diff --git a/roles/helm-apps/meta/argument_specs.yml b/roles/helm-apps/meta/argument_specs.yml
index d1be9a81520979441ac09faba77019dfb299973d..0ec83bb3fe5556bca223fdbb9ad54cb17eaa556c 100644
--- a/roles/helm-apps/meta/argument_specs.yml
+++ b/roles/helm-apps/meta/argument_specs.yml
@@ -46,6 +46,9 @@ argument_specs:
             default: true
           wait_timeout:
             type: str
+          atomic:
+            type: bool
+            default: true
 
       repositories:
         type: list
@@ -91,3 +94,6 @@ argument_specs:
           wait_timeout:
             type: str
             default: "5m"
+          atomic:
+            type: bool
+            default: true
diff --git a/roles/kubernetes-apps/kubelet-csr-approver/meta/main.yml b/roles/kubernetes-apps/kubelet-csr-approver/meta/main.yml
index 93d13830cf3e1b2b5efee5925e212b127c5f9f72..56f7e71570ccc676f35375056f3e6e137df19ea4 100644
--- a/roles/kubernetes-apps/kubelet-csr-approver/meta/main.yml
+++ b/roles/kubernetes-apps/kubelet-csr-approver/meta/main.yml
@@ -13,7 +13,8 @@ dependencies:
         namespace: "{{ kubelet_csr_approver_namespace }}"
         chart_ref: "{{ kubelet_csr_approver_chart_ref }}"
         chart_version: "{{ kubelet_csr_approver_chart_version }}"
-        wait: true
+        wait: "{{ kube_network_plugin != 'cni' }}"
+        atomic: "{{ kube_network_plugin != 'cni' }}"
         values: "{{ kubelet_csr_approver_values }}"
     repositories:
       - name: "{{ kubelet_csr_approver_repository_name }}"