diff --git a/ansible/post-deploy.yml b/ansible/post-deploy.yml
index f0bc32c882..8112d9fd3d 100644
--- a/ansible/post-deploy.yml
+++ b/ansible/post-deploy.yml
@@ -7,4 +7,5 @@
       template:
         src: "roles/common/templates/admin-openrc.sh.j2"
         dest: "{{ node_config }}/admin-openrc.sh"
+        mode: 0644
       run_once: True
diff --git a/releasenotes/notes/bug-1891145-95e3943e8e030962.yaml b/releasenotes/notes/bug-1891145-95e3943e8e030962.yaml
new file mode 100644
index 0000000000..e9fce1415c
--- /dev/null
+++ b/releasenotes/notes/bug-1891145-95e3943e8e030962.yaml
@@ -0,0 +1,5 @@
+---
+fixes:
+  - |
+    Fixes ``post-deploy`` action with new Ansible releases setting a wrong mode
+    on the created file. `LP#1891145 <https://launchpad.net/bugs/1891145>`__