chore: nwpu，1.2
diff --git a/project/nwpu/k8s-rancher/0.infras/0.0.0.infras-base.yaml b/project/nwpu/k8s-rancher/0.infras/0.0.0.infras-base.yaml
new file mode 100644
index 0000000..e137c9c
--- /dev/null
+++ b/project/nwpu/k8s-rancher/0.infras/0.0.0.infras-base.yaml
@@ -0,0 +1,18 @@
+# 0.0.0.infras-base.yaml
+
+####################################################
+# supwisdom harbor private docker registry
+####################################################
+---
+apiVersion: v1
+kind: Secret
+type: kubernetes.io/dockerconfigjson
+metadata:
+ namespace: base
+ name: harbor-registry
+data:
+ # 修改harbor仓库配置
+ # {"auths":{"harbor.supwisdom.com":{"password":"PWMgP85qiLFC","username":"rancher.devops"}}}
+ # 上一行的数据根据项目情况修改完毕后进行base64加密生成dockerconfigjson需要的数值
+ .dockerconfigjson: eyJhdXRocyI6eyJoYXJib3Iuc3Vwd2lzZG9tLmNvbSI6eyJwYXNzd29yZCI6IlBXTWdQODVxaUxGQyIsInVzZXJuYW1lIjoicmFuY2hlci5kZXZvcHMifX19
+
diff --git a/project/nwpu/k8s-rancher/0.infras/0.0.1.infras-mysql.yaml b/project/nwpu/k8s-rancher/0.infras/0.0.1.infras-mysql.yaml
new file mode 100644
index 0000000..fd62f7d
--- /dev/null
+++ b/project/nwpu/k8s-rancher/0.infras/0.0.1.infras-mysql.yaml
@@ -0,0 +1,102 @@
+# 0.0.1.infras-mysql.yaml
+
+# 此服务可选安装，用于MySQL数据库的管理提供Web端
+
+####################################################
+# mysql-server
+####################################################
+---
+apiVersion: v1
+kind: Service
+metadata:
+ namespace: base
+ name: mysql-server
+spec:
+ ports:
+ - name: tcp-mysql
+ port: 3306
+ protocol: TCP
+ targetPort: 3306
+---
+kind: Endpoints
+apiVersion: v1
+metadata:
+ namespace: base
+ name: mysql-server
+subsets:
+ - addresses:
+ # 修改实际MySQL服务器的IP地址
+ - ip: 172.30.104.82
+ ports:
+ - name: tcp-mysql
+ port: 3306
+ protocol: TCP
+
+
+####################################################
+# mysql-adminer
+####################################################
+---
+apiVersion: v1
+kind: Service
+metadata:
+ namespace: base
+ name: mysql-adminer
+spec:
+ ports:
+ - name: http
+ port: 8080
+ protocol: TCP
+ targetPort: http
+ selector:
+ app: mysql-adminer
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ namespace: base
+ name: mysql-adminer
+spec:
+ selector:
+ matchLabels:
+ app: mysql-adminer
+ replicas: 1
+ template:
+ metadata:
+ labels:
+ app: mysql-adminer
+ spec:
+ containers:
+ - name: mysql-adminer
+ image: adminer:4
+ imagePullPolicy: Always
+ ports:
+ - containerPort: 8080
+ name: http
+ env:
+ - name: ADMINER_DEFAULT_SERVER
+ value: mysql-server
+ resources:
+ requests:
+ memory: "512Mi"
+ limits:
+ memory: "512Mi"
+
+---
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+ name: mysql-adminer-ingress
+ namespace: base
+spec:
+ rules:
+ # 修改为学校的根域名
+ - host: mysql-adminer.paas.xxx.edu.cn
+ http:
+ paths:
+ - path: /
+ backend:
+ serviceName: mysql-adminer
+ servicePort: http
+
diff --git a/project/nwpu/k8s-rancher/0.infras/0.0.2.infras-sba.yaml b/project/nwpu/k8s-rancher/0.infras/0.0.2.infras-sba.yaml
new file mode 100644
index 0000000..783247d
--- /dev/null
+++ b/project/nwpu/k8s-rancher/0.infras/0.0.2.infras-sba.yaml
@@ -0,0 +1,112 @@
+# 0.0.2.infras-sba.yaml
+
+# 此服务可选安装，用于开发人员排查问题
+
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ namespace: base
+ name: spring-boot-admin-env
+data:
+ SPRING_BOOT_ADMIN_UI_PUBLIC_URL: /
+
+---
+apiVersion: v1
+kind: Secret
+metadata:
+ namespace: base
+ name: spring-boot-admin-env-secret
+data:
+ # sbaadmin
+ SBA_USERNAME: c2JhYWRtaW4=
+ # sbanimda
+ SBA_PASSWORD: c2JhbmltZGE=
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+ namespace: base
+ name: spring-boot-admin-svc
+ labels:
+ app: spring-boot-admin
+ needMonitor: 'true'
+spec:
+ ports:
