During CI we deploy a replica without any trouble.

I suppose this is because we are doing the action just after master is deployed. But when you deploy a replica with some delay (tested few weeks), we have an error message about network issue. And the installed process is never successful.

But the root cause is not network. When a user is created the password is set as expired. So, it is impossible to get a kerberos TGT during the replica deployment process.