diff --git a/manifests/compute/hypervisor.pp b/manifests/compute/hypervisor.pp
index e652a489..3e7633a4 100644
--- a/manifests/compute/hypervisor.pp
+++ b/manifests/compute/hypervisor.pp
@@ -157,7 +157,7 @@ Host *
     ensure_resource('file', "/etc/ceph/ceph.client.${cinder_rbd_user}.keyring", {
       owner   => 'root',
       group   => 'cephkeyring',
-      mode    => '0400',
+      mode    => '0440',
       require => Ceph::Key[$cinder_rbd_user],
     })
 
diff --git a/manifests/volume/backend/rbd.pp b/manifests/volume/backend/rbd.pp
index 67943877..99b125ff 100644
--- a/manifests/volume/backend/rbd.pp
+++ b/manifests/volume/backend/rbd.pp
@@ -87,7 +87,7 @@ define cloud::volume::backend::rbd (
   ensure_resource('file', "/etc/ceph/ceph.client.${rbd_user}.keyring", {
     owner   => 'root',
     group   => 'cephkeyring',
-    mode    => '0400',
+    mode    => '0440',
     require => Ceph::Key[$rbd_user],
   })