Sailbird
Engineering Lab
Engineering Lab12 min read

Edge Inference Fleet on Jetson Orin Nano with K3s

A reference architecture for running inference workloads on a fleet of NVIDIA Jetson Orin Nano devices with K3s, OTA updates, and remote observability.

NVIDIA Jetson Orin NanoK3scontainerdTensorRTONNX RuntimePrometheusGrafanaGitOps
Service line: Edge AI Platform EngineeringPublished July 11, 2026

Architecture at a glance

Cloud control plane, regional operations, and NVIDIA Jetson Orin Nano worker nodes running K3s agents and inference workloads.

Cloud

Control plane

  • Git-backed desired state and release promotion
  • Artifact registry for images and model packages
  • Observability backend and alert routing
  • Fleet policy, secrets, and rollout orchestration
Edge / site

Optional gateway layer

  • Regional K3s server or hardened site gateway
  • Artifact cache for bandwidth-constrained links
  • Local buffering when devices are intermittently offline
Fleet

NVIDIA Jetson Orin Nano worker nodes

Site A

K3s agent

Inference workload

Telemetry sidecar

Site B

K3s agent

Inference workload

Telemetry sidecar

Site C

K3s agent

Inference workload

Telemetry sidecar

Each NVIDIA Jetson Orin Nano runs the same platform pattern. Site labels and rollout cohorts control promotion without one-off manual changes.

Fleet lifecycle

One operational model from first NVIDIA Jetson Orin Nano bootstrap to field updates and rollback.

Provision
Bootstrap NVIDIA Jetson Orin Nano fleet
NVIDIA Jetson Orin Nano
K3s agent node

Dependencies

Inference
Container runtime
Model
TensorRT / ONNX
Telemetry
Metrics + logs
Deploy
Promote workloads
Observe
Field health checks
Canary healthy?
Gate on fleet health
true
Update
OTA next cohort
false
Recover
Rollback + diagnose

Overview

This lab documents how we approach edge inference fleets built around the NVIDIA Jetson Orin Nano. The goal is not a demo on a single board. It is a repeatable platform pattern: lightweight Kubernetes, controlled model delivery, and operations that still work when devices are on factory Wi-Fi, LTE, or intermittently offline.

We use K3s as the edge control plane because it keeps the operational model close to cloud Kubernetes without the overhead of a full distribution on constrained hardware. The NVIDIA Jetson Orin Nano is the reference worker node: cost-aware, power-efficient, and widely available for teams shipping inference outside the data center.

Problem this reference solves

Most edge AI projects stall after the first successful inference on a bench device. The model runs once, then the team discovers that provisioning, updates, monitoring, and rollback across dozens or hundreds of NVIDIA Jetson Orin Nano devices is a different problem entirely.

This reference focuses on the platform layer: how devices join a fleet, how inference workloads are promoted, how updates are rolled out safely, and how operators detect failure without flying to every site.

  • Inconsistent manual setup across NVIDIA Jetson Orin Nano devices
  • Model updates pushed by SSH or USB rather than a controlled pipeline
  • No fleet-wide health view or rollback path after a bad release
  • Cloud and edge operated as separate worlds with different tooling

Reference architecture

The design splits cleanly into a cloud control plane and edge worker nodes. The cloud side holds Git-backed desired state, build artifacts, and the observability backend. Each NVIDIA Jetson Orin Nano runs K3s agent services, an inference runtime, and a lightweight telemetry forwarder.

Inference containers are promoted through the same discipline as cloud workloads: versioned artifacts, environment-specific configuration, and an explicit rollback path. The difference at the edge is tolerance for bandwidth limits, offline windows, and heterogeneous connectivity.

Why the NVIDIA Jetson Orin Nano

We chose the NVIDIA Jetson Orin Nano as the reference device because it balances inference capability, power draw, and unit cost for fleet deployments. For many perception and classification workloads, it is the practical building block: enough headroom for TensorRT-optimized models without jumping to a datacenter-class module on every node.

When a single node needs more concurrent streams or larger models, the same platform pattern extends to the NVIDIA Jetson Orin NX and the NVIDIA Jetson AGX Orin. When on-device generative or vision-language workloads outgrow the Orin family, the NVIDIA Jetson AGX Thor becomes the scale-up tier. The fleet operations model stays the same even as the hardware profile changes.

  • NVIDIA Jetson Orin Nano: reference worker node for cost-aware fleets
  • NVIDIA Jetson Orin NX: denser multi-stream or heavier per-node inference
  • NVIDIA Jetson AGX Orin: higher concurrency and larger models per device
  • NVIDIA Jetson AGX Thor: scale-up path for advanced on-device generative workloads

Software stack

The stack favors open, portable components. We avoid binding the fleet to a single cloud vendor control plane. Git remains the source of truth for deployment intent, and observability uses standards that work whether metrics land in a managed backend or a self-hosted one.

