This is happening in vSphere UPI, OSP UPI, and BYOR cases. Essentially any place that CSR approval isn't managed by a controller which can ensure signing happens immediately. This is a change in behavior of the kubelet so moving this to node. The blocked bug https://bugzilla.redhat.com/show_bug.cgi?id=1812787 has more discussion and history. We may still pursue the ansible changes because it's good defensive code but it shouldn't be necessary and it would only address the BYOR case not vSphere or OSP.
Does it dupe with Bug 1817382 - CSI volume plugin crashes when waiting for CSINode annotation. If yes, could you please help close it as a duplicate? Removing testblocker keyword since RHEL scaleup works on GCP/Baremetal.
Yes, I think that's correct to dupe with that bug. *** This bug has been marked as a duplicate of bug 1817382 ***