diff --git a/charts/substrate/templates/atelet.yaml b/charts/substrate/templates/atelet.yaml
index 5e89b2f2c1..757a0b5763 100644
--- a/charts/substrate/templates/atelet.yaml
+++ b/charts/substrate/templates/atelet.yaml
@@ -186,6 +186,10 @@ spec:
           readOnly: true
         - name: kubelet-plugins
           mountPath: /var/lib/kubelet/plugins
+          # HostToContainer: kubelet stages CSI volumes under this directory; a private copy
+          # of those mounts would keep every volume's filesystem (and LUKS mapper) open after
+          # kubelet unmounts it, so the volume can never be unstaged while atelet runs.
+          mountPropagation: HostToContainer
         - name: device-plugins
           mountPath: /var/lib/kubelet/device-plugins
         - name: host-dev