**What happened:**

My password for external Postgres RDS contained '@123' at the end which got appended to the host of the DB due to some bug. One can notice in the logs, the DB_HOST has an unwanted 123@ in the front of it  DB_HOST=**123@**{{postgres_host}}. I removed '@' character from the password and it worked fine. 

I am using the latest image of apache/airflow and using the official helm chart.

```
kc logs airflow-run-airflow-migrations-xxx
BACKEND=postgresql
DB_HOST=123@{{postgres_host}}
DB_PORT=5432
....................
ERROR! Maximum number of retries (20) reached.

Last check result:
$ run_nc '123@{{postgres_host}}' '5432'
Traceback (most recent call last):
  File "<string>", line 1, in <module>
socket.gaierror: [Errno -2] Name or service not known
Can't parse  as an IP address
```

**Steps to reproduce:**
One can easily reproduce this by using a password that contains the '@' character in it.
```
data:
  metadataConnection:
    user: {{postgres_airflow_username}}
    pass: {{postgres_airflow_password}}
    protocol: postgresql  
    host: {{postgres_host}}
    port: 5432
    db: {{postgres_airflow_dbname}}
```

**Expected behavior:**
Migrations should run irrespective if the Postgres password contains an @ character or not.
chart/tests/test_redis.py
self, k8s_obj_by_key, expected_password_match: Optional[str], expected_broker_url_match: Optional[str]
    ):
        if expected_password_match is not None:
            redis_password_in_password_secret = self.get_redis_password_in_password_secret(k8s_obj_by_key)
            assert re.search(expected_password_match, redis_password_in_password_secret)
        else:
            assert REDIS_OBJECTS["SECRET_PASSWORD"] not in k8s_obj_by_key.keys()
        if expected_broker_url_match is not None:
            
            broker_url_in_broker_url_secret = self.get_broker_url_in_broker_url_secret(k8s_obj_by_key)
            assert re.search(expected_broker_url_match, broker_url_in_broker_url_secret)
        else:
            assert REDIS_OBJECTS["SECRET_BROKER_URL"] not in k8s_obj_by_key.keys()
    def assert_broker_url_env(
        self, k8s_obj_by_key, expected_broker_url_secret_name=REDIS_OBJECTS["SECRET_BROKER_URL"][1]
    ):
        broker_url_secret_in_scheduler = self.get_broker_url_secret_in_deployment(
            k8s_obj_by_key, "StatefulSet", "worker"
        )
        assert broker_url_secret_in_scheduler == expected_broker_url_secret_name
        broker_url_secret_in_worker = self.get_broker_url_secret_in_deployment(
            k8s_obj_by_key, "Deployment", "scheduler"
        )
        assert broker_url_secret_in_worker == expected_broker_url_secret_name
    @parameterized.expand(CELERY_EXECUTORS_PARAMS)
    def test_redis_by_chart_default(self, executor):