The point about keeping Silver on an explicit schema contract is really useful, especially during full refreshes. I’d also keep an eye on CDC retention during large backfills so nothing gets missed.
Since both U2M and M2M fail with the same `kid`, that points pretty strongly to the Data API's JWKS lookup rather than permissions.Hopefully someone from the Lakebase team can confirm whether this is a GCP-specific issue.
Thanks for sharing this, the genie_spaces approach makes the Dev to QA to Prod flow much clearer. Using separate targets and variables for each environment is a really practical setup. The service principal recommendation for production is a useful d...