diff --git a/infra/tailscale/tailnet-cr.yaml b/infra/tailscale/tailnet-cr.yaml
new file mode 100644
index 0000000..8dd5795
--- /dev/null
+++ b/infra/tailscale/tailnet-cr.yaml
@@ -0,0 +1,9 @@
+apiVersion: policy.tailscale.com/v1alpha1
+kind: Tailnet
+metadata:
+  name: default
+  namespace: tailscale
+spec:
+  tagAuths:
+    - tag: k8s-tailscale-operator
+      approved: true
\ No newline at end of file