Comment 17 for bug 1614211

It appears that with Mitaka on later, the following overrides are necessary to set the default domain for the admin user:

keystone_keystone_conf_overrides:
    resource:
        admin_project_name: admin
        admin_project_domain_name: Default

Using these, I was able to get playbooks to proceed. Could you give that a try and report back?