3.3
         app.kubernetes.io/name: softclient4es-federation
         app.kubernetes.io/instance: fed
         app.kubernetes.io/component: sidecar
         softclient4es.app/sidecar: prod-us
-        app.kubernetes.io/version: "0.2.2"
+        app.kubernetes.io/version: "0.2.3"
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: softclient4es
     spec:
@@ -321,7 +321,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: sidecar
-          image: "docker.io/softnetwork/softclient4es8-arrow-flight-sql:0.2.2"
+          image: "docker.io/softnetwork/softclient4es8-arrow-flight-sql:0.2.3"
           imagePullPolicy: IfNotPresent
           securityContext:
             allowPrivilegeEscalation: false
@@ -447,12 +447,12 @@ kind: Deployment
 metadata:
   name: fed-softclient4es-federation-prod-eu
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
     app.kubernetes.io/component: sidecar
     softclient4es.app/sidecar: prod-eu
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: softclient4es
 spec:
@@ -466,12 +466,12 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: softclient4es-federation-0.3.2
+        helm.sh/chart: softclient4es-federation-0.3.3
         app.kubernetes.io/name: softclient4es-federation
         app.kubernetes.io/instance: fed
         app.kubernetes.io/component: sidecar
         softclient4es.app/sidecar: prod-eu
-        app.kubernetes.io/version: "0.2.2"
+        app.kubernetes.io/version: "0.2.3"
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: softclient4es
     spec:
@@ -485,7 +485,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: sidecar
-          image: "docker.io/softnetwork/softclient4es9-arrow-flight-sql:0.2.2"
+          image: "docker.io/softnetwork/softclient4es9-arrow-flight-sql:0.2.3"
           imagePullPolicy: IfNotPresent
           securityContext:
             allowPrivilegeEscalation: false
@@ -611,10 +611,10 @@ kind: Pod
 metadata:
   name: fed-softclient4es-federation-test-catalogs
   labels:
-    helm.sh/chart: softclient4es-federation-0.3.2
+    helm.sh/chart: softclient4es-federation-0.3.3
     app.kubernetes.io/name: softclient4es-federation
     app.kubernetes.io/instance: fed
-    app.kubernetes.io/version: "0.2.2"
+    app.kubernetes.io/version: "0.2.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: federation
     app.kubernetes.io/part-of: softclient4es