ist there a solution to provision nodes in a private network,

rke

has the bastion option, but it doesn't seem to work from Rancher with RKE Provisioning.