How long does a typical Kubernetes engagement take?
It depends on scope. A focused assessment and architecture review typically runs two to three weeks. A full deployment engagement — covering cluster build, workload migration, GitOps setup, and security hardening — usually spans six to twelve weeks. Managed operations engagements are ongoing and structured around agreed SLA tiers. We scope each engagement during discovery so you have a clear timeline before work begins.
Can you work with our existing cluster rather than starting from scratch?
Yes — and most of our clients come to us with clusters already in production. We start with an assessment of your current state: configuration, security posture, cost patterns, and operational gaps. From there we agree on a prioritised remediation and improvement plan. We work alongside your existing team rather than replacing what's already there.
Who from Netguru will work on our infrastructure?
You'll work with a dedicated team that typically includes a lead Kubernetes engineer, a DevOps or platform engineer, and a security specialist where compliance is in scope. For managed operations engagements, you'll have a named point of contact for escalations. We don't rotate generalist consultants onto client infrastructure — the engineers on your engagement are the ones with hands-on Kubernetes production experience.
How do you handle security and compliance requirements like SOC 2?
We treat security as part of the architecture, not a layer added at the end. Our hardening work covers RBAC design, network policies, OPA Gatekeeper for policy enforcement, secrets management, and container image scanning. Where SOC 2 is a requirement, we map our cluster controls to the relevant trust service criteria and produce documentation your auditors can work with. We can also advise on tooling that supports continuous compliance evidence collection.
What does Kubernetes FinOps consulting actually involve?
Cloud spend on Kubernetes is often invisible until it's already a problem. Our FinOps work makes it visible and actionable. We configure cluster autoscaling to match capacity to actual demand, set up namespace-level cost allocation so teams can see their own spend, and deploy Kubecost or OpenCost to give finance and platform stakeholders a shared view of where money goes. We also review resource requests and limits across workloads, which is often the fastest way to reduce waste without affecting performance.
Do you support multi-cloud or hybrid Kubernetes environments?
Yes. We work across EKS, GKE, AKS, and on-premises clusters, including air-gapped and hybrid configurations. For organisations running workloads across more than one platform, we design for consistency — shared GitOps workflows, unified observability, and a security policy model that applies across environments. We'll advise on where platform-specific features are worth using and where abstraction makes more sense for your long-term portability.


