Integrating container orchestration systems with operational technology devices

{
  "publication_number": "US2022091572A1",
  "country": "US",
  "kind": "A1",
  "title": "Integrating container orchestration systems with operational technology devices",
  "abstract": "A method may include receiving, via a first computing node of a cluster of computing nodes in a container orchestration system, a pod from a second computing node in the cluster of computing nodes. The method may also involve retrieving an image file that includes containers from a registry, such that the pod detail an indication of a location of the image file in the registry. The method then involves generating a package based on the one or more containers and one or more mapped commands implementable by a control system in an operational technology (OT) domain. The mapped commands correspond to operations performable by the control system that corresponds to commands specified in the containers. The method may then involve storing the package in a filesystem shared with the control system.",
  "claims": [
    "1. A system, comprising: a first computing node of a cluster of computing nodes that are part of a container orchestration system; a plurality of control systems for controlling a plurality of operations of a plurality of operational technology (OT) devices, wherein a first control system of the plurality of control systems is communicatively coupled to the first computing node, and wherein the first control system is configured to communicatively couple to a first OT device of the plurality of OT devices; a second computing node of the cluster of computing nodes, wherein the second computing node is configured to: receive a request to coordinate one or more operations of one or more containers using at least a portion of the plurality of control systems; retrieve a plurality of machine state datasets from the plurality of control systems via a portion of the cluster of computing nodes, wherein each of the plurality of machine state datasets correspond to an operational state associated with each of the plurality of control systems, each of the plurality of OT devices, or both; identify the first control system as a suitable host to perform the one or more operations based on the plurality of machine state datasets; and transmit a pod to the first computing node, wherein the pod is configured to cause the first computing node to perform the one or more operations. 2. The system of claim 1, wherein the second computing node is configured to coordinate an automatic process for managing or scheduling deployment of a plurality of containers for execution across the plurality of control systems via the cluster of computing nodes. 3. The system of claim 1, wherein the one or more containers comprise one or more applications and one or more runtime dependencies associated with each of the one or more containers. 4. The system of claim 1, wherein the request comprises a deployment configuration file indicative of a plurality of desired machine states for the plurality of control systems. 5. The system of claim 4, wherein the second computing node is configured to identify the first control system as the suitable host to perform the one or more operations based on the plurality of machine state datasets as compared to the plurality of desired machine states. 6. The system of claim 1, wherein the plurality of OT devices is part of an industrial system for performing one or more physical processes, and wherein the plurality of OT devices is configured to communicate with the plurality of control systems via OT communication protocol. 7. The system of claim 1, wherein the first control system comprises a programmable logic controller. 8. The system of claim 1, wherein the first computing node is configured to: retrieve an image file comprising the one or more containers from a registry, wherein the pod comprises an indication of a location of the image file in the registry; generate a package based on the one or more containers and one or more mapped commands implementable by the first control system; and storing the package in a filesystem shared with the first control system. 9. The system of claim 8, wherein the first control system is configured to periodically check the filesystem, retrieve the package from the filesystem, and execute the package, wherein the package is configured to cause the first control system send one or more control commands to the first OT device, wherein the one or more control commands correspond to the one or more operations. 10. The system of claim 1, wherein the first computing node is configured to: retrieve an image file comprising the one or more containers from a registry, wherein the pod comprises an indication of a location of the image file in the registry; generate a package based on the one or more containers and one or more mapped commands implementable by the first control system; and send the package to the first control system. 11. The system of claim 1, wherein the first computing node is configured to send an updated machine state dataset associated with the first control system, the first OT device, or both to the second computing node, wherein the updated machine state dataset is indicative of a status of the first control system, the first OT device, or both after the one or more operations are performed. 12. A method, comprising: receiving, via a first computing node of a cluster of computing nodes in a container orchestration system, a pod from a second computing node in the cluster of computing nodes; retrieving, via the first computing node, an image file comprising one or more containers from a registry, wherein the pod comprises an indication of a location of the image file in the registry; generating, via the first computing node, a package based on the one or more containers and one or more mapped commands implementable by a control system in an operational technology (OT) domain, wherein the one or more mapped commands correspond to one or more operations performable by the control system that corresponds to one or more commands specified in the one or more containers; and storing, via the first computing node, the package in a filesystem shared with the control system. 13. The method of claim 12, comprising sending the package directly to the control system via an operational technology (OT) communication protocol. 14. The method of claim 13, wherein the pod is received via an information technology (IT) communication protocol. 15. The method of claim 14, wherein generating the package comprises translating the one or more commands into the one or more mapped commands, wherein the one or more mapped commands are configured to be transmitted via the OT communication protocol. 16. The method of claim 15, wherein the one or more commands correspond to the IT communication protocol. 17. A non-transitory computer-readable medium comprising computer-executable instructions that, when executed, are configured to cause a processor to perform operations comprising: receiving a pod from a computing node in a cluster of computing nodes in a container orchestration system; retrieving an image file comprising one or more containers from a registry, wherein the pod comprises an indication of a location of the image file in the registry; generating a package based on the one or more containers and one or more mapped commands implementable by a control system in an operational technology (OT) domain, wherein the one or more mapped commands correspond to one or more operations performable by the control system that corresponds to one or more commands specified in the one or more containers; and sending the package directly to the control system. 18. The non-transitory computer-readable medium of claim 17, wherein the computer-executable instructions that cause the processor to send the package comprises additional computer-executable instructions that cause the processor to generate an event notification configured to cause the control system to retrieve the package from a filesystem. 19. The non-transitory computer-readable medium of claim 18, wherein the filesystem is shared between the processor and the control system. 20. The non-transitory computer-readable medium of claim 17, wherein the control system is configured to control a operational technology (OT) device, wherein the OT device comprises motor control centers, motors, human machine interfaces (HMIs), operator interfaces, contactors, starters, sensors, drives, relays, protection devices, switchgear, compressors, network switches, or any combination thereof that operate in the OT domain."
  ],
  "cpc": [
    "G05B 19/0425",
    "G05B 19/41835",
    "G05B 19/4184",
    "G05B 19/41865",
    "G05B 19/4188",
    "G05B 2219/31088",
    "G05B 2219/31422",
    "G05B 2219/32043",
    "G06F 16/535",
    "G06F 16/55",
    "G06F 2009/4557",
    "G06F 8/63",
    "G06F 9/45558",
    "G06F 9/5027",
    "G06F 9/5044",
    "G06F 9/5083",
    "Y02P 90/02"
  ],
  "assignees": [
    "ROCKWELL AUTOMATION TECH INC"
  ],
  "filing_date": "2020-09-22",
  "publication_date": "2022-03-24",
  "priority_date": "2020-09-22",
  "application_number": "US-202017028709-A",
  "family_id": "76796882",
  "citations": [
    "US11727322B2",
    "US2015331130A1",
    "US2019243687A1",
    "US2021089354A1",
    "US2021227024A1",
    "US2021311765A1",
    "US2023205437A1"
  ]
}