diff --git a/docker/services/iscsid.yaml b/docker/services/iscsid.yaml
index b0810120e5..a809f9716c 100644
--- a/docker/services/iscsid.yaml
+++ b/docker/services/iscsid.yaml
@@ -109,6 +109,11 @@ outputs:
             path: /etc/iscsi
             state: directory
             setype: svirt_sandbox_file_t
+        - name: ensure /var/lib/iscsi exists
+          file:
+            path: /var/lib/iscsi
+            state: directory
+            setype: svirt_sandbox_file_t
         - name: stat /lib/systemd/system/iscsid.socket
           stat: path=/lib/systemd/system/iscsid.socket
           register: stat_iscsid_socket