Vehicle control modules including containerized orchestration and resource management for mixed criticality systems

A vehicle control system comprising:

• a motor configured to drive wheels of a vehicle;
• a braking module configured to inhibit rotation of the wheels of the vehicle;
• and
• a vehicle control module configured to:
• define a set of multiple workloads, each workload including a workload descriptor and at least one containerized image configured to execute a vehicle control process, the workload descriptor defining a safety level of the workload, a recovery mechanism for the workload, one or more vehicle system resources used by the at least one containerized image of the workload, and a vehicle system location for executing the vehicle control process of the containerized image of the workload;
• allocate vehicle system resources to each workload according to the workload descriptors, wherein the vehicle system resources include at least one of a central processor utilization, a graphics processor utilization, a memory size, an artificial intelligence accelerator, or a video codec;
• execute the vehicle control processes of the containerized images of the multiple workloads;
• in response to a vehicle system resource conflict, assign higher priority resource access to workloads having a critical safety level and assign lower priority resource access to workloads having a non-critical safety level;
• monitor operation of each workload for an error condition;
• and
• in response to detecting the error condition for one of the multiple workloads:
• determine the safety level of the one of the multiple workloads having the error condition;
• automatically shut down one or more vehicle control processes of the one of the multiple workloads having the error condition, in response to the safety level being a non-critical safety level;
• and
• request a managed shutdown of the one or more vehicle control processes of the one of the multiple workloads having the error condition in response to the safety level being a critical safety level.

A vehicle control method comprising:

• defining a set of multiple workloads, each workload including a workload descriptor and at least one containerized image configured to execute at least one vehicle control process, the workload descriptor defining a safety level of the workload, a recovery mechanism for the workload, one or more vehicle system resources used by the at least one containerized image of the workload, and a vehicle system location for executing the containerized images of the workload;
• allocating vehicle system resources to each workload according to the workload descriptors;
• executing the vehicle control processes of the containerized images of the multiple workloads;
• in response to a vehicle system resource conflict, assigning higher priority resource access to workloads having a critical safety level and assigning lower priority resource access to workloads having a non-critical safety level;
• monitoring operation of each workload for an error condition;
• and
• in response to detecting the error condition for one of the multiple workloads:
• determining the safety level of the one of the multiple workloads having the error condition;
• automatically shutting down one or more vehicle control processes of the one of the multiple workloads having the error condition, in response to the safety level being a non-critical safety level;
• and
• requesting a managed shutdown of the one or more vehicle control processes of the one of the multiple workloads having the error condition in response to the safety level being a critical safety level.