VMware Kubernetes Service (VKS): Kubernetes Without the Complexity

One of the headline announcements at VMware Explore 2025 was the evolution of Kubernetes within VMware Cloud Foundation through the VMware Kubernetes Service (VKS).

For years, Kubernetes adoption has been hindered by complexity. Enterprises struggled with multi-cluster sprawl, uneven compliance, patching headaches, and the lack of operational expertise. VKS directly tackles these challenges by embedding Kubernetes as a fully managed, enterprise-grade service within vCF 9.0.

Why VKS Matters

Lifecycle Automation: VKS automates the full Kubernetes lifecycle—from cluster provisioning to patching, upgrades, and decommissioning—without requiring manual intervention. Consistency Across Environments: Whether running in a central data center, regional hub, or edge location, VKS provides a consistent operational model. Integrated Security: Security is enforced at the platform level, including RBAC, identity integration via Pinniped, network policies, and continuous compliance checks. Unified Developer Experience: Developers interact with Kubernetes the same way they would in the public cloud, but IT operations are unified and simplified under vCF.

Image suggestion: Screenshot or diagram of the VKS lifecycle workflow (cluster creation → monitoring → scaling → upgrade).

Developer Velocity at Scale

With VKS, developers can:

Spin up CNCF-compliant clusters directly through self-service portals or GitOps workflows. Use familiar toolchains such as VS Code, GitHub, Helm, and CI/CD pipelines without disruption. Seamlessly move between containerized workloads and traditional VMs on the same vCF platform.

Meanwhile, IT teams maintain centralized visibility and governance—ensuring developers move fast without creating compliance or security risks.

VKS in the Real World

Imagine a financial services company running trading apps and AI models side by side. With VKS:

Dev teams deploy microservices in Kubernetes for real-time transaction monitoring. Data teams spin up GPU-enabled clusters for AI-driven risk analysis. IT maintains audit trails, compliance enforcement, and disaster recovery policies automatically.

The result is not just agility, but confidence—something enterprises can’t afford to compromise.

Key Point on VKS: By embedding Kubernetes directly into vCF 9.0, VMware has eliminated the barriers to enterprise-scale adoption—turning what was once a fragmented, complex ecosystem into a streamlined, policy-driven service.

.

This unified approach reduces operational overhead while empowering organizations to focus on innovation, not integration.

Canonical – Ubuntu embedded into VCF

The partnership with Canonical, the company behind Ubuntu, was another major highlight. By directly embedding Ubuntu into vCF, VMware strengthens both performance and security for enterprise cloud-native environments.

Key benefits include:

Chiseled Containers: Minimal, purpose-built containers containing only essential components—reducing attack surface and improving security posture. vGPU-ready Infrastructure: AI/ML workloads can now run with native GPU drivers pre-integrated, making vCF the fastest path to AI-ready infrastructure. Long-Term Supported (LTS) Ubuntu Images: Enterprises get fully maintained, hardened Ubuntu releases supported by Canonical—eliminating patching and upgrade guesswork.

This collaboration ensures developers and IT teams benefit from the best of both worlds: VMware’s enterprise-grade infrastructure with Ubuntu’s cloud-native agility.

Empowering Developer Autonomy with IT Governance

One of the most important themes of the session was balance: developers need freedom to innovate, while IT needs control to maintain compliance and governance. VMware’s vCF delivers exactly that.

Robust multi-tenancy: Business units like legal, finance, engineering, and operations can each consume resources independently under central IT policy. Self-service consumption: Developers gain direct access to Kubernetes, VMs, storage, and networking resources without waiting for IT tickets. Policy-driven governance: IT admins can predefine guardrails while still enabling flexibility for developers.

Examples included services like:

Private AI as a Service – Secure access to AI images and toolchains, ready to deploy in private environments. Database-as-a-Service (DBaaS) – Pre-approved versions of Postgres, MySQL, and SQL Server delivered instantly with compliance controls.

Image suggestion: Demo screenshot showing developers launching Kubernetes + AI services from a self-service catalog.

This dual approach makes it possible for enterprises to move fast without breaking things—a recurring theme throughout the keynote.

Conclusion: A New Era of Cloud-Native Infrastructure

The message from VMware Explore was clear: Kubernetes isn’t just an add-on to vCF—it’s a first-class citizen. With seamless integration, CNCF compliance, Ubuntu collaboration, and AI-ready infrastructure, VMware is positioning vCF as the most secure, most complete, and easiest-to-manage private cloud platform for cloud-native workloads.

As organizations embrace containers, microservices, and AI-driven applications, vCF with Kubernetes and Ubuntu provides a future-proof foundation that scales without sacrificing security or governance.

Image suggestion: Closing keynote slide with “Cloud-Native at Scale” headline.

Key Takeaway: VMware is delivering a streamlined, enterprise-ready Kubernetes platform with vCF 9.0—uniting the developer’s need for speed with IT’s need for control.

Single host cluster for trial purpose. however this will then need to scale up to 3 node cluster to be fully supported by VMware.

For a limited time period, customer can take advantage of a new promotion that offers three hosts at the price of two. Promotion extended to Feb 1, 2019. ( too late for this)

No NSX no Problem, some users think that VMware Cloud on AWS can not be setup without having NSX this is simply not correct. We can setup same single host cluster without NSX.

Having NSX gives you the full SDDC stack functionally which you may not be able to leverage.

These are the options for connectivity:

Connection using the VPC provides low latency, high throughput with seamless connectivity to the customer environment .

Using the Direct Connect we can leverage NSX if you have already got it implement with in your SDDC environment.

Alternatively for SDDC customer who needs to connect to more then one VPC’s can create tunnels over AWS backbone infrastructure using an AWS-managed VPN based on the connectivity requirements. 

Remember when you open and account you will be signing up with VMware ( you will eventually get an aws  account created at the back end to be able to leverage all the aws products too). To sign up for an account you can follow the link below: httpss://cloud.vmware.com/vmc-aws