[backport-1.7]: need to pin CNPG postgres container image

A solution for issue #4395 (closed) needs to be backported to 1.7.x