diff --git a/project/newcapec-test/k8s-rancher/0.infras/0.0.0.infras-base.yaml b/project/newcapec-test/k8s-rancher/0.infras/0.0.0.infras-base.yaml
new file mode 100644
index 0000000..12b0340
--- /dev/null
+++ b/project/newcapec-test/k8s-rancher/0.infras/0.0.0.infras-base.yaml
@@ -0,0 +1,17 @@
+# 0.0.0.infras-base.yaml
+
+####################################################
+# supwisdom harbor private docker registry
+####################################################
+---
+apiVersion: v1
+kind: Secret
+type: kubernetes.io/dockerconfigjson
+metadata:
+  namespace: base
+  name: harbor-registry
+data:
+  # 修改harbor仓库配置
+  # {"auths":{"harbor.supwisdom.com":{"password":"PWMgP85qiLFC","username":"rancher.devops"}}}
+  .dockerconfigjson: eyJhdXRocyI6eyJoYXJib3Iuc3Vwd2lzZG9tLmNvbSI6eyJwYXNzd29yZCI6IlBXTWdQODVxaUxGQyIsInVzZXJuYW1lIjoicmFuY2hlci5kZXZvcHMifX19
+
diff --git a/project/newcapec-test/k8s-rancher/0.infras/0.0.1.infras-mysql.yaml b/project/newcapec-test/k8s-rancher/0.infras/0.0.1.infras-mysql.yaml
new file mode 100644
index 0000000..fd62f7d
--- /dev/null
+++ b/project/newcapec-test/k8s-rancher/0.infras/0.0.1.infras-mysql.yaml
@@ -0,0 +1,102 @@
+# 0.0.1.infras-mysql.yaml
+
+# 此服务可选安装，用于MySQL数据库的管理提供Web端
+
+####################################################
+# mysql-server
+####################################################
+---
+apiVersion: v1
+kind: Service
+metadata:
+  namespace: base
+  name: mysql-server
+spec:
+  ports:
+  - name: tcp-mysql
+    port: 3306
+    protocol: TCP
+    targetPort: 3306
+---
+kind: Endpoints
+apiVersion: v1
+metadata:
+  namespace: base
+  name: mysql-server
+subsets:
+  - addresses:
+      # 修改实际MySQL服务器的IP地址
+      - ip: 172.30.104.82
+    ports:
+      - name: tcp-mysql
+        port: 3306
+        protocol: TCP
+
+
+####################################################
+# mysql-adminer
+####################################################
+---
+apiVersion: v1
+kind: Service
+metadata:
+  namespace: base
+  name: mysql-adminer
+spec:
+  ports:
+  - name: http
+    port: 8080
+    protocol: TCP
+    targetPort: http
+  selector:
+    app: mysql-adminer
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  namespace: base
+  name: mysql-adminer
+spec:
+  selector:
+    matchLabels:
+      app: mysql-adminer
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: mysql-adminer
+    spec:
+      containers:
+      - name: mysql-adminer
+        image: adminer:4
+        imagePullPolicy: Always
+        ports:
+        - containerPort: 8080
+          name: http
+        env:
+        - name: ADMINER_DEFAULT_SERVER
+          value: mysql-server
+        resources:
+          requests:
+            memory: "512Mi"
+          limits:
+            memory: "512Mi"
+
+---
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+  name: mysql-adminer-ingress
+  namespace: base
+spec:
+  rules:
+  # 修改为学校的根域名
+  - host: mysql-adminer.paas.xxx.edu.cn
+    http:
+      paths:
+      - path: /
+        backend:
+          serviceName: mysql-adminer
+          servicePort: http
+
diff --git a/project/newcapec-test/k8s-rancher/0.infras/0.0.2.infras-sba.yaml b/project/newcapec-test/k8s-rancher/0.infras/0.0.2.infras-sba.yaml
new file mode 100644
index 0000000..70b3269
--- /dev/null
+++ b/project/newcapec-test/k8s-rancher/0.infras/0.0.2.infras-sba.yaml
@@ -0,0 +1,117 @@
+# 0.0.2.infras-sba.yaml
+
+# 此服务可选安装，用于开发人员排查问题
+
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  namespace: base
+  name: spring-boot-admin-env-secret
+data:
+  # sbaadmin
+  SBA_USERNAME: c2JhYWRtaW4=
+  # sbanimda
+  SBA_PASSWORD: c2JhbmltZGE=
+
+
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  namespace: base
+  name: spring-boot-admin-env
+data:
+  SERVER_PORT: "8080"
+
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  namespace: base
+  name: spring-boot-admin-svc
+  labels:
+    app: spring-boot-admin
+    needMonitor: 'true'
+spec:
+  ports:
+    - port: 8080
+      targetPort: http
+      protocol: TCP
+      name: http
+    - port: 6060
+      targetPort: http-metrics
+      protocol: TCP
+      name: http-metrics
+  selector:
+    app: spring-boot-admin
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  namespace: base
+  name: spring-boot-admin
+spec:
+  selector:
+    matchLabels:
+      app: spring-boot-admin
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: spring-boot-admin
+    spec:
+      containers:
+      - name: spring-boot-admin
+        # 若使用了学校搭设的私有仓库，请修改
+        image: harbor.supwisdom.com/institute/spring-boot-admin:0.1.0-SNAPSHOT
+        imagePullPolicy: Always
+        ports:
+        - containerPort: 8080
+          name: http
+        - containerPort: 6060
+          name: http-metrics
+        envFrom:
+        - configMapRef:
+            name: jvm-env
+        - secretRef:
+            name: datasource-env-secret
+        - secretRef:
+            name: spring-boot-admin-env-secret
+        - configMapRef:
+            name: spring-boot-admin-env
+        resources:
+          requests:
+            memory: "400Mi"
+          limits:
+            memory: "400Mi"
+        readinessProbe:
+          tcpSocket:
+            port: 8080
+          initialDelaySeconds: 10
+          periodSeconds: 5
+          timeoutSeconds: 5
+          successThreshold: 1
+          failureThreshold: 10
+      imagePullSecrets:
+        - name: harbor-registry
+
+
+---
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+  name: sba-ingress
+  namespace: base
+spec:
+  rules:
+  # 修改为学校的根域名
+  - host: sba.paas.xxx.edu.cn
+    http:
+      paths:
+      - path: /
+        backend:
+          serviceName: spring-boot-admin-svc
+          servicePort: http
+
diff --git a/project/newcapec-test/k8s-rancher/0.infras/0.0.x.infras-monitor.yaml b/project/newcapec-test/k8s-rancher/0.infras/0.0.x.infras-monitor.yaml
new file mode 100644
index 0000000..88c23c2
--- /dev/null
+++ b/project/newcapec-test/k8s-rancher/0.infras/0.0.x.infras-monitor.yaml
@@ -0,0 +1,21 @@
+# 
+
+# 此配置可选安装，用于配置监控
+
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: authx-service-monitor
+  namespace: cattle-prometheus
+spec:
+  selector:
+    matchLabels:
+      needMonitor: 'true'
+  namespaceSelector:
+    matchNames:
+    - user-data-service
+    - user-authorization-service
+    - cas-server
+  endpoints:
+  - port: http-metrics
+    path: /metrics