In the OCS to OCS case, the Ceph-CSI secret names are different (unique to each consumer), Rook was validating the existence of hardcoded secret names (the one used in the StorageClass example), in external mode this is not needed so we should not validate the secret names.