Changing password as it gets masked across logs and causes issues

[khalidmammadov]

Current postgres password gets masked during DB engine init and added to secret list and masked whenever mentioned in the logs.
As it currently set to "airflow" it's converted to *** everywhere airflow is printed in the logs including folder path etc.

Currently, this will fix one of the failing test cases from quarantined list that expects "airflow" path in the log but gets ***.
But this also should be noted for future similar cases as to not to name password as "airflow" or similar reserved/widely used words as they will be masked in the logs.

---

^ Add meaningful description above

Read the Pull Request Guidelines for more information.
In case of fundamental code change, Airflow Improvement Proposal (AIP) is needed.
In case of a new dependency, check compliance with the ASF 3rd Party License Policy.
In case of backwards incompatible changes please leave a note in UPDATING.md.

[mik-laj]

this will fix one of the failing test cases from quarantined list

Do you remember which one?

[khalidmammadov]

This one: tests.cli.commands.test_task_command.TestLogsfromTaskRunCommand
It asserts for this value:
"INFO - Running: ['airflow', 'tasks', 'run'...."
but gets
"INFO - Running: ['***', 'tasks', 'run'..."

[potiuk]

Should we unquarantine the quarantined test as well ?

[khalidmammadov]

@potiuk This PR tries to fix only 1 of 5 failing test cases within the suite and whole suite is marked as @pytest.mark.quarantined.
I didnt have chance to take a look to others so I think we can leave quarantined marker until others are also fixed.

That aside, although I am working on getting password changed everywhere it's used (which is quite a lot) I am not sure if it's ok from community perspective to do it and if they would prefer to keep as is i.e. "airflow"? In which case masking replaces airflow word with *** everywhere in the logs which will be problem I think all the time

[potiuk]

I see. Makes sense. I think it makes sense to change the password if it is in unit tests

[khalidmammadov]

Closing in favor of this: #19858