fix #1961, first char of a proxyadmin user password must not be a *

pkg/controller/pxc/secrets.go

@@ -126,6 +126,9 @@ func validatePasswords(secret *corev1.Secret) error {
 			if strings.ContainsAny(string(pass), ";:") {
 				return errors.New("invalid proxyadmin password, don't use ';' or ':'")
 			}
+			if strings.HasPrefix(string(pass), "*") {
+				return errors.New("invalid proxyadmin password, first character must not be '*'")
+			}
 		default:
 			continue
 		}