I assume you run cloud-sql-proxy as usual (for proper TLS and passwordless IAM authentication), and then it's just another postgresql port for you. Any tool like psql can connect to it.