  • OS and drivers: JetPack on NVIDIA Jetson Orin Nano
  • Kubernetes: K3s server on a small control footprint, agents on each device
  • Runtime: containerd with pinned inference images
  • Model formats: TensorRT and ONNX Runtime for deployment flexibility
  • Delivery: GitOps promotion with environment-specific overlays
  • Observability: Prometheus metrics, structured logs, remote health checks
  • Updates: staged OTA rollouts with canary groups and automatic rollback

K3s on the NVIDIA Jetson Orin Nano

Each NVIDIA Jetson Orin Nano joins the fleet as a K3s agent. One or more small control-plane nodes run elsewhere: a hardened edge gateway, a regional site server, or a cloud-hosted K3s server depending on connectivity and isolation requirements.

We keep the per-device footprint small. System services, the inference workload, and a telemetry sidecar are the default baseline. Platform operators should be able to replace a device, re-run bootstrap, and return to desired state without hand-tuning the node.

  • Bootstrap installs K3s agent, runtime dependencies, and device identity
  • Node labels capture hardware profile, site, and rollout cohort
  • Taints and tolerations isolate control-plane or gateway roles where needed
  • Desired state is applied from Git, not manual kubectl changes in the field

Model deployment pattern

Models are built and optimized off-device, then promoted as versioned artifacts. On the NVIDIA Jetson Orin Nano, inference runs in a pinned container image with the model package and runtime configuration bundled together or mounted from a controlled cache.

Promotion flows through dev, staging, and production cohorts. A staging cohort might be a lab bench of NVIDIA Jetson Orin Nano devices. Production rollout starts with a canary site before wider release.

  • Build and optimize models in CI, not on the device
  • Publish immutable image tags and model package versions
  • Pin runtime configuration per site or device class
  • Validate latency, memory, and thermal behavior before fleet-wide promotion

OTA update strategy

Over-the-air updates are the highest-risk operation in an edge fleet. A bad container or model version can brick inference at every site simultaneously. The update model therefore defaults to conservative rollouts: canary nodes, health gates, and one-click rollback to the last known good release.

Bandwidth matters. Delta-friendly packaging, local artifact caches, and scheduled update windows prevent LTE or constrained factory networks from becoming the bottleneck.

  • Roll out to a canary cohort of NVIDIA Jetson Orin Nano devices first
  • Gate promotion on error rate, latency, and inference health checks
  • Pause or rollback automatically when thresholds are breached
  • Keep the previous image and model package available for fast recovery

Observability and remote operations

Fleet operations fail when the only diagnostic tool is a site visit. Each NVIDIA Jetson Orin Nano exports the signals operators actually need: node health, container restarts, inference latency, GPU utilization, temperature, and last successful sync.

Alerts should be actionable from a distance: restart a workload, cordon a bad node, or pin a device to the previous release without opening an SSH habit across the fleet.

  • Per-device health and inference SLO dashboards
  • Structured logs forwarded with backpressure-aware agents
  • Remote commands limited to approved operational playbooks
  • Runbooks for offline devices and delayed sync recovery

Security and provisioning

Edge fleets need identity before they need features. Each NVIDIA Jetson Orin Nano should receive a device identity, short-lived credentials, and bootstrap material through a controlled provisioning flow rather than shared passwords baked into images.

Secrets stay out of golden images. Configuration that varies by customer or site is injected at bootstrap or pulled from a secrets backend the device can reach after identity is established.

  • Unique device identity and enrollment at first boot
  • No shared long-lived credentials in base images
  • Encrypted transport for bootstrap and artifact delivery
  • Policy boundaries between cloud control plane and edge agents

What this lab includes

This reference is meant to prove how Sailbird approaches edge platform engineering: clear architecture, production-minded operations, and hardware choices explained with tradeoffs rather than hype.

  • Reference architecture for NVIDIA Jetson Orin Nano fleets with K3s
  • Operational model for deployment, OTA updates, and rollback
  • Stack choices with rationale and scale-up paths across the NVIDIA Jetson family
  • Checklist for production readiness reviews

Need this for your fleet?

We help teams stand up and operate edge inference platforms across NVIDIA Jetson Orin Nano fleets and larger Jetson devices, integrated with your cloud and hybrid stack.

Start a conversation

Ready to take your AI workloads to production?

Let's talk about your platform: cloud, hybrid, or edge. Start with a short, no-pressure conversation.