/usr/lib/kafka/bin/kafka-delegation-tokens

This tool helps to create, renew, expire, or describe delegation tokens.
Option                         Description
------                         -----------
--bootstrap-server <String>    REQUIRED: server(s) to use for bootstrapping.
--command-config <String>      REQUIRED: A property file containing configs to
                                 be passed to Admin Client. Token management
                                 operations are allowed in secure mode only.
                                 This config file is used to pass security
                                 related configs.
--create                       Create a new delegation token. Use --renewer-
                                 principal option to pass renewer principals.
--describe                     Describe delegation tokens for the given
                                 principals. Use --owner-principal to pass
                                 owner/renewer principals. If --owner-principal
                                 option is not supplied, all the user-owned
                                 tokens and tokens where the user has Describe
                                 permissions will be returned.
--expire                       Expire delegation token. Use --expiry-time-
                                 period option to expire the token.
--expiry-time-period [Long]    Expiry time period in milliseconds. If the value
                                 is -1, then the token will get invalidated
                                 immediately.
--help                         Print usage information.
--hmac [String]                HMAC of the delegation token
--max-life-time-period [Long]  Max life period for the token in milliseconds.
                                 If the value is -1, then token max life time
                                 will default to the server side config value
                                 of (delegation.token.max.lifetime.ms).
--owner-principal [String]     owner is a Kafka principal. They should be in
                                 principalType:name format.
--renew                        Renew delegation token. Use --renew-time-period
                                 option to set renew time period.
--renew-time-period [Long]     Renew time period in milliseconds. If the value
                                 is -1, then the renew time period will default
                                 to the server side config value of (delegation.
                                 token.expiry.time.ms).
--renewer-principal [String]   renewer is a Kafka principal. They should be in
                                 principalType:name format.
--version                      Display Kafka version.