Cloud Native IoT - OTA Updates and Device Repurposing With Kubernetes

Explore an open-source system for integrating resource-constrained IoT devices like ESP32-based microcontrollers into Kubernetes-managed environments in this 35-minute conference talk from the Linux Foundation. Learn how to implement secure device onboarding using Entity Attestation Tokens (EATs) and OpenDICE, where devices generate cryptographic identities from hardware-embedded secrets and attest their state during registration and over-the-air (OTA) updates. Discover how devices are discovered using Akri, which exposes them as addressable Kubernetes resources, and understand the process of building and packaging firmware as OCI artifacts that are stored in standard registries and deployed via a Kubernetes "FlashJob" operator. Examine the validation mechanisms that occur during device onboarding through Akri's discovery handler and during device repurposing to ensure end-to-end attestation of both hardware and software components. Focus on concrete mechanisms for OTA management, hardware-rooted identity, and distributed execution targeting constrained systems under Kubernetes control, gaining practical insights into cloud-native IoT device management and security.