Kafka CreateDelegationToken Request Wire Format v2 — Binary Protocol Layout

What is CreateDelegationToken?

Issues short-lived tokens that replace static SASL credentials, suited for job schedulers and ephemeral services. Tokens can be distributed to workers via a secure channel, eliminating the need to share the actual Kerberos keytab or SCRAM password.

Schema
{
  "Renewers": [{
      "PrincipalType": string,
      "PrincipalName": string
  }],
  "MaxLifetimeMs": int64
}

Example
{
  "Renewers": [{
      "PrincipalType": "User:alice",
      "PrincipalName": "User:alice"
  }],
  "MaxLifetimeMs": 0
}