adjust outputs

components/cluster/command/start.go

@@ -65,7 +65,8 @@ func newStartCmd() *cobra.Command {
 					log.Errorf("failed to set root password of TiDB database to '%s'", pwd)
 					return err
 				}
-				log.Warnf("The root password of TiDB database has been changed to '%s'.", color.HiYellowString(pwd))
+				log.Warnf("The root password of TiDB database has been changed.")
+				fmt.Printf("The new password is: '%s'.", color.HiYellowString(pwd)) // use fmt to avoid printing to audit log
 				log.Warnf("Copy and record it to somewhere safe, %s, and will not be stored.", color.HiRedString("it is only displayed once"))
 				log.Warnf("The generated password %s.", color.HiRedString("could NOT be get and shown again"))
 			}

pkg/cluster/spec/tidb.go

@@ -138,11 +138,6 @@ func (i *TiDBInstance) InitConfig(
 
 	enableTLS := topo.GlobalOptions.TLSEnabled
 	spec := i.InstanceSpec.(*TiDBSpec)
-	// check if the tidb version has --initialize-insecure support
-	hasSecbootSupport := false
-	if vc := semver.Compare(clusterVersion, "v5.3.0"); vc >= 0 {
-		hasSecbootSupport = true
-	}
 	cfg := scripts.
 		NewTiDBScript(i.GetHost(), paths.Deploy, paths.Log).
 		WithPort(spec.Port).
@@ -151,7 +146,7 @@ func (i *TiDBInstance) InitConfig(
 		AppendEndpoints(topo.Endpoints(deployUser)...).
 		WithListenHost(i.GetListenHost()).
 		WithAdvertiseAddr(spec.Host).
-		SupportSecureBootstrap(hasSecbootSupport)
+		SupportSecureBootstrap(semver.Compare(clusterVersion, "v5.3.0") >= 0)
 	fp := filepath.Join(paths.Cache, fmt.Sprintf("run_tidb_%s_%d.sh", i.GetHost(), i.GetPort()))
 	if err := cfg.ConfigToFile(fp); err != nil {
 		return err