diff --git a/deploy-manifests/k8s-rancher/1.authx-service/1.thirdparty-agent-service/0.thirdparty-agent-service-base.yaml b/deploy-manifests/k8s-rancher/1.authx-service/1.thirdparty-agent-service/0.thirdparty-agent-service-base.yaml
new file mode 100644
index 0000000..b6a4f77
--- /dev/null
+++ b/deploy-manifests/k8s-rancher/1.authx-service/1.thirdparty-agent-service/0.thirdparty-agent-service-base.yaml
@@ -0,0 +1,16 @@
+# thirdparty-agent-service-base.yaml
+
+####################################################
+# supwisdom harbor private docker registry
+####################################################
+---
+apiVersion: v1
+kind: Secret
+type: kubernetes.io/dockerconfigjson
+metadata:
+  namespace: thirdparty-agent-service
+  name: harbor-registry
+data:
+  # 修改harbor仓库配置，并使用 base64 工具进行编码
+  # {"auths":{"harbor.supwisdom.com":{"password":"PWMgP85qiLFC","username":"rancher.devops"}}}
+  .dockerconfigjson: eyJhdXRocyI6eyJoYXJib3Iuc3Vwd2lzZG9tLmNvbSI6eyJwYXNzd29yZCI6IlBXTWdQODVxaUxGQyIsInVzZXJuYW1lIjoicmFuY2hlci5kZXZvcHMifX19
diff --git a/deploy-manifests/k8s-rancher/1.authx-service/1.thirdparty-agent-service/1.thirdparty-agent-service-env.yaml b/deploy-manifests/k8s-rancher/1.authx-service/1.thirdparty-agent-service/1.thirdparty-agent-service-env.yaml
new file mode 100644
index 0000000..b568c8a
--- /dev/null
+++ b/deploy-manifests/k8s-rancher/1.authx-service/1.thirdparty-agent-service/1.thirdparty-agent-service-env.yaml
@@ -0,0 +1,26 @@
+# thirdparty-agent-service-env.yaml
+
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  namespace: thirdparty-agent-service
+  name: jvm-env
+data:
+  MAX_RAM_PERCENTAGE: "75.0"
+
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  namespace: thirdparty-agent-service
+  name: datasource-env-secret
+type: Opaque
+data:
+  # jdbc:mysql://mysql-server.authx-service.svc.cluster.local:3306/agent_service?serverTimezone=Asia/Shanghai
+  SPRING_DATASOURCE_URL: amRiYzpteXNxbDovL215c3FsLXNlcnZlci5hdXRoeC1zZXJ2aWNlLnN2Yy5jbHVzdGVyLmxvY2FsOjMzMDYvYWdlbnRfc2VydmljZT9zZXJ2ZXJUaW1lem9uZT1Bc2lhL1NoYW5naGFp
+  # agent_service
+  SPRING_DATASOURCE_USERNAME: YWdlbnRfc2VydmljZQ==
+  # 修改为实际的数据库密码，并使用 base64 工具进行编码
+  # kingstar
+  SPRING_DATASOURCE_PASSWORD: a2luZ3N0YXI=
diff --git a/deploy-manifests/k8s-rancher/1.authx-service/1.thirdparty-agent-service/4.2.thirdparty-agent-service.yaml b/deploy-manifests/k8s-rancher/1.authx-service/1.thirdparty-agent-service/4.2.thirdparty-agent-service.yaml
new file mode 100644
index 0000000..9d68a04
--- /dev/null
+++ b/deploy-manifests/k8s-rancher/1.authx-service/1.thirdparty-agent-service/4.2.thirdparty-agent-service.yaml
@@ -0,0 +1,149 @@
+# thirdparty-agent-service.yaml
+
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  namespace: thirdparty-agent-service
+  name: agent-service-env
+data:
+  SERVER_PORT: "8080"
+  SSL_ENABLED: "false"
+  #SSL_KEYSTORE_FILE: file:/certs/server/server.keystore
+  #SSL_TRUSTSTORE_FILE: file:/certs/server/server.truststore
+
+  SERVER_MAXHTTPHEADERSIZE: "10240"
+
+  # SERVER_TOMCAT_ACCEPT_COUNT: "1000"
+  # SERVER_TOMCAT_MAX_CONNECTIONS: "10000"
