diff --git a/vault/overrides.yaml b/vault/overrides.yaml
index 3f0359a..c957e06 100644
--- a/vault/overrides.yaml
+++ b/vault/overrides.yaml
@@ -3,6 +3,10 @@ global:
    tlsDisable: true
 injector:
    enabled: true
+   # The chart's default anti-affinity forbids two injector pods on one
+   # node, so on this single node a rolling update can never start the new
+   # pod while the old one runs.
+   affinity: ""
 server:
    # Pinned to the running version: the chart would otherwise pull its own
    # default on the next pod restart, and with Shamir unsealing a Vault