Xiang,
to verify that it's really the same issue, could you run following commands on the host with the failed installation:
$ kadmin.local -q addprinc -randkey ldap/cisco-c210-01.testrelm.test -x ipa-setup-override-restrictions
$ systemctl status kadmin.service
$ systemctl restart kadmin.service
If it's the bug, we should see some of these outputs:
1. after kadmin.local:
kadmin.local: Unsupported argument "ipa-setup-override-restrictions" for db2 while initializing kadmin.local interface
2. after systemctl start kadmin.service:
kadmind: kadmind: Database module does not match KDC version while initializing, aborting
Created attachment 1070243 [details] ipaserver-install.log