Orchestrating a container-based application on a terminal device

A system for orchestrating a container-based application that is executed on a terminal device, comprising:

• an orchestration slave unit associated with the terminal device;
• an orchestration master unit connected via a communication connection to the terminal device, wherein the orchestration slave unit is controlled by a control manager in the orchestration master unit, and the orchestration slave unit reports a status at short time intervals, the system configured to:
• receive implementation information in the orchestration slave unit via the communication connection from the orchestration master unit;
• and
• configure and/or to control the application by the orchestration slave unit based on a contingency policy contained within the implementation information, wherein the implementation information is additionally saved persistently in a memory unit in the terminal device;
• wherein, if the communication connection is interrupted, the most recently saved implementation information is retrieved from the orchestration slave unit and the application is configured and/or controlled based on a contingency policy of a most recently saved implementation information, and a safety-relevant container instance, identified by the orchestration master unit, is preferentially instantiated by the orchestration slave unit;
• wherein the contingency policy of the most recently saved implementation information is designed such that different contingency measures are executed by different contingency levels;
• wherein the orchestration slave unit changes a configuration and/or a control of the application depending on the contingency policy received from the orchestration master unit;
• wherein the orchestration slave unit starts an at least one contingency container instance and/or stops at least one working container instance of the application depending on the contingency policy, and the different contingency levels comprise different level policies and, depending on an ascertained contingency level, a level policy assigned to the contingency level is activated by the orchestration slave unit.