diff --git a/srv6egress/apis/v1/types.go b/srv6egress/apis/v1/types.go
index 01a7c623..52586168 100644
--- a/srv6egress/apis/v1/types.go
+++ b/srv6egress/apis/v1/types.go
@@ -88,6 +88,7 @@ type EgressSpec struct {
 	// steering so traffic uses the node default egress (fail-open). Defaults to
 	// "Drop".
 	// +kubebuilder:validation:Enum=Drop;Fallback
+	// +kubebuilder:default=Drop
 	// +optional
 	OnUnavailable string `json:"onUnavailable,omitempty"`
 }
diff --git a/srv6egress/config/crd/bases/srv6egress.ryskn.io_egresspolicies.yaml b/srv6egress/config/crd/bases/srv6egress.ryskn.io_egresspolicies.yaml
index 0e22cfcb..6679ef1a 100644
--- a/srv6egress/config/crd/bases/srv6egress.ryskn.io_egresspolicies.yaml
+++ b/srv6egress/config/crd/bases/srv6egress.ryskn.io_egresspolicies.yaml
@@ -173,6 +173,7 @@ spec:
                         the steering so traffic uses the node default egress
                         (fail-open). Defaults to "Drop".
                       type: string
+                      default: Drop
                       enum: [Drop, Fallback]
             status:
               type: object