diff --git a/website/content/docs/deploy/kubernetes/csi/index.mdx b/website/content/docs/deploy/kubernetes/csi/index.mdx
index 04636eeb18..259159ad39 100644
--- a/website/content/docs/deploy/kubernetes/csi/index.mdx
+++ b/website/content/docs/deploy/kubernetes/csi/index.mdx
@@ -38,6 +38,16 @@ The following features are supported by the Vault CSI Provider:
 - Syncing secrets to Kubernetes secrets to be used as environment variables.
 - Installation via [Vault Helm](/vault/docs/platform/k8s/helm)
 
+<Note>
+
+  Installing with Helm runs the Vault CSI provider alongside
+  [Vault Agent](/vault/docs/deploy/kubernetes/csi) within the same pod. Vault
+  Agent cannot renew tokens created before a restart. As a result, if the Vault
+  Agent container stops or restarts, when a preexisting token expires, Vault
+  Agent revokes the associated lease.
+
+</Note>
+
 @include 'kubernetes-supported-versions.mdx'
 
 ## Authenticating with Vault