我使用gcloud compute sshSSH 连接到我的实例，例如：
$ gcloud compute ssh shell-server --project=XXXXXXXXXXXXXXXX
No zone specified. Using zone [us-central1-f] for instance: [shell-server].
External IP address was not found; defaulting to using IAP tunneling.
Please choose from the available authentication methods:
1: Security code from Google Authenticator application
2: Voice or text message verification code
Enter the number for the authentication method to use: 1
Enter your one-time password: XXXXXX
username@shell-server ~ $
不幸的是，我每次都要2FA。我喜欢 2FA，但也许有一种方法可以让我每隔几个小时就提供一次？
更新：我跑了gcloud compute ssh --dry-run，它告诉你它正在运行什么命令：
/usr/bin/ssh \
-t \
-i /Users/kannan/.ssh/google_compute_engine \
-o CheckHostIP=no \
-o HostKeyAlias=compute.123123123123123123 \
-o IdentitiesOnly=yes \
-o StrictHostKeyChecking=no \
-o UserKnownHostsFile=/Users/kannan/.ssh/google_compute_known_hosts \
-o ProxyCommand='/usr/local/bin/python3 -S /Users/kannan/Software/google-cloud-sdk/lib/gcloud.py compute start-iap-tunnel shell-server %p --listen-on-stdin --project=XXXXXXXXXX --zone=us-central1-f --verbosity=warning' \
-o ProxyUseFdpass=no \
kannan_example_org@compute.123123123123123123
更新 2：我可以继续gcloud compute start-iap-tunnel在后台运行并将我的 SSH 配置为使用该隧道，但我希望有更自动化的东西，类似于 SSH 的便利性ControlMaster=auto。