The workload remains in the creating state.
The issues here are described in order of how likely they are to occur.
Check these causes one by one until you find the cause of the fault.
Symptom
When creating a workload, an error message indicating that the sandbox cannot be created is displayed. This is because the cce-pause:3.1 image fails to be pulled.
Failed to create pod sandbox: rpc error: code = Unknown desc = failed to get sandbox image "cce-pause:3.1": failed to pull image "cce-pause:3.1": failed to pull and unpack image "docker.io/library/cce-pause:3.1": failed to resolve reference "docker.io/library/cce-pause:3.1": pulling from host **** failed with status code [manifests 3.1]: 400 Bad Request
Possible Causes
The image is a system image added during node creation. If the image is deleted by mistake, the workload cannot be created.
Solution
tar -xzvf /opt/cloud/cce/package/node-package/pause-*.tgz
docker load -i ./pause/package/image/cce-pause-*.tar
ctr -n k8s.io images import --all-platforms ./pause/package/image/cce-pause-*.tar
The kubelet option cpu-manager-policy defaults to static. This allows granting enhanced CPU affinity and exclusivity to pods with certain resource characteristics on the node. If you modify CCE node specifications on the ECS console, the original CPU information does not match the new CPU information. As a result, workloads on the node cannot be restarted or created.
Example command for deleting the file:
rm -rf /mnt/paas/kubernetes/kubelet/cpu_manager_state
systemctl restart kubelet
Verify that workloads on the node can be successfully restarted or created.
For details, see What Should I Do If I Fail to Restart or Create Workloads on a Node After Modifying the Node Specifications?.