The validation rules comes from the Kubernetes specification for the
`name` field. See
https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#dns-label-names