Skip to main content

01 / VKS migration services

Bring Kubernetes home to VMware Cloud Foundation

If you run VCF, you already own a full Kubernetes platform: vSphere Kubernetes Service (VKS). We move your Kubernetes workloads onto it. We prove it on one of your own workloads first, then migrate the rest in reversible waves.

Broadcom Expert Advantage

Partner

4–6 weeks

To one workload live

Rollback

At every gate

02 / Where you start

Three ways customers come to VKS

Most start from one of these situations. Each has its own plan, and its own business case.

Consolidate onto VKS

Sound familiar?
A second Kubernetes subscription (Rancher, OpenShift) running on top of VCF, an end-of-life platform such as TKGi, or unsupported DIY clusters.
What moves
Applications, images, pipelines and policies. The old platform is retired at the end.
Where the saving comes from
The subscription you no longer renew, and one platform to run instead of two.
  • Rancher
  • OpenShift
  • TKGi
  • DIY Kubernetes

Repatriate from public cloud

Sound familiar?
Always-on production clusters on EKS, AKS or GKE, paying elastic prices for predictable load.
What moves
The steady-state baseline. Burst workloads and those tied to cloud-native services can stay; this is not a cloud exit.
Where the saving comes from
The cloud bill for those clusters, using VCF capacity you already own.
  • EKS
  • AKS
  • GKE

Start fresh

Sound familiar?
No Kubernetes yet, but developers are asking for it, or running it in the shadows.
What we do
Stand up VKS with self-service namespaces, land one internal team in production, then publish it to your internal catalog.
Where the value comes from
Kubernetes on the platform and team you already have, with no second stack.
  • Greenfield
  • Self-service

03 / Why act now

Kubernetes is now production infrastructure, and it is getting more expensive to run twice

Every figure below comes from a named, dated survey, so you can check it.

Everyone

82%

of container users run Kubernetes in production, up from 66% in 2023.

CNCF Annual Cloud Native Survey, Jan 2026 · source

Consolidation

88%

reported a year-on-year rise in their total Kubernetes cost of ownership.

Spectro Cloud, State of Production Kubernetes 2025 (455 respondents) · source

Repatriation

29%

of cloud spend is estimated to be wasted, the first increase in five years.

Flexera 2026 State of the Cloud Report, Mar 2026 · source

Repatriation

50%

of enterprises have already moved some workloads from public to private cloud, up from 35% a year earlier.

Broadcom Private Cloud Outlook 2026 (1,800 IT decision-makers) · source

04 / Why VKS on VCF

One platform for VMs and containers, already in your licence

Already licensed

VKS is part of VMware Cloud Foundation, so there is no second Kubernetes subscription to buy or renew.

VMs and containers together

Kubernetes runs on the vSphere, storage and networking you already operate, managed by the team you already have.

Upstream-conformant

CNCF-conformant Kubernetes, so standard workloads move as they are and stay portable.

Built-in add-ons

Registry, GitOps, backup and policy services come packaged with VKS, with Avi, vDefend and Data Services Manager available as add-ons.

Advanced servicesAdd-ons; may be licensed separately

  • Avi Load Balancer
  • vDefend
  • Data Services Manager
  • Private AI Foundation

VKS add-onsPackaged with VKS

  • Harbor registry
  • Argo CD
  • Velero backup
  • Contour
  • OPA Gatekeeper

vSphere Kubernetes ServiceCNCF-conformant, on vSphere Supervisor

  • Self-service clusters
  • Fleet management
  • One upgrade path

VMware Cloud FoundationWhat you already run

  • vSphere
  • vSAN
  • NSX
  • VCF Operations
  • VCF Automation

05 / How we work

See it run on your workload before you commit

Each step earns the next. VKS runs alongside your current platform until you decide to move.

  1. Step 01

    Capability review

    What VKS in your VCF already covers, compared with what you run today.

    30 minutes · VCF and platform leads

  2. Step 02

    Discovery workshop

    Your platforms, candidate workloads and success criteria. Ends with an agreed pilot scope and sponsor.

