diff --git a/config/v1/types_kmsencryption.go b/config/v1/types_kmsencryption.go
index 0430a25cc30..e2f94ae1f37 100644
--- a/config/v1/types_kmsencryption.go
+++ b/config/v1/types_kmsencryption.go
@@ -63,7 +63,7 @@ type VaultSecretReference struct {
 	//
 	// +kubebuilder:validation:MinLength=1
 	// +kubebuilder:validation:MaxLength=253
-	// +kubebuilder:validation:XValidation:rule="!format.dns1123Subdomain().validate(self).hasValue()",message="name must be a valid DNS subdomain name: contain no more than 253 characters, contain only lowercase alphanumeric characters, '-' or '.', and start and end with an alphanumeric character"
+	// +kubebuilder:validation:XValidation:rule="self.matches('^[a-z0-9]([a-z0-9\\\\-]*[a-z0-9])?(\\\\.[a-z0-9]([a-z0-9\\\\-]*[a-z0-9])?)*$')",message="name must be a valid DNS subdomain name: contain no more than 253 characters, contain only lowercase alphanumeric characters, '-' or '.', and start and end with an alphanumeric character"
 	// +required
 	Name string `json:"name,omitempty"`
 }
@@ -76,7 +76,7 @@ type VaultConfigMapReference struct {
 	//
 	// +kubebuilder:validation:MinLength=1
 	// +kubebuilder:validation:MaxLength=253
-	// +kubebuilder:validation:XValidation:rule="!format.dns1123Subdomain().validate(self).hasValue()",message="name must be a valid DNS subdomain name: contain no more than 253 characters, contain only lowercase alphanumeric characters, '-' or '.', and start and end with an alphanumeric character"
+	// +kubebuilder:validation:XValidation:rule="self.matches('^[a-z0-9]([a-z0-9\\\\-]*[a-z0-9])?(\\\\.[a-z0-9]([a-z0-9\\\\-]*[a-z0-9])?)*$')",message="name must be a valid DNS subdomain name: contain no more than 253 characters, contain only lowercase alphanumeric characters, '-' or '.', and start and end with an alphanumeric character"
 	// +required
 	Name string `json:"name,omitempty"`
 }
@@ -300,7 +300,7 @@ type VaultTLSConfig struct {
 	//
 	// +kubebuilder:validation:MaxLength=253
 	// +kubebuilder:validation:MinLength=1
-	// +kubebuilder:validation:XValidation:rule="!format.dns1123Subdomain().validate(self).hasValue()",message="serverName must be a valid DNS hostname: contain no more than 253 characters, contain only lowercase alphanumeric characters, '-' or '.', and start and end with an alphanumeric character"
+	// +kubebuilder:validation:XValidation:rule="self.matches('^[a-z0-9]([a-z0-9\\\\-]*[a-z0-9])?(\\\\.[a-z0-9]([a-z0-9\\\\-]*[a-z0-9])?)*$')",message="serverName must be a valid DNS hostname: contain no more than 253 characters, contain only lowercase alphanumeric characters, '-' or '.', and start and end with an alphanumeric character"
 	// +optional
 	ServerName string `json:"serverName,omitempty"`
 }
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers-CustomNoUpgrade.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers-CustomNoUpgrade.crd.yaml
index 47f062a8ba6..f3793fac61d 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers-CustomNoUpgrade.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers-CustomNoUpgrade.crd.yaml
@@ -212,7 +212,7 @@ spec:
                                             contain only lowercase alphanumeric characters,
                                             ''-'' or ''.'', and start and end with
                                             an alphanumeric character'
-                                          rule: '!format.dns1123Subdomain().validate(self).hasValue()'
+                                          rule: self.matches('^[a-z0-9]([a-z0-9\\-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9\\-]*[a-z0-9])?)*$')
                                     required:
                                     - name
                                     type: object
@@ -307,7 +307,7 @@ spec:
                                         contain only lowercase alphanumeric characters,
                                         ''-'' or ''.'', and start and end with an
                                         alphanumeric character'
-                                      rule: '!format.dns1123Subdomain().validate(self).hasValue()'
+                                      rule: self.matches('^[a-z0-9]([a-z0-9\\-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9\\-]*[a-z0-9])?)*$')
                                 required:
                                 - name
                                 type: object
@@ -327,7 +327,7 @@ spec:
                                     contain no more than 253 characters, contain only
                                     lowercase alphanumeric characters, ''-'' or ''.'',
                                     and start and end with an alphanumeric character'
-                                  rule: '!format.dns1123Subdomain().validate(self).hasValue()'
+                                  rule: self.matches('^[a-z0-9]([a-z0-9\\-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9\\-]*[a-z0-9])?)*$')
                             type: object
                           vaultAddress:
                             description: |-
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers-DevPreviewNoUpgrade.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers-DevPreviewNoUpgrade.crd.yaml
index 2d0b3c0364b..d06cd26ca79 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers-DevPreviewNoUpgrade.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers-DevPreviewNoUpgrade.crd.yaml
@@ -212,7 +212,7 @@ spec:
                                             contain only lowercase alphanumeric characters,
                                             ''-'' or ''.'', and start and end with
                                             an alphanumeric character'
-                                          rule: '!format.dns1123Subdomain().validate(self).hasValue()'
+                                          rule: self.matches('^[a-z0-9]([a-z0-9\\-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9\\-]*[a-z0-9])?)*$')
                                     required:
                                     - name
                                     type: object
@@ -307,7 +307,7 @@ spec:
                                         contain only lowercase alphanumeric characters,
                                         ''-'' or ''.'', and start and end with an
                                         alphanumeric character'
-                                      rule: '!format.dns1123Subdomain().validate(self).hasValue()'
