diff --git a/submariner/templates/route-agent-ds.yaml b/submariner/templates/route-agent-ds.yaml
index afeaa32..d40cd1e 100644
--- a/submariner/templates/route-agent-ds.yaml
+++ b/submariner/templates/route-agent-ds.yaml
@@ -51,6 +51,11 @@ spec:
           privileged: true
           readOnlyRootFilesystem: false
           runAsNonRoot: false
+        volumeMounts:
+        # Because we don't actually run iptables locally, but chroot in to the host
+        - mountPath: /host
+          name: host-slash
+          readOnly: true
 {{- with .Values.routeAgent.nodeSelector }}
       nodeSelector:
 {{ toYaml . | indent 8 }}
@@ -63,3 +68,7 @@ spec:
       affinity:
 {{ toYaml . | indent 8 }}
 {{- end }}
+      volumes:
+      - name: host-slash
+        hostPath:
+          path: /
\ No newline at end of file