master DC deployment fails: kinit: Cannot find KDC for realm "DOMAIN.ALT" while getting initial credentials

[asheplyakov]

fatal: [dc0]: FAILED! => {"attempts": 30, "changed": false, "cmd": "echo CENSORED | kinit administrator@DOMAIN.ALT", "delta": "0:00:00.015428", "end": "2018-07-20 08:40:43.373883", "msg": "non-zero return code", "rc": 1, "start": "2018-07-20 08:40:43.358455", "stderr": "kinit: Cannot find KDC for realm "DOMAIN.ALT" while getting initial credentials", "stderr_lines": ["kinit: Cannot find KDC for realm "DOMAIN.ALT" while getting initial credentials"], "stdout": "", "stdout_lines": []}

/etc/resolv.conf still points to a wrong nameserver (the one obtained via DHCP):

$ cat /etc/resolv.conf
# Generated by resolvconf
# Do not edit manually, use
# /etc/net/ifaces//resolv.conf instead.
nameserver 192.168.122.1

resolv.conf does exist in /etc/net/ifaces/lo and contains correct settings:

$ cat /etc/net/ifaces/lo/resolv.conf
# Ansible managed
domain domain.alt
search domain.alt
nameserver 192.168.122.71
nameserver 192.168.122.1