Container Registry Proxy for OT Container Orchestration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Industrial control systems in OT environments lack the ability to effectively leverage container orchestration systems due to incompatibilities between IT and OT operating systems, preventing seamless management and coordination of OT assets.
Innovation Solution
Integrate specialized hardware and software control systems within industrial control systems to enable participation in container orchestration operations, using worker nodes that support limited or full lifecycle features, and a proxy node for bi-directional coordination between IT and OT spaces.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If specialized hardware and software control systems are integrated into industrial control systems, then participation in container orchestration operations is enabled, but device complexity increases
Solution Approach 1:
The gateway is designed as a multi-functional component that handles multiple tasks: command translation, device monitoring, container image management, and coordination between IT and OT systems. This universal approach reduces the need for multiple specialized components, thereby limiting the increase in overall system complexity
2Productivity
If worker nodes with limited or full lifecycle features are used, then OT asset management capability is improved, but device complexity increases
Solution Approach 1:
The worker nodes are designed with dynamic capabilities that can adapt their functionality based on the specific OT assets they manage. The nodes can operate with limited or full lifecycle features depending on the requirements of the connected devices, allowing the system to scale complexity only where needed rather than requiring all nodes to have maximum capabilities
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method may involve receiving, via at least one processor, a request from an industrial component operating in an industrial automation system, such that the request may include an indication of a software function. The method may then involve querying a container registry having a plurality of container images based on the software function, identifying at least one container image of the plurality of container images that corresponds to the software function, sending an indication of the at least one container image to the industrial component, and receiving a selection of the at least one container image from the industrial component. The method may also involve retrieving the at least one container image from the container registry and sending the at least one container image to the industrial component.