apiVersion: policy.tailscale.com/v1alpha1
kind: Tailnet
metadata:
  name: default
  namespace: tailscale
spec:
  tagAuths:
    - tag: k8s-tailscale-operator
      approved: true