+                                      rule: self.matches('^[a-z0-9]([a-z0-9\\-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9\\-]*[a-z0-9])?)*$')
                                 required:
                                 - name
                                 type: object
@@ -327,7 +327,7 @@ spec:
                                     contain no more than 253 characters, contain only
                                     lowercase alphanumeric characters, ''-'' or ''.'',
                                     and start and end with an alphanumeric character'
-                                  rule: '!format.dns1123Subdomain().validate(self).hasValue()'
+                                  rule: self.matches('^[a-z0-9]([a-z0-9\\-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9\\-]*[a-z0-9])?)*$')
                             type: object
                           vaultAddress:
                             description: |-
diff --git a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers-TechPreviewNoUpgrade.crd.yaml b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers-TechPreviewNoUpgrade.crd.yaml
index 43b269de69c..cce33594546 100644
--- a/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers-TechPreviewNoUpgrade.crd.yaml
+++ b/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers-TechPreviewNoUpgrade.crd.yaml
@@ -212,7 +212,7 @@ spec:
                                             contain only lowercase alphanumeric characters,
                                             ''-'' or ''.'', and start and end with
                                             an alphanumeric character'
-                                          rule: '!format.dns1123Subdomain().validate(self).hasValue()'
+                                          rule: self.matches('^[a-z0-9]([a-z0-9\\-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9\\-]*[a-z0-9])?)*$')
                                     required:
                                     - name
                                     type: object
@@ -307,7 +307,7 @@ spec:
                                         contain only lowercase alphanumeric characters,
                                         ''-'' or ''.'', and start and end with an
                                         alphanumeric character'
-                                      rule: '!format.dns1123Subdomain().validate(self).hasValue()'
+                                      rule: self.matches('^[a-z0-9]([a-z0-9\\-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9\\-]*[a-z0-9])?)*$')
                                 required:
                                 - name
                                 type: object
@@ -327,7 +327,7 @@ spec:
                                     contain no more than 253 characters, contain only
                                     lowercase alphanumeric characters, ''-'' or ''.'',
                                     and start and end with an alphanumeric character'
-                                  rule: '!format.dns1123Subdomain().validate(self).hasValue()'
+                                  rule: self.matches('^[a-z0-9]([a-z0-9\\-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9\\-]*[a-z0-9])?)*$')
                             type: object
                           vaultAddress:
                             description: |-
diff --git a/config/v1/zz_generated.featuregated-crd-manifests/apiservers.config.openshift.io/KMSEncryption.yaml b/config/v1/zz_generated.featuregated-crd-manifests/apiservers.config.openshift.io/KMSEncryption.yaml
index ce2f398680d..22c41067598 100644
--- a/config/v1/zz_generated.featuregated-crd-manifests/apiservers.config.openshift.io/KMSEncryption.yaml
+++ b/config/v1/zz_generated.featuregated-crd-manifests/apiservers.config.openshift.io/KMSEncryption.yaml
@@ -212,7 +212,7 @@ spec:
                                             contain only lowercase alphanumeric characters,
                                             ''-'' or ''.'', and start and end with
                                             an alphanumeric character'
-                                          rule: '!format.dns1123Subdomain().validate(self).hasValue()'
+                                          rule: self.matches('^[a-z0-9]([a-z0-9\\-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9\\-]*[a-z0-9])?)*$')
                                     required:
                                     - name
                                     type: object
@@ -307,7 +307,7 @@ spec:
                                         contain only lowercase alphanumeric characters,
                                         ''-'' or ''.'', and start and end with an
                                         alphanumeric character'
-                                      rule: '!format.dns1123Subdomain().validate(self).hasValue()'
+                                      rule: self.matches('^[a-z0-9]([a-z0-9\\-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9\\-]*[a-z0-9])?)*$')
                                 required:
                                 - name
                                 type: object
@@ -327,7 +327,7 @@ spec:
                                     contain no more than 253 characters, contain only
                                     lowercase alphanumeric characters, ''-'' or ''.'',
                                     and start and end with an alphanumeric character'
-                                  rule: '!format.dns1123Subdomain().validate(self).hasValue()'
+                                  rule: self.matches('^[a-z0-9]([a-z0-9\\-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9\\-]*[a-z0-9])?)*$')
                             type: object
                           vaultAddress:
                             description: |-
diff --git a/payload-manifests/crds/0000_10_config-operator_01_apiservers-CustomNoUpgrade.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_apiservers-CustomNoUpgrade.crd.yaml
index 47f062a8ba6..f3793fac61d 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_apiservers-CustomNoUpgrade.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_apiservers-CustomNoUpgrade.crd.yaml
@@ -212,7 +212,7 @@ spec:
                                             contain only lowercase alphanumeric characters,
                                             ''-'' or ''.'', and start and end with
                                             an alphanumeric character'
