Integrating container orchestration systems with operational technology devices

A method, comprising:

• receiving, via a first computing node of a cluster of computing nodes in a container orchestration system, a pod from a second computing node in the cluster of computing nodes, wherein the second computing node is configured to:
• receive a request to coordinate one or more container using at least a portion of a plurality of processor-based control systems for controlling a plurality of operations of a plurality of operational technology (OT) devices;
• receive a plurality of machine state datasets from the plurality of processor-based control systems via a portion of the cluster of processor-based computing nodes, wherein each of the plurality of machine state datasets correspond to an operational state associated with each of the plurality of processor-based control systems and each of the plurality of OT devices, and wherein the respective operational state comprises available processing resource data of a respective processor-based control system and an operational mode or status of a respective OT device;
• determining an operational state associated with a first processor-based control system of the cluster does not correspond with a desired operational state;
• transmit the pod to the first computing node, wherein the pod is configured to modify operations associated with the first processor-based control system to cause the first processor-based control system to modify one or more operational processes performed thereon to achieve the desired operational state;
• and
• retrieving, via the first computing node, an image file comprising one or more containers from a registry, wherein the pod comprises an indication of a location of the image file in the registry;
• generating, via the first computing node, a package based on the one or more containers and one or more mapped commands implementable by the first control system in an operational technology (OT) domain, wherein the one or more mapped commands correspond to the modified operations performable by the first control system that corresponds to one or more commands specified in the one or more containers;
• and
• storing, via the first computing node, the package in a filesystem shared with the first control system.

A non-transitory computer-readable medium comprising computer-executable instructions that, when executed, are configured to cause a processor to perform operations comprising:

• receiving a request to coordinate one or more operations of one or more containers using at least a portion of a plurality of processor-based control systems for controlling a plurality of operations of a plurality of operational technology (OT) devices;
• receiving a plurality of machine state datasets from the plurality of processor-based control systems via a portion of a plurality of processor-based computing nodes in a container orchestration system, wherein each of the plurality of machine state datasets correspond to an operational state associated with each of the plurality of processor-based control systems and each of the plurality of OT devices, and wherein the operational state comprises available processing resource data of a respective control system and an operational mode or status of a respective OT device;
• determining that a first operational state associated with a first control system does not correspond with a desired operational state;
• transmitting a pod to a first computing node of the plurality of processor-based computing nodes, wherein the pod is configured to modify operations associated with the first control system to cause the first control system to modify processes performed thereon to achieve the desired operational state;
• retrieving an image file comprising one or more containers from a registry, wherein the pod comprises an indication of a location of the image file in the registry;
• generating a package based on the one or more containers and one or more mapped commands implementable by the first control system in an operational technology (OT) domain, wherein the one or more mapped commands correspond to the modified operations performable by the first control system that corresponds to one or more commands specified in the one or more containers;
• sending the package directly to the first control system;
• and
• transmitting an additional pod to the first computing node to cause the first control system to execute the one or more operations in response to determining that the first control system is at the desired state.