    About 3 hours · infra, platform and app owners

  3. Step 03

    Assess, Plan, Pilot

    VKS activated on your VCF and one workload live, measured against the criteria you set.

    4–6 weeks · fixed scope

    Inside the pilot
  4. Step 04

    Migrate in waves

    The rest of your workloads move on your schedule, with rollback at every gate. The old platform is retired.

    Planned from each workload's readiness

First waves

Portable

Moves as it is: standard manifests and Helm charts.

Middle waves

Patchable

Small changes: ingress, storage classes, registry paths or policies.

Final waves

Convertible

Needs rework: platform-specific APIs, operators or stateful data.

Every workload is scored during the assessment, so the number of waves and the timeline reflect your applications, not a generic package. The pilot may be eligible for funding through your Broadcom services entitlement; ask us.

to one workload live on VKS
4–6 wks
reversible migration method
8 steps
portable, patchable, convertible
3 classes
your current platform keeps running during the pilot
Side by side

06 / Inside the pilot

Assess, Plan, Pilot: three phases, one measurable result

A fixed-scope pilot that activates VKS on the VCF you already run, moves one real workload onto it and measures the result against criteria you set.

Weeks 1–2 · Assess

Understand what you run

  • Application portfolio and dependency discovery
  • Suitability of each workload for VKS
  • Stakeholders and owners for each application

You get: every workload scored portable, patchable or convertible.

Week 3 · Plan

Design the pilot

  • Requirements and success criteria
  • Pilot design: namespaces, networking, storage, identity
  • Candidate application and prerequisites

You get: a signed-off pilot design and measurable criteria.

Weeks 4–6 · Pilot

Run it on VKS

  • VKS activation: namespaces, RBAC, policy
  • Migrate one pilot application, or deploy a reference app
  • Validate, measure and present the results

You get: one workload live and a results readout.

07 / Typical timeline

From workshop to Wave 1 in ten weeks

A typical plan. We adjust the weeks to your environment and change windows.

Discover
Assess, Plan, Pilot
Wave 1 readiness
W0
W1
W2
W3
W4
W5
W6
W7
W8
W9
Governance
Discovery workshop
Weekly status · steering every two weeks
Readout · Wave 1 proposal
Kickoff · scope and criteria
Pilot live
Platform
Assess
Plan
Pilot
Wave 1 preparation
Portfolio discovery · suitability
Pilot design
VKS activation · migration · measure
Wave 1 selection · readiness scoring
Your team
Enablement and knowledge transfer
Operating model for the migration
Roles, RBAC model, skills plan
Hands-on KT · monitoring and backup baseline
Day-2 runbooks · self-service namespaces

Week 0 is the discovery workshop. The pilot itself runs weeks 1–6; a reference-app pilot can finish in about four.

08 / Who is involved

A small team on each side

From your side

  • Sponsor, who owns the success criteria and the go decision
  • VCF or virtualisation lead, for capacity, networking and storage
  • Kubernetes platform lead, for the current platform and its tooling
  • Pilot application owner, for the workload and its acceptance

From AxelCore

  • VCF and VKS platform architect, who designs and activates VKS
  • Kubernetes architect, who maps and migrates the pilot workload
  • Engagement lead, who runs governance and the results readout
  • DevOps and application architects join as the workload needs them

09 / After the pilot

Crawl, walk, run

The pilot is the Crawl stage. The migration that follows uses the same eight-step, reversible method, wave by wave.

Crawl

De-risk the move

Consolidation

Stand up VKS next to the current platform, inventory workloads and dependencies, migrate one pilot workload.

Repatriation

Build a VKS landing zone on spare VCF capacity, capture the cloud cost baseline, move one steady-state workload.

  • 1 Assess
  • 2 Plan and map
  • 3 Image migration

Done when: one workload runs on VKS and is measured against the baseline.

Walk

Migrate in waves

Consolidation

Move stateless workloads in waves, lowest risk first, and repoint GitOps and pipelines to VKS.