+  # SERVER_TOMCAT_MAX_THREADS: "1000"
+  # SERVER_TOMCAT_MIN_SPARE_THREADS: "10"
+
+  ## file-db
+  FILE_DB_AUTOCONFIGURE_ENABLED: "false"
+
+  ## file-minio
+  FILE_MINIO_AUTOCONFIGURE_ENABLED: "true"
+  FILE_MINIO_ENDPOINT: http://minio-svc.base.svc.cluster.local:9000
+  # FILE_MINIO_ACCESSKEY: ""
+  # FILE_MINIO_SECRETKEY: ""
+
+  ## mail-console
+  MAIL_CONSOLE_AUTOCONFIGURE_ENABLED: "true"
+
+  # 若须对接邮件服务，须提供 SMTP 帐号
+  ## mail-smtp
+  MAIL_SMTP_AUTOCONFIGURE_ENABLED: "false"
+  MAIL_SMTP_HOST: smtp.mxhichina.com
+  MAIL_SMTP_PORT: "25"
+  MAIL_SMTP_SECURE_MODE: NONE
+  MAIL_SMTP_USERNAME: security.institute@supwisdom.com
+  MAIL_SMTP_PASSWORD: Security2019
+  MAIL_SMTP_FROM: security.institute@supwisdom.com
+  MAIL_SMTP_FROM_PERSONAL: 智慧校园
+
+  ## sms-console
+  SMS_CONSOLE_AUTOCONFIGURE_ENABLED: "true"
+
+  # 若须使用阿里云短信服务，须提供帐号
+  ## sms-aliyun
+  SMS_ALIYUN_AUTOCONFIGURE_ENABLED: "false"
+  SMS_ALIYUN_REGION_ID: cn-hangzhou
+  SMS_ALIYUN_ACCESS_KEY_ID: ""
+  SMS_ALIYUN_ACCESS_SECRET: ""
+
+  # 若须对接sms 接口，须进行二开定制
+
+
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  namespace: thirdparty-agent-service
+  name: agent-service-env-secret
+type: Opaque
+data:
+  #SSL_KEYSTORE_PASSWORD: ""
+  #SSL_TRUSTSTORE_PASSWORD: ""
+
+  ## file-minio
+  FILE_MINIO_ACCESSKEY: MXk4TkA4UkBhXzJ1
+  # 1y8N@8R@a_2u
+  FILE_MINIO_SECRETKEY: OHB4bEllOSNsTjdR
+  # 8pxlIe9#lN7Q
+
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  namespace: thirdparty-agent-service
+  name: agent-service-svc
+  labels:
+    app: agent-service
+    needMonitor: 'true'
+spec:
+  ports:
+    - port: 8080
+      targetPort: http
+      protocol: TCP
+      name: http
+    - port: 6060
+      targetPort: http-metrics
+      protocol: TCP
+      name: http-metrics
+  selector:
+    app: agent-service
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  namespace: thirdparty-agent-service
+  name: agent-service
+spec:
+  selector:
+    matchLabels:
+      app: agent-service
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: agent-service
+    spec:
+      containers:
+      - name: agent-service
+        # 若使用了学校搭设的私有仓库，请修改
+        image: harbor.supwisdom.com/thirdparty-agent-service/agent-service:0.0.1-SNAPSHOT
+        imagePullPolicy: Always
+        ports:
+        - containerPort: 8080
+          name: http
+        - containerPort: 6060
+          name: http-metrics
+        envFrom:
+        - configMapRef:
+            name: jvm-env
+        - secretRef:
+            name: datasource-env-secret
+        - secretRef:
+            name: agent-service-env-secret
+        - configMapRef:
+            name: agent-service-env
+        resources:
+          requests:
+            memory: "512Mi"
+          limits:
+            memory: "512Mi"
+        readinessProbe:
+          httpGet:
+            path: /actuator/health
+            port: 8080
+          initialDelaySeconds: 20
+          periodSeconds: 5
+          timeoutSeconds: 5
+          successThreshold: 1
+          failureThreshold: 10
+      imagePullSecrets:
+        - name: harbor-registry
+