diff --git a/workloads/ddclient/deploy.yml b/workloads/ddclient/deploy.yml
index 5826660..ab483dd 100644
--- a/workloads/ddclient/deploy.yml
+++ b/workloads/ddclient/deploy.yml
@@ -24,3 +24,4 @@ spec:
       - name: config
         secret:
           secretName: ddclient-conf
+          defaultMode: 511  # Octal: 0777, needed to allow ddclient permissions