Migrating secrets to Databricks Unity Catalog? Watch the names.
Secret scope keys allow dots, Unity Catalog doesn’t. So jdbc.url becomes jdbc_url.
Now take a scope with api-key and api.key. Normalize both and you get api_key twice. The second write wins. No error, one credential gone.
My migration notebook checks for collisions before a single secret moves.
Full walkthrough in my latest blog post.
