Ubuntu 18.04 and later are a bit messier to domain join thanks to systemd-resolved. By default kerberos looks at /etc/resolv.conf for its DNS information, and by default systemd-resolved symlinks /etc/resolv.conf to /run/systemd/resolve/stub-resolv.conf which very helpfully provides localhost as the nameserver: