easygcloud
SSH to a Compute Engine instance through Identity-Aware Proxy without a public IP
command
gcloud compute ssh INSTANCE_NAME --tunnel-through-iap --zone=ZONEalso accepted
gcloud compute ssh --tunnel-through-iapgcloud compute ssh INSTANCE_NAME --tunnel-through-iap