I figured it out, and SELinux is the difference. That is, SELinux on the HAProxy host (not a cluster node):
"SELinux only allows the web server to make outbound connections to a limited set of ports"
That is, you can't make an outbound http request to any port in the NodePort range (30000-32768) without opening that port on the "client",...
As there is no wildcard support, a workaround is to do a 2-step process to achieve the same:
kubectl exec ... to do make a new tmp directory and wildcard copy/move your desired transfer files into that dir on the container
use the cmd from @cookiedough above to copy all files from that dir on the container to your local