diff --git a/templates/common/_base/files/pull-secret.yaml b/templates/common/_base/files/pull-secret.yaml
index 9d66b713bc..f8a5661bf4 100644
--- a/templates/common/_base/files/pull-secret.yaml
+++ b/templates/common/_base/files/pull-secret.yaml
@@ -1,5 +1,5 @@
 filesystem: "root"
-mode: 0644
+mode: 0600
 path: "/var/lib/kubelet/config.json"
 contents:
   inline: |