ntp servers blocked. Can't deploy undercloud with oooq due to wrong NTP configuration

I'm using latest master oooq, this implies containerized undercloud.

I'm trying to use a custom NTP server via:

undercloud_undercloud_ntp_servers: clock.corp.redhat.com

My command is super simple:

bash quickstart.sh \
    -E ntp.yml \
    --clean \
    --tags all \
    --teardown all \
    --release master \
    --no-clone \
    $VIRTHOST

ntp.yml just has the above ntp server override.

This fails every time with:

TASK [Ensure system is NTP time synced] ****************************************",
2018-07-16 13:21:14 | "fatal: [localhost]: FAILED! => {\"changed\": true, \"cmd\": [\"ntpdate\", \"-u\", \"clock.corp.redhat.com\"], \"delta\": \"0:00:08.753723\", \"end\": \"2018-07-16 13:21:13.405179\", \"msg\": \"non-zero return code\", \"rc\": 1, \"start\": \"2018-07-16 13:21:04.651456\", \"stderr\": \"16 Jul 13:21:13 ntpdate[6349]: no server suitable for synchronization found\", \"stderr_lines\": [\"16 Jul 13:21:13 ntpdate[6349]: no server suitable for synchronization found\"], \"stdout\": \"\", \"stdout_lines\": []}",
2018-07-16 13:21:14 | "\tto retry, use: --limit @/var/lib/heat-config/heat-config-ansible/ea74d1a0-23a6-4ae1-93dc-cff8f38e4e07_playbook.retry",
2018-07-16 13:21:14 | "",
2018-07-16 13:21:14 | "PLAY RECAP *********************************************************************",
2018-07-16 13:21:14 | "localhost : ok=44 changed=26 unreachable=0 failed=1 ",
2018-07-16 13:21:14 | "",
2018-07-16 13:21:14 | "",
2018-07-16 13:21:14 | "[2018-07-16 13:21:13,464] (heat-config) [ERROR] Error running /var/lib/heat-config/heat-config-ansible/ea74d1a0-23a6-4ae1-93dc-cff8f38e4e07_playbook.yaml. [2]",
2018-07-16 13:21:14 | "",
2018-07-16 13:21:14 | "",
2018-07-16 13:21:14 | "[2018-07-16 13:21:13,467] (heat-config) [INFO] Completed /usr/libexec/heat-config/hooks/ansible",
2018-07-16 13:21:14 | "[2018-07-16 13:21:13,468] (heat-config) [DEBUG] Running heat-config-notify /var/lib/heat-config/deployed/ea74d1a0-23a6-4ae1-93dc-cff8f38e4e07.json < /var/lib/heat-config/deployed/ea74d1a0-23a6-4ae1-93dc-cff8f38e4e07.notify.json",
2018-07-16 13:21:14 | "[2018-07-16 13:21:14,736] (heat-config) [INFO] ",
2018-07-16 13:21:14 | "[2018-07-16 13:21:14,737] (heat-config) [DEBUG] "
2018-07-16 13:21:14 | ]
2018-07-16 13:21:14 | },
2018-07-16 13:21:14 | {
2018-07-16 13:21:14 | "status_code": "2"
2018-07-16 13:21:14 | }
2018-07-16 13:21:14 | ]
2018-07-16 13:21:14 | }
2018-07-16 13:21:14 |
2018-07-16 13:21:14 | NO MORE HOSTS LEFT *************************************************************
2018-07-16 13:21:14 | to retry, use: --limit @/home/stack/undercloud-ansible-jQ3_na/deploy_steps_playbook.retry
2018-07-16 13:21:14 |
2018-07-16 13:21:14 | PLAY RECAP *********************************************************************
2018-07-16 13:21:14 | undercloud : ok=71 changed=24 unreachable=0 failed=1
2018-07-16 13:21:14 |
2018-07-16 13:21:15 | Install artifact is located at /home/stack/undercloud-install-20180716132114.tar.bzip2
2018-07-16 13:21:15 |
2018-07-16 13:21:15 | ##########################################################
2018-07-16 13:21:15 | containerized undercloud deployment failed.

-----------

The undercloud can't reach clock.corp.redhat.com. The virthost can.

The undercloud can't reach pool.ntp.org, and neither can the virthost.