diff --git a/roles/network_plugin/tasks/main.yml b/roles/network_plugin/tasks/main.yml
index e3ebf305f..68363b53c 100644
--- a/roles/network_plugin/tasks/main.yml
+++ b/roles/network_plugin/tasks/main.yml
@@ -5,7 +5,7 @@
         kube_network_plugin is not defined 
 
 - name: Write network-environment
-  template: src=network-environment.j2 dest=/etc/network-environment mode=u+x
+  template: src=network-environment.j2 dest=/etc/network-environment mode=640
 
 - include: flannel.yml
   when: kube_network_plugin == "flannel"