diff --git a/roles/opendistro/opendistro-elasticsearch/tasks/local_actions.yml b/roles/opendistro/opendistro-elasticsearch/tasks/local_actions.yml
index 04f20378..6e54fdf2 100644
--- a/roles/opendistro/opendistro-elasticsearch/tasks/local_actions.yml
+++ b/roles/opendistro/opendistro-elasticsearch/tasks/local_actions.yml
@@ -14,6 +14,7 @@
   - name: Local action | Create local temporary directory for certificates generation
     file:
       path: "{{ local_certs_path }}"
+      mode: 0755
       state: directory
 
   - name: Local action | Check that the generation tool exists
@@ -41,6 +42,7 @@
     template:
       src: "templates/tlsconfig.yml.j2"
       dest: "{{ local_certs_path }}/config/tlsconfig.yml"
+      mode: 0644
     register: tlsconfig_template
 
   - name: Create a directory if it does not exist