diff --git a/tailscale/tailnet.yaml b/tailscale/tailnet.yaml
new file mode 100644
index 0000000..825cf49
--- /dev/null
+++ b/tailscale/tailnet.yaml
@@ -0,0 +1,13 @@
+apiVersion: tailnet.tailscale.com/v1alpha1
+kind: Tailnet
+metadata:
+  name: talos-cluster
+  namespace: tailscale
+spec:
+  tagExposes: []
+  dnsMode: "Split"
+  users:
+    - name: cluster-admin
+      selector:
+        matchLabels:
+          tailscale.com/managed: "true"