In the hdfs-site.xml file, set the following property, for security of ZooKeeper based fail-over controller. when NameNode HA is enabled:

<property>
    <name>ha.zookeeper.acl</name>
    <value>sasl:nn:rwcda</value>
</property>