Start ISCSI service explicity

According to CIS requirement iscsi is not running in VCP by
default, since ironic requires it explicitly we need to start it.

Change-Id: Ia37ec4ac28aa0e304a1b883f42df436af9ea2dd8
(cherry picked from commit d03d78dc487289fd416ec2b68b8ff2e465f633d4)
diff --git a/ironic/conductor.sls b/ironic/conductor.sls
index e566200..bc0fc7f 100644
--- a/ironic/conductor.sls
+++ b/ironic/conductor.sls
@@ -137,4 +137,21 @@
 {%- endfor %}
 {%- endif %}
 
+{# we have disabled iscsi by default according to CIS requirement, enable it explicitly #}
+ironic_iscsi_packages:
+  pkg.installed:
+    - names:
+      - open-iscsi
+    - require_in:
+      - {{ conductor.service }}
+
+ironic_scsi_service:
+  service.running:
+    - names:
+      - iscsid
+    - enable: true
+  {%- if grains.get('noservices') %}
+    - onlyif: /bin/false
+  {%- endif %}
+
 {%- endif %}