chore: 郑州大学部署脚本
diff --git a/project/zzu/k8s-rancher/0.infras/0.0.0.infras-base.yaml b/project/zzu/k8s-rancher/0.infras/0.0.0.infras-base.yaml
new file mode 100644
index 0000000..12b0340
--- /dev/null
+++ b/project/zzu/k8s-rancher/0.infras/0.0.0.infras-base.yaml
@@ -0,0 +1,17 @@
+# 0.0.0.infras-base.yaml
+
+####################################################
+# supwisdom harbor private docker registry
+####################################################
+---
+apiVersion: v1
+kind: Secret
+type: kubernetes.io/dockerconfigjson
+metadata:
+ namespace: base
+ name: harbor-registry
+data:
+ # 修改harbor仓库配置
+ # {"auths":{"harbor.supwisdom.com":{"password":"PWMgP85qiLFC","username":"rancher.devops"}}}
+ .dockerconfigjson: eyJhdXRocyI6eyJoYXJib3Iuc3Vwd2lzZG9tLmNvbSI6eyJwYXNzd29yZCI6IlBXTWdQODVxaUxGQyIsInVzZXJuYW1lIjoicmFuY2hlci5kZXZvcHMifX19
+
diff --git a/project/zzu/k8s-rancher/0.infras/0.0.1.infras-mysql.yaml b/project/zzu/k8s-rancher/0.infras/0.0.1.infras-mysql.yaml
new file mode 100644
index 0000000..fd62f7d
--- /dev/null
+++ b/project/zzu/k8s-rancher/0.infras/0.0.1.infras-mysql.yaml
@@ -0,0 +1,102 @@
+# 0.0.1.infras-mysql.yaml
+
+# 此服务可选安装，用于MySQL数据库的管理提供Web端
+
+####################################################
+# mysql-server
+####################################################
+---
+apiVersion: v1
+kind: Service
+metadata:
+ namespace: base
+ name: mysql-server
+spec:
+ ports:
+ - name: tcp-mysql
+ port: 3306
+ protocol: TCP
+ targetPort: 3306
+---
+kind: Endpoints
+apiVersion: v1
+metadata:
+ namespace: base
+ name: mysql-server
+subsets:
+ - addresses:
+ # 修改实际MySQL服务器的IP地址
+ - ip: 172.30.104.82
+ ports:
+ - name: tcp-mysql
+ port: 3306
+ protocol: TCP
+
+
+####################################################
+# mysql-adminer
+####################################################
+---
+apiVersion: v1
+kind: Service
+metadata:
+ namespace: base
+ name: mysql-adminer
+spec:
+ ports:
+ - name: http
+ port: 8080
+ protocol: TCP
+ targetPort: http
+ selector:
+ app: mysql-adminer
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ namespace: base
+ name: mysql-adminer
+spec:
+ selector:
+ matchLabels:
+ app: mysql-adminer
+ replicas: 1
+ template:
+ metadata:
+ labels:
+ app: mysql-adminer
+ spec:
+ containers:
+ - name: mysql-adminer
+ image: adminer:4
+ imagePullPolicy: Always
+ ports:
+ - containerPort: 8080
+ name: http
+ env:
+ - name: ADMINER_DEFAULT_SERVER
+ value: mysql-server
+ resources:
+ requests:
+ memory: "512Mi"
+ limits:
+ memory: "512Mi"
+
+---
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+ name: mysql-adminer-ingress
+ namespace: base
+spec:
+ rules:
+ # 修改为学校的根域名
+ - host: mysql-adminer.paas.xxx.edu.cn
+ http:
+ paths:
+ - path: /
+ backend:
+ serviceName: mysql-adminer
+ servicePort: http
+
diff --git a/project/zzu/k8s-rancher/0.infras/0.0.2.infras-sba.yaml b/project/zzu/k8s-rancher/0.infras/0.0.2.infras-sba.yaml
new file mode 100644
index 0000000..70b3269
--- /dev/null
+++ b/project/zzu/k8s-rancher/0.infras/0.0.2.infras-sba.yaml
@@ -0,0 +1,117 @@
+# 0.0.2.infras-sba.yaml
+
+# 此服务可选安装，用于开发人员排查问题
+
+---
+apiVersion: v1
+kind: Secret
+metadata:
+ namespace: base
+ name: spring-boot-admin-env-secret
+data:
+ # sbaadmin
+ SBA_USERNAME: c2JhYWRtaW4=
+ # sbanimda
+ SBA_PASSWORD: c2JhbmltZGE=
+
+
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ namespace: base
+ name: spring-boot-admin-env
+data:
+ SERVER_PORT: "8080"
+
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+ namespace: base
+ name: spring-boot-admin-svc
+ labels:
+ app: spring-boot-admin
+ needMonitor: 'true'
+spec:
+ ports:
+ - port: 8080
+ targetPort: http
+ protocol: TCP
+ name: http
+ - port: 6060
+ targetPort: http-metrics
+ protocol: TCP
+ name: http-metrics
+ selector:
+ app: spring-boot-admin
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ namespace: base
+ name: spring-boot-admin
+spec:
+ selector:
+ matchLabels:
+ app: spring-boot-admin
+ replicas: 1
+ template:
+ metadata:
+ labels:
+ app: spring-boot-admin
+ spec:
+ containers:
+ - name: spring-boot-admin
+ # 若使用了学校搭设的私有仓库，请修改
+ image: harbor.supwisdom.com/institute/spring-boot-admin:0.1.0-SNAPSHOT
+ imagePullPolicy: Always
+ ports:
+ - containerPort: 8080
+ name: http
+ - containerPort: 6060
+ name: http-metrics
+ envFrom:
+ - configMapRef:
+ name: jvm-env
+ - secretRef:
+ name: datasource-env-secret
+ - secretRef:
+ name: spring-boot-admin-env-secret
+ - configMapRef:
+ name: spring-boot-admin-env
+ resources:
+ requests:
+ memory: "400Mi"
+ limits:
+ memory: "400Mi"
+ readinessProbe:
+ tcpSocket:
+ port: 8080
+ initialDelaySeconds: 10
+ periodSeconds: 5
+ timeoutSeconds: 5
+ successThreshold: 1
+ failureThreshold: 10
+ imagePullSecrets:
+ - name: harbor-registry
+
+
+---
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+ name: sba-ingress
+ namespace: base
+spec:
+ rules:
+ # 修改为学校的根域名
+ - host: sba.paas.xxx.edu.cn
+ http:
+ paths:
+ - path: /
+ backend:
+ serviceName: spring-boot-admin-svc
+ servicePort: http
+
diff --git a/project/zzu/k8s-rancher/0.infras/0.0.x.infras-monitor.yaml b/project/zzu/k8s-rancher/0.infras/0.0.x.infras-monitor.yaml
new file mode 100644
index 0000000..88c23c2
--- /dev/null
+++ b/project/zzu/k8s-rancher/0.infras/0.0.x.infras-monitor.yaml
@@ -0,0 +1,21 @@
+#
+
+# 此配置可选安装，用于配置监控
+
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+ name: authx-service-monitor
+ namespace: cattle-prometheus
+spec:
+ selector:
+ matchLabels:
+ needMonitor: 'true'
+ namespaceSelector:
+ matchNames:
+ - user-data-service
+ - user-authorization-service
+ - cas-server
+ endpoints:
+ - port: http-metrics
+ path: /metrics