May I ask what kind of production environments you have in mind? Are these large-scale FAANG-style deployments or something else?
Anyway, GPDR requires you to have a purpose for any log that contains any IP address. Keeping logs for undefined purposes and unlimited time frames is not ok any more.