After purge_after_days, defaults to a 14, forcibly remove
any rotated and compressed logs of containerized services
in /var/log/containers. This overrides any related
containerized logrotate configuration used for
containerized services.
Allow to alter rotation interval for log files managed
via containerized logrotate. Defaults to 'daily'
and rotate 14 (days).
Use sharedscripts to clean up files in the postrotate
script only once.
Additionally, to enforce GDPR compliance of log files
in /var/log/containers, put them under logrotate management
(minsize 1) and always compress. Prohibit the size option
as it does not honor time-based contstraints required by
GDPR. Forcibly remove all files but those rotated and
compressed logs, via the postscript section.
Reviewed: https:/ /review. openstack. org/601554 /git.openstack. org/cgit/ openstack/ puppet- tripleo/ commit/ ?id=13b3166e420 a58be92c14d3091 0cbc8650053f41
Committed: https:/
Submitter: Zuul
Branch: stable/pike
commit 13b3166e420a58b e92c14d30910cbc 8650053f41
Author: Bogdan Dobrelya <email address hidden>
Date: Thu May 17 12:53:03 2018 +0200
Force GDPR compliance of containers logs
After purge_after_days, defaults to a 14, forcibly remove containers. This overrides any related
any rotated and compressed logs of containerized services
in /var/log/
containerized logrotate configuration used for
containerized services.
Allow to alter rotation interval for log files managed
via containerized logrotate. Defaults to 'daily'
and rotate 14 (days).
Use sharedscripts to clean up files in the postrotate
script only once.
Additionally, to enforce GDPR compliance of log files containers, put them under logrotate management
in /var/log/
(minsize 1) and always compress. Prohibit the size option
as it does not honor time-based contstraints required by
GDPR. Forcibly remove all files but those rotated and
compressed logs, via the postscript section.
Partial-bug: #1771543
Change-Id: Id8e4717a5ecda5 3bc9cd39f1c2efa a80b56bd45e 7313942b4d83957 7d3ccd072d)
Signed-off-by: Bogdan Dobrelya <email address hidden>
(cherry picked from commit e13654504adb93f