diff --git a/manifests/certmonger/opendaylight.pp b/manifests/certmonger/opendaylight.pp
index cde40a9bf..bd2d3d981 100644
--- a/manifests/certmonger/opendaylight.pp
+++ b/manifests/certmonger/opendaylight.pp
@@ -62,13 +62,9 @@ class tripleo::certmonger::opendaylight (
     require      => Class['::certmonger'],
   }
   file { $service_certificate :
-    owner   => 'odl',
-    group   => 'odl',
     require => Certmonger_certificate['opendaylight']
   }
   file { $service_key :
-    owner   => 'odl',
-    group   => 'odl',
     require => Certmonger_certificate['opendaylight']
   }
 
diff --git a/releasenotes/notes/fix-odl-tls-owner-77d2d71fe39ea3e7.yaml b/releasenotes/notes/fix-odl-tls-owner-77d2d71fe39ea3e7.yaml
new file mode 100644
index 000000000..4b6353638
--- /dev/null
+++ b/releasenotes/notes/fix-odl-tls-owner-77d2d71fe39ea3e7.yaml
@@ -0,0 +1,5 @@
+---
+fixes:
+  - |
+    Fixes a bug where TLS certificates for ODL could not be generated correctly
+    for deployment due to wrong owner/group applied to the files.
diff --git a/spec/classes/tripleo_certmonger_opendaylight_spec.rb b/spec/classes/tripleo_certmonger_opendaylight_spec.rb
index f76a38b54..f918d0e4c 100644
--- a/spec/classes/tripleo_certmonger_opendaylight_spec.rb
+++ b/spec/classes/tripleo_certmonger_opendaylight_spec.rb
@@ -47,13 +47,9 @@ describe 'tripleo::certmonger::opendaylight' do
         :wait         => true,
       )
       is_expected.to contain_file(params[:service_certificate]).with(
-        :owner   => 'odl',
-        :group   => 'odl',
         :require => 'Certmonger_certificate[opendaylight]'
       )
       is_expected.to contain_file(params[:service_key]).with(
-        :owner   => 'odl',
-        :group   => 'odl',
         :require => 'Certmonger_certificate[opendaylight]'
       )
     end