This message was deleted.

Rancher does not connect to the clusters, the rancher agent installed connects ‘back’ to rancher.

Yeah but rancher is throwing " failed to generate service account token 443 timeout " only when "enable authorised network" option is enabled in private GKE cluster

Sounds strange indeed… I’ve had many clusters with no ports open at all, and they have worked just fine.