@fdgitconsulting there are a couple of things to review here,
Firstly, I see you are using admin certificate for node to node communication, perhaps that’s just named admin and not an actual admin certificate, which cannot be used for this purpose.
Can you confirm the cluster forms as expected, with the correct number of nodes.
Secondly, config.yml file, in basic_internal_auth_domain please set challenge flag to false.
Lastly, are you able to capture the jwt token and examine what is being passed? Good example was provided here
Also, for better clarity, when posting, please put the configuration snippets in code blocks.