diff --git a/tailscale/auth-secret.yaml b/tailscale/auth-secret.yaml
new file mode 100644
index 0000000..b8302e5
--- /dev/null
+++ b/tailscale/auth-secret.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: tailscale-operator-secret
+  namespace: tailscale
+  labels:
+    app.kubernetes.io/name: tailscale
+    app.kubernetes.io/component: operator
+type: Opaque
+data:
+  # TODO: Fill in the Tailscale auth key (base64 encoded)
+  authkey: PLACEHOLDER