[backport-1.6]: need to pin CNPG postgres container image

A solution for issue #4395 (closed) needs to be backported to 1.6.x