Merge pull request #311662 from eh8/main

Add ESAN permission info and fix fio example

Author: prmerger-automator[bot]

articles/storage/container-storage/enable-multi-zone-redundancy.md

@@ -28,7 +28,9 @@ az provider register --namespace Microsoft.ElasticSan
 ```
 - When ZRS is newly enabled in a region, you might need to register a subscription-level feature flag so Azure Container Storage can deploy SAN targets:
 ```azurecli
-Register-AzProviderFeature -FeatureName EnableElasticSANTargetDeployment -ProviderNamespace Microsoft.ElasticSan
+az feature register \
+  --namespace Microsoft.ElasticSan \
+  --name EnableElasticSANTargetDeployment
 ```
 - Verify that the region supports your chosen redundancy option. See the current [Elastic SAN region availability](../elastic-san/elastic-san-create.md#).
 

articles/storage/container-storage/use-container-storage-with-elastic-san.md

@@ -27,6 +27,17 @@ Azure Elastic SAN is a managed, shared block-storage service that provides a cen
 
 [!INCLUDE [container-storage-prerequisites](../../../includes/container-storage-prerequisites.md)]
 - [Review the installation instructions](install-container-storage-aks.md) and ensure Azure Container Storage is properly installed.
+- If you use Elastic SAN for the first time in the subscription, run this one-time registration command:
+```azurecli-interactive
+az provider register --namespace Microsoft.ElasticSan
+```
+- Assign the **Azure Container Storage Operator** role to the `*-agentpool` managed identity in the AKS node resource group. In the Azure portal, open the node resource group (for example, *MC_myResourceGroup_myAKSCluster_eastus*), go to **Access Control (IAM) > Add > Add role assignment**, select **Azure Container Storage Operator**, and assign it to the managed identity created by the cluster (typically named *myAKSCluster-agentpool*).
+- When [ZRS is newly enabled](enable-multi-zone-redundancy.md) in a region, you might need to register a subscription-level feature flag so Azure Container Storage can deploy SAN targets:
+```azurecli
+az feature register \
+  --namespace Microsoft.ElasticSan \
+  --name EnableElasticSANTargetDeployment
+```
 
 ## Limitations
 
@@ -275,13 +286,11 @@ Create a pod using Flexible I/O Tester (fio) for benchmarking and workload simul
      name: fiopod
    spec:
      containers:
-       - image: nixery.dev/shell/fio
-         name: fio
-         ports:
-           - containerPort: 80
-             protocol: TCP
+       - name: fio
+         image: mayadata/fio
+         args: ["sleep", "1000000"]
          volumeMounts:
-           - mountPath: /volume
+           - mountPath: "/volume"
              name: iscsi-volume
      volumes:
        - name: iscsi-volume