When creating an HostedCluster with 'NodePort' service publishing strategy, the VMs (guest nodes) are trying to contact HCP services, such as ignition and oauth. If these services are colocated on the same infra node, they can't be reached via NodePort because the 'virt-launcher' NetworkPolicy is blocking it.
Need to explicitly add access to oauth and ignition-server-proxy pods so they can be reached from the virtual machines on the same node.

4.16.0

Always, if conditions are met

    1. As described above
    2.
    3.
    

VMs are not joining the cluster as nodes if the ignition server is running on the same infra node as the VM.

All VMs are joining the cluster as nodes, and the HostedCluster is eventually Completed and Available