Does the move to gVisor pave the way to connecting CloudSQL instances? The removed limitations sound like they were road blocks.
See https://cloud.google.com/appengine/docs/standard/go111/using... and scroll way down to the sample code.
either you whitelisted your ips or you used the proxy (which go appengine could already use).
so with go you just needed to use https://github.com/GoogleCloudPlatform/cloudsql-proxy which means you just need to change the query string.
however a new feature is emerging where you can have a private ip that is connected to your internal services, however it is still a beta feature.
Source: myself, but not a googler, just a regular user
(GCP Gopher)