apiVersion: tailnet.tailscale.com/v1alpha1
kind: Tailnet
metadata:
  name: talos-cluster
  namespace: tailscale
spec:
  tagExposes: []
  dnsMode: "Split"
  users:
    - name: cluster-admin
      selector:
        matchLabels:
          tailscale.com/managed: "true"