Docker's JSON file log rotation is currenly only volume-based (via the max-size and max-file options for --log-opt). However, for GDPR compliance we need time-based rotation, so that container logs are guaranteed to be deleted after e.g. 30 days. We could do the rotation ourselves, but unfortunately Docker does not support reopening log files (see #7333), which prevents this.

We use Docker via Kubernetes on GKE, and therefore have limited control over the Docker setup (so we would clearly need Google to update their node images as well).