I understood from previous interviewers that you were using Kubernetes. If that is the case, then the only sure way to separate PAN data would be to have separate container orchestrators for the transmission of data. You shouldn't store data on the containers since they can be created and destroyed on a moments notice. Long term data storage on whatever platform, let's say AWS S3, can be accomplished by creating separate buckets, again- encrypting the data, securing access and logging, and data flow monitoring.