Access denied for user 'debezium'@'%' (using password: YES) — REPLICATION CLIENT command denied

Root cause

The MySQL user configured in the connector lacks the REPLICATION CLIENT and REPLICATION SLAVE privileges required to read the binlog.

How to fix

1. Grant required privileges:
   GRANT SELECT, RELOAD, SHOW DATABASES, REPLICATION SLAVE, REPLICATION CLIENT ON *.* TO 'debezium'@'%';
2. Flush privileges:
   FLUSH PRIVILEGES;
3. Verify granted privileges:
   SHOW GRANTS FOR 'debezium'@'%';