diff --git a/internal/namespaces/k8s/v1/custom_kubeconfig_install.go b/internal/namespaces/k8s/v1/custom_kubeconfig_install.go
index a1e490efa0..51c1eebda7 100644
--- a/internal/namespaces/k8s/v1/custom_kubeconfig_install.go
+++ b/internal/namespaces/k8s/v1/custom_kubeconfig_install.go
@@ -101,7 +101,7 @@ func k8sKubeconfigInstallRun(ctx context.Context, argsI interface{}) (i interfac
 		}
 
 		// create the file
-		f, err := os.OpenFile(kubeconfigPath, os.O_CREATE, 0644)
+		f, err := os.OpenFile(kubeconfigPath, os.O_CREATE, 0600)
 		if err != nil {
 			return nil, err
 		}