TL;DR
sql_database_instance.settings.ip_configuration has a field server_ca_mode to enable the alternative CA structures described in https://cloud.google.com/sql/docs/postgres/authorize-ssl, but this option is not exposed by the postgresql module.
Terraform Resources
Detailed design
Additional information
No response