Repatriation

Move always-on stateless workloads first, running hybrid with the cloud clusters.

  • 4 Workload migration
  • 5 Pilot and canary
  • 6 Traffic cutover

Done when: waves run on a schedule and GitOps targets VKS.

Run

VKS becomes the standard

Consolidation

Move the remaining stateful workloads, then decommission the old platform and let its subscription lapse.

Repatriation

Move data-bearing workloads, using Data Services Manager for databases, and shrink cloud clusters before the commitment renews.

  • 7 Validate and sign off
  • 8 VCF adoption

Done when: VKS is the governed default for new and steady-state workloads.

10 / What you get

At the end of the pilot, you have evidence, not a slide

A workload live on VKS

Running on the VCF you already own, measured against your own success criteria.

A scoped migration plan

Every workload scored portable, patchable or convertible, with Wave 1 chosen.

Your business case

Savings, migration effort and payback built from your numbers, not a generic model.

Stakeholders aligned

Sponsor, infrastructure, platform and application owners agree on the results.

A team that can run it

Knowledge transfer, Day-2 runbooks and a self-service namespace process.

11 / Why AxelCore

One team for the platform and the applications

Moving to VKS is part platform work and part application work. The same people who switch on VKS also move your applications, repoint your pipelines and hand over a platform your teams can run.

VCF and VKS platform architects

  • Supervisor, vSAN storage policies, NSX or vSphere networking
  • Cluster classes, namespaces, RBAC and quotas
  • Avi, vDefend, upgrades and Day-2 operations

Kubernetes architects

  • Migration from Rancher, OpenShift, TKGi, EKS, AKS, GKE and DIY
  • Workload discovery and dependency mapping
  • Blue/green and canary cutover with rollback

DevOps and GitOps architects

  • CI/CD repointed to VKS with minimal change for teams
  • GitOps with Argo CD and Helm; image signing and scanning
  • Self-service environments for developers

Application and data architects

  • Refactoring away from platform-specific APIs
  • Stateful workloads and databases with Data Services Manager
  • Observability, scaling and resilience on Kubernetes

Every engagement ends with a handover: hands-on knowledge transfer, Day-2 runbooks and a self-service namespace process, so your team runs VKS without us.

12 / The business case

Where the return comes from

We build your business case with you from a few numbers gathered in discovery, and show which of them decide the result.

Consolidation

Savings start at the renewal date of the subscription you no longer need.

  1. Annual subscription and support cost per Kubernetes platform
  2. Contract renewal date and reduction terms
  3. Workload count and complexity, which set the migration effort

Repatriation

Savings start with the always-on clusters, whose cloud cost is fixed and visible.

  1. Monthly cloud bill for steady-state clusters, including egress
  2. Cloud commitment size and end date
  3. Spare VCF capacity available to receive workloads

13 / Questions

What customers ask first

Is VKS really included in VCF?

VKS is part of VMware Cloud Foundation. Advanced services such as Avi Load Balancer, vDefend and Data Services Manager may be licensed separately. In the capability review we confirm what your own licence covers.

Do we have to adopt NSX?

No single network design is forced on you. VKS can run with NSX or with vSphere networking and a supported load balancer, and we design around the network you already run, including Cisco ACI environments.

Which platforms can you migrate from?

Rancher, OpenShift, TKGi, EKS, AKS, GKE and self-built Kubernetes. Each workload is classified as portable, patchable or convertible before anything moves.

Can we keep some workloads in public cloud?

Yes. Repatriation targets the always-on baseline. Burst workloads and those tied to cloud-native services can stay where they are.

Can our own team run VKS afterwards?

That is the goal of every engagement. We work alongside your engineers and end with knowledge transfer, Day-2 runbooks and a self-service process for new namespaces.

Get started

See VKS run one of your own workloads

Start with a 30-minute capability review. We show you what your VCF licence already covers and whether a pilot makes sense for you.

  1. 30-minute capability review
  2. Discovery workshop with your team
  3. Assess, Plan, Pilot in 4–6 weeks
  4. Migrate the rest in waves, on your schedule