diff --git a/apis/database/v1beta1/cloudsql_instance_types.go b/apis/database/v1beta1/cloudsql_instance_types.go
index 01d1de82d..a2e1175c6 100644
--- a/apis/database/v1beta1/cloudsql_instance_types.go
+++ b/apis/database/v1beta1/cloudsql_instance_types.go
@@ -349,11 +349,12 @@ type IPConfiguration struct {
 
 	// PrivateNetwork: The resource link for the VPC network from which the
 	// Cloud SQL instance is accessible for private IP. For example,
-	// /projects/myProject/global/networks/default. This setting can be updated,
+	// projects/myProject/global/networks/default. This setting can be updated,
 	// but it cannot be removed after it is set. The Network must have an active
 	// Service Networking connection peering before resolution will proceed.
 	// https://cloud.google.com/vpc/docs/configure-private-services-access
 	// +optional
+	// +kubebuilder:validation:Pattern=^projects\/.+
 	PrivateNetwork *string `json:"privateNetwork,omitempty"`
 
 	// PrivateNetworkRef sets the PrivateNetwork field by resolving the resource
diff --git a/package/crds/database.gcp.crossplane.io_cloudsqlinstances.yaml b/package/crds/database.gcp.crossplane.io_cloudsqlinstances.yaml
index 18fb9a118..d20fab2ba 100644
--- a/package/crds/database.gcp.crossplane.io_cloudsqlinstances.yaml
+++ b/package/crds/database.gcp.crossplane.io_cloudsqlinstances.yaml
@@ -287,11 +287,12 @@ spec:
                           privateNetwork:
                             description: 'PrivateNetwork: The resource link for the
                               VPC network from which the Cloud SQL instance is accessible
-                              for private IP. For example, /projects/myProject/global/networks/default.
+                              for private IP. For example, projects/myProject/global/networks/default.
                               This setting can be updated, but it cannot be removed
                               after it is set. The Network must have an active Service
                               Networking connection peering before resolution will
                               proceed. https://cloud.google.com/vpc/docs/configure-private-services-access'
+                            pattern: ^projects\/.+
                             type: string
                           privateNetworkRef:
                             description: PrivateNetworkRef sets the PrivateNetwork