Use the "Google Cloud SQL - PostgreSQL" driver, which has the cloud_sql_proxy equivalent jdbc socket factory configured already. Then set enableIamAuth = true in the connection driver properties.

Note that this takes care of authentication using IAM federation. I don't think this flag has anything to do with private IP access. Not sure if using the google driver allows this or not. Certainly you connect to the DB by name instead of by IP.