Need to disable SELinux - definitely on the controller nodes for the nginx reverse proxy for the health monitors
 - this can probably be worked around, but I haven't had a look at the SELinux violations.