RKE network error on creating a serviceaccount

I get this error every time I try to deploy to a rancher 2.x cluster which is behind a bastion server, On a previous build I solved this error but like an idiot I didnt write down how I did it.

Its probably something really dumb that im missing but from what im reading in the error RKE is trying to contact directly and possibly skipping the bastion ?

INFO[0305] [authz] Creating rke-job-deployer ServiceAccount

[0480] Failed to apply the ServiceAccount needed for job execution: Post net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)