at one of a plurality of shared API processing services in a container cluster that implements a network policy manager shared between a plurality of tenants, receiving a configuration request from a particular tenant to modify a logical network configuration for the particular tenant, wherein configuration requests from the plurality of tenants are balanced across the plurality of shared API processing services; and

based on the received configuration request, posting a logical network configuration change to a configuration queue in the cluster, the configuration queue dedicated to the logical network of the particular tenant,

wherein services are instantiated separately in the container cluster for each tenant to distribute configuration changes from the respective configuration queues for the tenants to datacenters that implement the tenant logical networks;

wherein each respective configuration queue is managed by a respective dedicated queue service implemented on a respective Pod.