I recently had a kubernetes cluster crash because /var/log/syslog and /var/log/daemon.log got very large (totaling over 14 Gb). I see that the logging specifications are set up in /etc/logrotate.d/rsyslog, but I could not find a kops configuration setting that would limit these sizes. Is there such a configuration? Or is there a better way to limit the size of these logs? Thanks for any help in advance!
This would probably make for a nice feature request in the kubernetes/kops repository.
You can workaround this for now with rsyslog log caps.