-                                          rule: '!format.dns1123Subdomain().validate(self).hasValue()'
+                                          rule: self.matches('^[a-z0-9]([a-z0-9\\-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9\\-]*[a-z0-9])?)*$')
                                     required:
                                     - name
                                     type: object
@@ -307,7 +307,7 @@ spec:
                                         contain only lowercase alphanumeric characters,
                                         ''-'' or ''.'', and start and end with an
                                         alphanumeric character'
-                                      rule: '!format.dns1123Subdomain().validate(self).hasValue()'
+                                      rule: self.matches('^[a-z0-9]([a-z0-9\\-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9\\-]*[a-z0-9])?)*$')
                                 required:
                                 - name
                                 type: object
@@ -327,7 +327,7 @@ spec:
                                     contain no more than 253 characters, contain only
                                     lowercase alphanumeric characters, ''-'' or ''.'',
                                     and start and end with an alphanumeric character'
-                                  rule: '!format.dns1123Subdomain().validate(self).hasValue()'
+                                  rule: self.matches('^[a-z0-9]([a-z0-9\\-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9\\-]*[a-z0-9])?)*$')
                             type: object
                           vaultAddress:
                             description: |-
diff --git a/payload-manifests/crds/0000_10_config-operator_01_apiservers-DevPreviewNoUpgrade.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_apiservers-DevPreviewNoUpgrade.crd.yaml
index 2d0b3c0364b..d06cd26ca79 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_apiservers-DevPreviewNoUpgrade.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_apiservers-DevPreviewNoUpgrade.crd.yaml
@@ -212,7 +212,7 @@ spec:
                                             contain only lowercase alphanumeric characters,
                                             ''-'' or ''.'', and start and end with
                                             an alphanumeric character'
-                                          rule: '!format.dns1123Subdomain().validate(self).hasValue()'
+                                          rule: self.matches('^[a-z0-9]([a-z0-9\\-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9\\-]*[a-z0-9])?)*$')
                                     required:
                                     - name
                                     type: object
@@ -307,7 +307,7 @@ spec:
                                         contain only lowercase alphanumeric characters,
                                         ''-'' or ''.'', and start and end with an
                                         alphanumeric character'
-                                      rule: '!format.dns1123Subdomain().validate(self).hasValue()'
+                                      rule: self.matches('^[a-z0-9]([a-z0-9\\-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9\\-]*[a-z0-9])?)*$')
                                 required:
                                 - name
                                 type: object
@@ -327,7 +327,7 @@ spec:
                                     contain no more than 253 characters, contain only
                                     lowercase alphanumeric characters, ''-'' or ''.'',
                                     and start and end with an alphanumeric character'
-                                  rule: '!format.dns1123Subdomain().validate(self).hasValue()'
+                                  rule: self.matches('^[a-z0-9]([a-z0-9\\-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9\\-]*[a-z0-9])?)*$')
                             type: object
                           vaultAddress:
                             description: |-
diff --git a/payload-manifests/crds/0000_10_config-operator_01_apiservers-TechPreviewNoUpgrade.crd.yaml b/payload-manifests/crds/0000_10_config-operator_01_apiservers-TechPreviewNoUpgrade.crd.yaml
index 43b269de69c..cce33594546 100644
--- a/payload-manifests/crds/0000_10_config-operator_01_apiservers-TechPreviewNoUpgrade.crd.yaml
+++ b/payload-manifests/crds/0000_10_config-operator_01_apiservers-TechPreviewNoUpgrade.crd.yaml
@@ -212,7 +212,7 @@ spec:
                                             contain only lowercase alphanumeric characters,
                                             ''-'' or ''.'', and start and end with
                                             an alphanumeric character'
-                                          rule: '!format.dns1123Subdomain().validate(self).hasValue()'
+                                          rule: self.matches('^[a-z0-9]([a-z0-9\\-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9\\-]*[a-z0-9])?)*$')
                                     required:
                                     - name
                                     type: object
@@ -307,7 +307,7 @@ spec:
                                         contain only lowercase alphanumeric characters,
                                         ''-'' or ''.'', and start and end with an
                                         alphanumeric character'
-                                      rule: '!format.dns1123Subdomain().validate(self).hasValue()'
+                                      rule: self.matches('^[a-z0-9]([a-z0-9\\-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9\\-]*[a-z0-9])?)*$')
                                 required:
                                 - name
                                 type: object
@@ -327,7 +327,7 @@ spec:
                                     contain no more than 253 characters, contain only
                                     lowercase alphanumeric characters, ''-'' or ''.'',
                                     and start and end with an alphanumeric character'
-                                  rule: '!format.dns1123Subdomain().validate(self).hasValue()'
+                                  rule: self.matches('^[a-z0-9]([a-z0-9\\-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9\\-]*[a-z0-9])?)*$')
                             type: object
                           vaultAddress:
                             description: |-