From 46a203a5c6f4552fd4618e659e8ac7abbba0f186 Mon Sep 17 00:00:00 2001
From: Sebastian Wagner <sebastian.wagner@suse.com>
Date: Thu, 18 Feb 2021 18:07:44 +0100
Subject: [PATCH] doc/cephadm: Add iscsi

Fixes https://tracker.ceph.com/issues/49488

Signed-off-by: Sebastian Wagner <sebastian.wagner@suse.com>
---
 doc/cephadm/index.rst   |  1 +
 doc/cephadm/install.rst |  2 ++
 doc/cephadm/iscsi.rst   | 69 +++++++++++++++++++++++++++++++++++++++++
 3 files changed, 72 insertions(+)
 create mode 100644 doc/cephadm/iscsi.rst

diff --git a/doc/cephadm/index.rst b/doc/cephadm/index.rst
index e5f7ae4811e51..141517d8038f1 100644
--- a/doc/cephadm/index.rst
+++ b/doc/cephadm/index.rst
@@ -35,6 +35,7 @@ versions of Ceph.
     osd
     rgw
     nfs
+    iscsi
     custom-container
     monitoring
     service-management
diff --git a/doc/cephadm/install.rst b/doc/cephadm/install.rst
index 5c9a0720e551a..8fcd0688f2e06 100644
--- a/doc/cephadm/install.rst
+++ b/doc/cephadm/install.rst
@@ -258,5 +258,7 @@ To use the *Ceph Object Gateway*, follow :ref:`cephadm-deploy-rgw`.
 
 To use *NFS*, follow :ref:`deploy-cephadm-nfs-ganesha`
 
+To use *iSCSI*, follow :ref:`cephadm-iscsi`
+
 
 .. _cluster network: ../rados/configuration/network-config-ref#cluster-network
diff --git a/doc/cephadm/iscsi.rst b/doc/cephadm/iscsi.rst
new file mode 100644
index 0000000000000..a326134c33182
--- /dev/null
+++ b/doc/cephadm/iscsi.rst
@@ -0,0 +1,69 @@
+=============
+iSCSI Service
+=============
+
+.. _cephadm-iscsi:
+
+Deploying iSCSI
+===============
+
+To deploy an iSCSI Ganesha gateway, create a yaml file containing a 
+service specification for iscsi:
+
+.. code-block:: yaml
+
+    service_type: iscsi
+    service_id: iscsi
+    placement:
+      hosts:
+        - host1
+        - host2
+    spec:
+      pool: mypool  # RADOS pool where ceph-iscsi config data is stored.
+      trusted_ip_list: "IP_ADDRESS_1,IP_ADDRESS_2"
+      api_port: ... # optional
+      api_user: ... # optional
+      api_password: ... # optional
+      api_secure: true/false # optional
+      ssl_cert: | # optional
+        ...
+      ssl_key: | # optional
+        ...
+
+For example:
+
+.. code-block:: yaml
+
+    service_type: iscsi
+    service_id: iscsi
+    placement:
+      hosts:
+      - [...]
+    spec:
+      pool: iscsi_pool
+      trusted_ip_list: "IP_ADDRESS_1,IP_ADDRESS_2,IP_ADDRESS_3,..."
+      api_user: API_USERNAME
+      api_password: API_PASSWORD
+      api_secure: true
+      ssl_cert: |
+        -----BEGIN CERTIFICATE-----
+        MIIDtTCCAp2gAwIBAgIYMC4xNzc1NDQxNjEzMzc2MjMyXzxvQ7EcMA0GCSqGSIb3
+        DQEBCwUAMG0xCzAJBgNVBAYTAlVTMQ0wCwYDVQQIDARVdGFoMRcwFQYDVQQHDA5T
+        [...]
+        -----END CERTIFICATE-----
+      ssl_key: |
+        -----BEGIN PRIVATE KEY-----
+        MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQC5jdYbjtNTAKW4
+        /CwQr/7wOiLGzVxChn3mmCIF3DwbL/qvTFTX2d8bDf6LjGwLYloXHscRfxszX/4h
+        [...]
+        -----END PRIVATE KEY-----
+
+
+The specification can then be applied using:
+
+.. prompt:: bash #
+
+   ceph orch apply -i iscsi.yaml
+
+
+See :ref:`orchestrator-cli-placement-spec` for details of the placement specification.
-- 
2.39.5