Assignment of containerized workloads to virtual private cloud subnets in a multi-tenant network

A system comprising:

• one or more processors;
• and
• at least one memory, the one or more processors and the at least one memory configured to:
• receive, at a container-based cluster, a subnet port custom resource specification to initiate creation of a subnet port object to assign a node to a subnet within a networking environment, wherein one or more containerized workloads are running on the node;
• in response to receiving the subnet port custom resource specification, create the subnet port object;
• and
• modify a state of the container-based cluster to match a first intended state of the container-based cluster at least specified in the subnet port object, wherein to modify the state comprises to assign the node to the subnet in the networking environment.

A non-transitory computer-readable medium comprising instructions that, when executed by one or more processors of a computing system, cause the computing system to perform operations for assigning containerized workloads to isolated network constructs within a networking environment associated with a container-based cluster, the operations comprising:

• receiving, in the container-based cluster, a subnet port custom resource specification to initiate creation of a subnet port object to assign a node to a subnet within the networking environment, wherein one or more containerized workloads are running on the node;
• in response to receiving the subnet port custom resource specification, creating the subnet port object;
• and
• modifying a state of the container-based cluster to match a first intended state of the container-based cluster at least specified in the subnet port object, wherein modifying the state comprises assigning the node to the subnet in the networking environment.