__This may not be a true fix__ If you get `failed to communicate with cluster: error generating service account token: failed to fetch serviceAccountToken` when adding a GKE cluster to Rancher. Head into the cluster in GKE and enable `Control plane authorized networks` with the IP address of the Rancher node(s)