"TestBlocker" flag removed. The issue is now for AWS public images only when root was the same filesystem as boot. The rhel node could startup, only the fips compliant check not executed. No such issue with GCE, Openstack, Vsphere.
There's no RHCOS bug here. I think we should just point anyone hitting this at https://bugzilla.redhat.com/show_bug.cgi?id=1787270