diff --git a/roles/kubernetes/node/tasks/kubelet.yml b/roles/kubernetes/node/tasks/kubelet.yml
index c551f772d934d177e8c33cda3ba5981fa9a9d948..c08ef5fb81436144b0db830a9e0b48d3e3319dbc 100644
--- a/roles/kubernetes/node/tasks/kubelet.yml
+++ b/roles/kubernetes/node/tasks/kubelet.yml
@@ -33,7 +33,7 @@
     src: "kubelet.service.j2"
     dest: "/etc/systemd/system/kubelet.service"
     backup: "yes"
-    mode: 0644
+    mode: 0600
   notify: Node | restart kubelet
   tags:
     - kubelet