+ - port: 8080
+ targetPort: http
+ protocol: TCP
+ name: http
+ - port: 6060
+ targetPort: http-metrics
+ protocol: TCP
+ name: http-metrics
+ selector:
+ app: spring-boot-admin
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ namespace: base
+ name: spring-boot-admin
+spec:
+ selector:
+ matchLabels:
+ app: spring-boot-admin
+ replicas: 1
+ template:
+ metadata:
+ labels:
+ app: spring-boot-admin
+ spec:
+ containers:
+ - name: spring-boot-admin
+ # 若使用了学校搭设的私有仓库，请修改
+ image: harbor.supwisdom.com/institute/spring-boot-admin:0.1.0-SNAPSHOT
+ imagePullPolicy: Always
+ ports:
+ - containerPort: 8080
+ name: http
+ - containerPort: 6060
+ name: http-metrics
+ envFrom:
+ - secretRef:
+ name: spring-boot-admin-env-secret
+ - configMapRef:
+ name: spring-boot-admin-env
+ resources:
+ requests:
+ cpu: 200m
+ memory: "256Mi"
+ limits:
+ cpu: 1000m
+ memory: "256Mi"
+ readinessProbe:
+ tcpSocket:
+ port: 8080
+ initialDelaySeconds: 10
+ periodSeconds: 5
+ timeoutSeconds: 5
+ successThreshold: 1
+ failureThreshold: 10
+ imagePullSecrets:
+ - name: harbor-registry
+
+---
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+ name: sba-ingress
+ namespace: base
+spec:
+ rules:
+ # 修改为学校的根域名
+ - host: sba.paas.xxx.edu.cn
+ http:
+ paths:
+ - path: /
+ backend:
+ serviceName: spring-boot-admin-svc
+ servicePort: http
diff --git a/project/nwpu/k8s-rancher/0.infras/0.0.x.infras-monitor.yaml b/project/nwpu/k8s-rancher/0.infras/0.0.x.infras-monitor.yaml
new file mode 100644
index 0000000..88c23c2
--- /dev/null
+++ b/project/nwpu/k8s-rancher/0.infras/0.0.x.infras-monitor.yaml
@@ -0,0 +1,21 @@
+#
+
+# 此配置可选安装，用于配置监控
+
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+ name: authx-service-monitor
+ namespace: cattle-prometheus
+spec:
+ selector:
+ matchLabels:
+ needMonitor: 'true'
+ namespaceSelector:
+ matchNames:
+ - user-data-service
+ - user-authorization-service
+ - cas-server
+ endpoints:
+ - port: http-metrics
+ path: /metrics
diff --git a/project/nwpu/k8s-rancher/0.infras/0.0.z.infras-tmp.yaml b/project/nwpu/k8s-rancher/0.infras/0.0.z.infras-tmp.yaml
new file mode 100644
index 0000000..7830e3d
--- /dev/null
+++ b/project/nwpu/k8s-rancher/0.infras/0.0.z.infras-tmp.yaml
@@ -0,0 +1,102 @@
+
+
+# 创建 namespace，如 tmp
+# 并修改以下配置中的 namespace
+
+# 创建 ConfigMap
+
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ # 修改namespace
+ namespace: tmp
+ name: txt
+data:
+ # 修改 key，value
+ # 其中，
+ # key 为 文件名
+ # value 为 文件内容
+ FWdJ6SLVde.txt: "70976dc348062015aaecd04c4fe393c6"
+
+
+
+# 部署nginx，并将 ConfigMap 挂载成文件
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+ # 修改namespace
+ namespace: tmp
+ name: txt-svc
+ labels:
+ app: txt-svc
+spec:
+ ports:
+ - port: 80
+ targetPort: http
+ protocol: TCP
+ name: http
+ selector:
+ app: txt
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ # 修改namespace
+ namespace: tmp
+ name: txt
+spec:
+ selector:
+ matchLabels:
+ app: txt
+ replicas: 1
+ template:
+ metadata:
+ labels:
+ app: txt
+ spec:
+ containers:
+ - name: txt-nginx
+ # 根据情况修改镜像地址
+ image: nginx:latest
+ ports:
+ - containerPort: 80
+ name: http
+ volumeMounts:
+ - name: txt
+ mountPath: /usr/share/nginx/html
+ readOnly: true
+ volumes:
+ - name: txt
+ configMap:
+ # 这个是 ConfigMap 的名称
+ name: txt
+ items:
+ # 将 ConfigMap 中某个 key 的 value 映射为 文件及文件内容
+ - key: FWdJ6SLVde.txt
+ path: FWdJ6SLVde.txt
+
+# 配置ingress
+
+---
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+ # 修改namespace
+ namespace: tmp
+ name: txt-ingress
+spec:
+ rules:
+ # 修改为学校的根域名
+ - host: txt.paas.xxx.edu.cn
+ http:
+ paths:
+ # 修改path，对应某个文件路径
+ - path: /FWdJ6SLVde.txt
+ backend:
+ serviceName: txt-svc
+ servicePort: http
+