Ansible 2.8.14 and 2.9.12 change the default mode, that created files will get, from 0666 (with umask; which would usually produce 0644) to 0600. [1]

Kolla-Ansible got hit by it, and Zuul relies on Ansible so might pick it up at some point, possibly causing some little havoc for all of us.

[1] https://github.com/ansible/ansible/issues/71200

-yoctozepto