There appear to have been some known issues on this topic as well, resolved with the Debian 10 image.
https://github.com/splunk/splunk-ansible/pull/244
... View more
This looks like issues with the default.yaml and the passwords being distributed.
I'd recommend you check out the Operator instead, or hit me up on Slack and we can look closer.
https://github.com/splunk/splunk-operator/tree/master/docs
... View more