diff --git a/promenade/templates/include/up.sh b/promenade/templates/include/up.sh
index ac441c10..310c53d2 100644
--- a/promenade/templates/include/up.sh
+++ b/promenade/templates/include/up.sh
@@ -138,6 +138,7 @@ set +x
 log
 log === Starting Docker and Kubelet ===
 set -x
+chmod 0600 /etc/systemd/system/kubelet.service
 systemctl daemon-reload
 
 {% for a in ['enable','start','stop','disable','mask'] %}