For rancher to connect to private cluster in GCP when authorised network is enabled which ips should i whitelist there?

Rancher does not connect to the clusters, the rancher agent installed connects ‘back’ to rancher.

Yeah but rancher is throwing " failed to generate service account token 443 timeout " only when "enable authorised network" option is enabled in private GKE cluster

Sounds strange indeed… I’ve had many clusters with no ports open at all, and they have worked just fine.