create a

Network

and use it in your cluster and db, or …?

ala https://github.com/pulumi/kubernetes-the-prod-way/blob/master/gcp/infrastructure/index.ts

or in the gke cluster with:

// enables ip aliasing
  ipAllocationPolicy: {
    createSubnetwork: true,
  },

I was using cloudsql proxy but looking for the new infrastructure setup with pulumi to use the new private networking to cloud sql https://cloud.google.com/blog/products/databases/introducing-private-networking-connection-for-cloud-sql

any thoughts/gists welcome

I have found a terraform sample for cloudsql https://www.terraform.io/docs/providers/google/r/sql_database_instance.html#private-ip-instance