diff --git a/sdk_container/src/third_party/coreos-overlay/app-admin/flannel/files/flanneld-rkt.service b/sdk_container/src/third_party/coreos-overlay/app-admin/flannel/files/flanneld-rkt.service
index 63a6a57139..c47a87aed6 100644
--- a/sdk_container/src/third_party/coreos-overlay/app-admin/flannel/files/flanneld-rkt.service
+++ b/sdk_container/src/third_party/coreos-overlay/app-admin/flannel/files/flanneld-rkt.service
@@ -27,10 +27,15 @@ ExecStart=/usr/bin/rkt run --net=host \
    --volume runsystemd,kind=host,source=/run/systemd,readOnly=false \
    --volume runflannel,kind=host,source=/run/flannel,readOnly=false \
    --volume ssl,kind=host,source=${ETCD_SSL_DIR},readOnly=true \
+   --volume certs,kind=host,source=/usr/share/ca-certificates,readOnly=true \
+   --volume resolv,kind=host,source=/etc/resolv.conf,readOnly=true \
    --mount volume=runsystemd,target=/run/systemd \
    --mount volume=runflannel,target=/run/flannel \
    --mount volume=ssl,target=${ETCD_SSL_DIR} \
+   --mount volume=certs,target=/etc/ssl/certs \
+   --mount volume=resolv,target=/etc/resolv.conf \
    ${FLANNEL_IMG}:${FLANNEL_VER} \
+   --exec /opt/bin/flanneld \
    -- --ip-masq=true
 
 # Update docker options