Merge pull request #204556 from andyzhangx/patch-50

Update azure-disk-csi.md

Author: PRMerger17

articles/aks/azure-disk-csi.md

@@ -29,7 +29,7 @@ In addition to in-tree driver features, Azure disk CSI driver supports the follo
 - Performance improvements during concurrent disk attach and detach
   - In-tree drivers attach or detach disks in serial, while CSI drivers attach or detach disks in batch. There is significant improvement when there are multiple disks attaching to one node.
 - Zone-redundant storage (ZRS) disk support
-  - `Premium_ZRS`, `StandardSSD_ZRS` disk types are supported, check more details about [Zone-redundant storage for managed disks](../virtual-machines/disks-redundancy.md)
+  - `Premium_ZRS`, `StandardSSD_ZRS` disk types are supported, ZRS disk could be scheduled on the zone or non-zone node, without the restriction that disk volume should be co-located in the same zone as a given node, check more details about [Zone-redundant storage for managed disks](../virtual-machines/disks-redundancy.md)
 - [Snapshot](#volume-snapshots)
 - [Volume clone](#clone-volumes)
 - [Resize disk PV without downtime(Preview)](#resize-a-persistent-volume-without-downtime-preview)
@@ -379,4 +379,4 @@ $ kubectl exec -it busybox-azuredisk-0 -- cat c:\mnt\azuredisk\data.txt # on Win
 [az-provider-register]: /cli/azure/provider#az_provider_register
 [az-on-demand-bursting]: ../virtual-machines/disk-bursting.md#on-demand-bursting
 [enable-on-demand-bursting]: ../virtual-machines/disks-enable-bursting.md?tabs=azure-cli
-[az-premium-ssd]: ../virtual-machines/disks-types.md#premium-ssds
+[az-premium-ssd]: ../virtual-machines/disks-types.md#premium-ssds

articles/aks/azure-disk-customer-managed-keys.md

@@ -53,6 +53,9 @@ $keyVaultKeyUrl=az keyvault key show --vault-name myKeyVaultName  --name myKeyNa
 az disk-encryption-set create -n myDiskEncryptionSetName  -l myAzureRegionName  -g myResourceGroup --source-vault $keyVaultId --key-url $keyVaultKeyUrl 
 ```
 
+> [!IMPORTANT]
+> Ensure your AKS cluster identity has read permission of DiskEncryptionSet
+
 ## Grant the DiskEncryptionSet access to key vault
 
 Use the DiskEncryptionSet and resource groups you created on the prior steps, and grant the DiskEncryptionSet resource access to the Azure Key Vault.