Updating operational technology devices using container orchestration systems

A method, comprising:

• receiving, via a first computing node of a cluster of computing nodes in a container orchestration system, a first pod from a second computing node in the cluster of computing nodes;
• retrieving, via the first computing node, a first image file comprising a first set of containers from a registry based on the first pod, wherein the first pod comprises an indication of a location of the first image file in the registry, and wherein the first set of containers is configured to cause a control system of a plurality of control systems to suspend operation of a first OT device of a plurality of OT devices, wherein each of the plurality of OT devices corresponds to a machine associated with manufacturing or processing one or more products for manufacture within an industrial automation system;
• generating, via the first computing node, a first package based on the first set of containers;
• storing, via the first computing node, the first package in a filesystem shared with the control system;
• receiving, via the first computing node, a second pod from the second computing node;
• retrieving, via the first computing node, a second image file comprising a second set of containers from the registry based on the second pod, wherein the second pod comprises a second indication of a second location of the second image file in the registry, and wherein the second set of containers is configured to cause the control system to update one or more software components being executed by the control system;
• generating, via the first computing node, a second package based on the second set of containers;
• and
• storing, via the first computing node, the second package in the filesystem accessible to the control system.

A non-transitory computer-readable medium comprising computer-executable instructions that, when executed, are configured to cause a processor to perform operations comprising:

• receiving update data for a first control system of a plurality of control systems, wherein the first control system is configured to operate a first OT device of the plurality of OT devices, wherein each of the plurality of OT devices corresponds to a machine associated with manufacturing or processing one or more products for manufacture within an industrial automation system, wherein the update data is configured to update one or more software components being executed by the first control system;
• retrieving a plurality of machine state datasets from the plurality of control systems via a portion of a cluster of computing nodes that are part of a container orchestration system, wherein each of the plurality of machine state datasets correspond to a current operational state associated with each of the plurality of OT devices;
• identifying a second control system of the plurality of control systems as a suitable host to operate the first OT device in place of the first control system based on the plurality of machine state datasets;
• generating and storing a first pod in a first filesystem accessible to a first computing node of the cluster of nodes, wherein the first pod is configured to cause the first computing node to send instructions to the first control system to suspend operation of the first OT device;
• and
• generating and storing a second pod in a second filesystem accessible to a second computing node of the cluster of nodes, wherein the second computing node is associated with the second control system, wherein the second pod is configured to cause the second computing node to send additional instructions to the second control system to assume operation of the first OT device.