move non-secret PG env vars out of the secret block

Author: Anna Y

templates/deployment_backend.yaml

@@ -69,6 +69,10 @@ spec:
             value: {{ template "retool.postgresql.port" . }}
           - name: POSTGRES_DB
             value: {{ template "retool.postgresql.db" . }}
+          - name: POSTGRES_USER
+            value: {{ template "retool.postgresql.user" . }}
+          - name: POSTGRES_SSL_ENABLED
+            value: {{ template "retool.postgresql.ssl_enabled" . }}
           {{- if and (not .Values.externalSecrets.enabled) (not .Values.externalSecrets.externalSecretsOperator.enabled) }}
           - name: LICENSE_KEY
             valueFrom:
@@ -100,10 +104,6 @@ spec:
                 name: {{ template "retool.fullname" . }}
                 key: encryption-key
                 {{- end }}
-          - name: POSTGRES_USER
-            value: {{ template "retool.postgresql.user" . }}
-          - name: POSTGRES_SSL_ENABLED
-            value: {{ template "retool.postgresql.ssl_enabled" . }}
           - name: POSTGRES_PASSWORD
             valueFrom:
               secretKeyRef: