diff --git "a/project/nwpu/k8s-rancher/0.0.1.\345\274\200\346\224\276\345\271\263\345\217\260\345\256\211\350\243\205\351\203\250\347\275\262\346\211\213\345\206\214.md" "b/project/nwpu/k8s-rancher/0.0.1.\345\274\200\346\224\276\345\271\263\345\217\260\345\256\211\350\243\205\351\203\250\347\275\262\346\211\213\345\206\214.md"
new file mode 100644
index 0000000..8fe7936
--- /dev/null
+++ "b/project/nwpu/k8s-rancher/0.0.1.\345\274\200\346\224\276\345\271\263\345\217\260\345\256\211\350\243\205\351\203\250\347\275\262\346\211\213\345\206\214.md"
@@ -0,0 +1,226 @@
+# 安装部署手册
+
+**开放平台**
+
+* 修订历史
+
+版本 | 作者 | 日期 | 备注
+- | - | - | -
+v1 | 郝江涛 | 2020-10-30 | 初稿
+
+[TOC]
+
+## 安装准备
+
+### mysql 初始配置
+
+* 创建数据库帐号
+
+  参考命令：
+  ```
+  create user 'developer_center'@'%' identified with mysql_native_password  by 'your_password';
+  ```
+
+* 创建 database
+
+  ```
+  developer_center
+  ```
+
+  参考命令：
+  ```
+  create database `developer_center` DEFAULT CHARSET utf8 COLLATE utf8_general_ci;
+  ```
+
+* 授予权限
+
+  将 database 的权限授予对应的帐号
+
+  参考命令：
+  ```
+  grant all privileges on `developer_center`.* to 'developer_center'@'%' with grant option;
+  ```
+
+
+* 备份与还原
+
+  参考命令：
+  备份：
+  ```
+  mysqldump -u root -p developer_center > developer_center.sql
+  ```
+
+  还原：
+  ```
+  mysql -u root -p developer_center < admin_center.sql
+
+  
+### harbor 准备
+
+* 创建 devops 帐号（如已存在，请忽略）
+
+  用于 rancher 部署时拉取镜像
+
+  用户管理 下 创建用户
+    如 devops
+
+
+* 镜像同步
+
+  从 https://harbor.supwisdom.com 中同步镜像
+    
+  仓库管理 下 新建目标
+  ```
+  supwisdom    https://harbor.supwisdom.com    rancher.devops / PWMgP85qiLFC
+  ```
+
+  同步管理 下 新建规则
+
+  ```
+  developer-center                  developer-center/*
+
+  ```
+
+  同步规则，创建完成后，进行镜像同步
+
+  选择某个同步规则，点击 同步，等待任务完成
+
+
+* 授予 devops 帐号 对各个项目的 访客 权限
+
+  项目 下，点击 项目名称，进入到 成员，添加用户，查找用户 devops，选择角色 访客，确定，添加即可
+
+### rancher 准备
+
+* 创建项目
+
+  进入 全局 - 集群（具体名称视项目安装而定） - 项目/命名空间，添加项目
+
+  输入 项目名称，保存
+
+
+* 创建命名空间
+
+  进入 全局 - 集群（具体名称视项目安装而定） - 项目/命名空间
+
+  在新建的项目中，添加命名空间
+
+  输入 名称，保存
+
+* 导入YAML
+
+  进入 全局 - 集群（具体名称视项目安装而定） - 项目（某个项目）
+
+  进入 资源 - 工作负载
+
+### 域名准备
+
+* 确定域名
+
+  首先明确是否使用泛域名，如：`*.paas.xxx.edu.cn`，或 直接使用学校域名 `xxx.edu.cn`
+
+  本产品安装需要的域名如下：
+  ```
+  dev-center.paas.xxx.edu.cn         开放平台的网关api
+
+  dev-admin.paas.xxx.edu.cn          开放平台的前端后台UI
+  dev-portal.paas.xxx.edu.cn         开放平台的前端前台UI
+  ```
+
+
+  如果使用 学校域名，则去除 .paas 即可，同时申请开通相关域名
+
+## 开始安装
+
+
+### 数据库创建
+
+* 数据库帐号
+
+  服务 | 帐号
+  - | -
+  管理中心 developer_center | developer_center
+
+  创建命令
+
+  **请修改命令中的 `your_password` 为实际的数据库帐号的密码**
+  ```
+  create user 'developer_center'@'%' identified with mysql_native_password  by 'your_password';
+  ```
+
+
+
+
+### rancher 容器部署
+
+* 修改 yaml 中的相关配置
+
+  具体参考 yaml 文件中的说明
+
+
+  open-platform
+
+  开放平台
+
+  ```
+  0.developer-center
+
+    此为 开放平台
+
+
+  1.minio-sa
+
+    此为 文件基础能力（此服务部署可选。如果已有，可以考虑不部署）。
+
+  ```
+
+
+* 添加项目、命名空间
+
+  项目
+
+  在集群下创建 项目：
+
+  ```
+  open-platform        # 开放平台
+
+  ```
+
+  命名空间
+
+  在项目 developer-center 下创建 命名空间：
+
+  ```
+  developer-center
+
+  minio-sa  (如果不部署minio-sa 服务，此命名空间可以不创建)
+
+  ```
+
+
+* 导入YAML
+
+  在项目 open-platform 中，将 0.developer-center 和 1.minio-sa 下的 yaml 按编号依次导入
+
+      务必确保 `4.0.developer-center-backend-installer.yaml` 执行成功
+
+
+### 数据配置
+
+  数据脚本初始化
+
+  先修改 脚本中的数据库名称，和属性中存在的域名
+
+
+* **必选，open-platform/1.0.init.sql**
+
+    修改 数据库数据初始化时的默认配置
+
+### 服务依赖
+
+    user-data-service 服务版本请确保在1.1或者更高
+
+## 结合云平台的使用（可选）
+
+  请参考open-platform/1.0.云平台-开放平台使用手册.md .
+
diff --git a/project/nwpu/k8s-rancher/open-platform/0.developer-center/0.developer-center-base.yaml b/project/nwpu/k8s-rancher/open-platform/0.developer-center/0.developer-center-base.yaml
new file mode 100644
index 0000000..3de87d8
--- /dev/null
+++ b/project/nwpu/k8s-rancher/open-platform/0.developer-center/0.developer-center-base.yaml
@@ -0,0 +1,210 @@
+# 0.developer-center-base.yaml
+
+####################################################
+# namespace
+####################################################
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: developer-center
+  # labels:
+  #   istio-injection: enabled
+
+####################################################
+# supwisdom harbor private docker registry
+####################################################
+---
+apiVersion: v1
+kind: Secret
+type: kubernetes.io/dockerconfigjson
+metadata:
+  namespace: developer-center
+  name: harbor-registry
+data:
+  # 修改harbor仓库配置，并使用 base64 工具进行编码
+  # {"auths":{"harbor.supwisdom.com":{"password":"PWMgP85qiLFC","username":"rancher.devops"}}}
+  # .dockerconfigjson: eyJhdXRocyI6eyJoYXJib3Iuc3Vwd2lzZG9tLmNvbSI6eyJwYXNzd29yZCI6IlBXTWdQODVxaUxGQzIwIiwidXNlcm5hbWUiOiJyYW5jaGVyLmRldm9wcyJ9fX0=
+  # {"auths":{"paas.harbor.nwpu.edu.cn":{"password":"0nJq1KievrNOt2GT7L","username":"nwpu.devops"}}}
+  .dockerconfigjson: eyJhdXRocyI6eyJwYWFzLmhhcmJvci5ud3B1LmVkdS5jbiI6eyJwYXNzd29yZCI6IjBuSnExS2lldnJOT3QyR1Q3TCIsInVzZXJuYW1lIjoibndwdS5kZXZvcHMifX19
+
+####################################################
+# mysql-server
+####################################################
+---
+apiVersion: v1
+kind: Service
+metadata:
+  namespace: developer-center
+  name: mysql-server
+spec:
+  ports:
+  - name: tcp-mysql
+    port: 3306
+    protocol: TCP
+    targetPort: 3306
+---
+kind: Endpoints
+apiVersion: v1
+metadata:
+  namespace: developer-center
+  name: mysql-server
+#在这里正确修改你的数据库配置，包括端口和地址
+subsets:
+  - addresses:
+      - ip: 10.40.10.52
+    ports:
+      - name: tcp-mysql
+        port: 3306
+        protocol: TCP
+
+
+
+####################################################
+# redis-server
+####################################################
+
+# 若存在存储，可使用PVC
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  namespace: developer-center
+  name: redis-data-pvc
+spec:
+  accessModes:
+    - ReadWriteMany
+  # 根据情况修改，修改 存储类 的名称
+  storageClassName: nfs-client-new2
+  resources:
+    requests:
+      storage: 20Gi
+
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  labels:
+    app: redis
+    release: redis-server
+  name: redis-server
+  namespace: developer-center
+type: Opaque
+data:
+  REDIS_PASSWORD: OEt1d29zbE9pdXc3SA==
+---
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app: redis
+    release: redis-server
+  name: redis-server
+  namespace: developer-center
+spec:
+  ports:
+  - name: redis
+    port: 6379
+    protocol: TCP
+    targetPort: redis
+  selector:
+    app: redis
+    release: redis-server
+    role: master
+  type: ClusterIP
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  labels:
+    app: redis
+    release: redis-server
+  name: redis-server
+  namespace: developer-center
+spec:
+  podManagementPolicy: OrderedReady
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app: redis
+      release: redis-server
+      role: master
+  serviceName: redis-master
+  template:
+    metadata:
+      labels:
+        app: redis
+        release: redis-server
+        role: master
+    spec:
+      containers:
+      - name: redis-server
+        env:
+        - name: REDIS_DISABLE_COMMANDS
+          value: FLUSHDB,FLUSHALL
+        - name: REDIS_REPLICATION_MODE
+          value: master
+        - name: REDIS_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: redis-server
+              key: REDIS_PASSWORD
+        # 若使用了学校搭设的私有仓库，请修改
+        image: paas.harbor.nwpu.edu.cn/bitnami/redis:4.0
+        # 若使用了学校搭设的私有仓库，请修改 为 Always
+        imagePullPolicy: IfNotPresent
+        # imagePullPolicy: Always
+        livenessProbe:
+          exec:
+            command:
+            - redis-cli
+            - ping
+          failureThreshold: 5
+          initialDelaySeconds: 30
+          periodSeconds: 10
+          successThreshold: 1
+          timeoutSeconds: 5
+        ports:
+        - containerPort: 6379
+          name: redis
+          protocol: TCP
+        readinessProbe:
+          exec:
+            command:
+            - redis-cli
+            - ping
+          failureThreshold: 5
+          initialDelaySeconds: 5
+          periodSeconds: 10
+          successThreshold: 1
+          timeoutSeconds: 1
+        volumeMounts:
+        - mountPath: /bitnami/redis/data
+          name: redis-data
+        resources:
+          requests:
+            memory: "1024Mi"
+          limits:
+            memory: "1024Mi"
+      dnsPolicy: ClusterFirst
+      restartPolicy: Always
+      securityContext:
+        fsGroup: 0
+        # runAsUser: 1001
+        # https://github.com/bitnami/bitnami-docker-redis/issues/106#issuecomment-388884372
+        # runAsUser: 0
+      terminationGracePeriodSeconds: 30
+      volumes:
+      # 若存在存储，可使用PVC，否则使用 emptyDir（注意空格）
+      # - name: redis-data
+      #   emptyDir: {}
+      - name: redis-data
+        persistentVolumeClaim:
+          claimName: redis-data-pvc
+      # 若使用了学校搭设的私有仓库，请增加以下配置（取消注释即可，注意空格）
+      imagePullSecrets:
+        - name: harbor-registry
+  updateStrategy:
+    rollingUpdate:
+      partition: 0
+    type: RollingUpdate
diff --git a/project/nwpu/k8s-rancher/open-platform/0.developer-center/1.developer-center-env.yaml b/project/nwpu/k8s-rancher/open-platform/0.developer-center/1.developer-center-env.yaml
new file mode 100644
index 0000000..771347c
--- /dev/null
+++ b/project/nwpu/k8s-rancher/open-platform/0.developer-center/1.developer-center-env.yaml
@@ -0,0 +1,68 @@
+# 1.developer-center-env.yaml
+
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  namespace: developer-center
+  name: jvm-env
+data:
+  MAX_RAM_PERCENTAGE: "75.0"
+
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  namespace: developer-center
+  name: datasource-env-secret
+type: Opaque
+data:
+  # 这里填写正确的数据库配置，参考部署文件0
+  # jdbc:mysql://mysql-server:3306/developer_center?serverTimezone=Asia/Shanghai
+  JDBC_URL: amRiYzpteXNxbDovL215c3FsLXNlcnZlcjozMzA2L2RldmVsb3Blcl9jZW50ZXI/c2VydmVyVGltZXpvbmU9QXNpYS9TaGFuZ2hhaQ==
+  # developer_center
+  JDBC_USERNAME: ZGV2ZWxvcGVyX2NlbnRlcg==
+  # Nwpu@Supwisdom123
+  JDBC_PASSWORD: TndwdUBTdXB3aXNkb20xMjM=
+
+# ---
+# apiVersion: v1
+# kind: Secret
+# metadata:
+#   namespace: developer-center
+#   name: datasource-env-secret
+# type: Opaque
+# data:
+#   # 这里填写正确的数据库配置，参考部署文件0
+#   # jdbc:mysql://mysql-server:3306/developer_center_test?serverTimezone=Asia/Shanghai
+#   JDBC_URL: amRiYzpteXNxbDovL215c3FsLXNlcnZlcjozMzA2L2RldmVsb3Blcl9jZW50ZXJfdGVzdD9zZXJ2ZXJUaW1lem9uZT1Bc2lhL1NoYW5naGFp
+#   # developer_center_test
+#   JDBC_USERNAME: ZGV2ZWxvcGVyX2NlbnRlcl90ZXN0
+#   # Nwpu@Supwisdom123_test
+#   JDBC_PASSWORD: TndwdUBTdXB3aXNkb20xMjNfdGVzdA==
+
+
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  namespace: developer-center
+  name: redis-env-secret
+type: Opaque
+data:
+  SPRING_REDIS_HOST: cmVkaXMtc2VydmVy
+  SPRING_REDIS_PORT: NjM3OQ==
+  SPRING_REDIS_PASSWORD: OEt1d29zbE9pdXc3SA==
+
+# ---
+# apiVersion: v1
+# kind: Secret
+# metadata:
+#   namespace: developer-center
+#   name: rabbitmq-env-secret
+# type: Opaque
+# data:
+#   SPRING_RABBITMQ_HOST: cmFiYml0bXEtc2VydmVy
+#   SPRING_RABBITMQ_PORT: NTY3Mg==
+#   SPRING_RABBITMQ_USERNAME: Z3Vlc3Q=
+#   SPRING_RABBITMQ_PASSWORD: Z3Vlc3Q=
diff --git a/project/nwpu/k8s-rancher/open-platform/0.developer-center/2.developer-center-ingresses.yaml b/project/nwpu/k8s-rancher/open-platform/0.developer-center/2.developer-center-ingresses.yaml
new file mode 100644
index 0000000..7ac856c
--- /dev/null
+++ b/project/nwpu/k8s-rancher/open-platform/0.developer-center/2.developer-center-ingresses.yaml
@@ -0,0 +1,68 @@
+# 2.developer-center-ingresses.yaml
+
+#这个文件中，你要将对外暴露的地址修改为实际分配的地址
+
+---
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+  namespace: developer-center
+  name: developer-center-gateway-zuul-ingress
+spec:
+  rules:
+  - host: dev-center.paas.nwpu.edu.cn
+    http:
+      paths:
+      - path: /
+        backend:
+          serviceName: developer-center-gateway-zuul-svc
+          servicePort: http
+
+
+---
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+  namespace: developer-center
+  name: developer-center-admin-ui-spa-ingress
+spec:
+  rules:
+  - host: dev-admin.paas.nwpu.edu.cn
+    http:
+      paths:
+      - path: /
+        backend:
+          serviceName: developer-center-admin-ui-spa-svc
+          servicePort: http
+
+# ---
+# apiVersion: extensions/v1beta1
+# kind: Ingress
+# metadata:
+#   namespace: developer-center
+#   name: developer-center-admin-ui-ingress
+# spec:
+#   rules:
+#   - host: dev-admin.paas.nwpu.edu.cn
+#     http:
+#       paths:
+#       - path: /
+#         backend:
+#           serviceName: developer-center-admin-ui-svc
+#           servicePort: http
+
+---
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+  namespace: developer-center
+  name: developer-center-portal-ui-ingress
+spec:
+  rules:
+  - host: dev-portal.paas.nwpu.edu.cn
+    http:
+      paths:
+      - path: /
+        backend:
+          serviceName: developer-center-portal-ui-svc
+          servicePort: http
diff --git a/project/nwpu/k8s-rancher/open-platform/0.developer-center/4.0.developer-center-backend-installer.yaml b/project/nwpu/k8s-rancher/open-platform/0.developer-center/4.0.developer-center-backend-installer.yaml
new file mode 100644
index 0000000..2d96766
--- /dev/null
+++ b/project/nwpu/k8s-rancher/open-platform/0.developer-center/4.0.developer-center-backend-installer.yaml
@@ -0,0 +1,47 @@
+# 4.0.developer-center-backend-installer.yaml
+
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  namespace: developer-center
+  name: developer-center-backend-installer-env
+data:
+  DB_TYPE: mysql8
+
+
+---
+# 这个任务用来初始化数据库脚本，执行这里前请确定数据连接配置信息正确，并且已经有了相应的数据库
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: developer-center-backend-installer
+  namespace: developer-center
+spec:
+  completions: 1
+  parallelism: 1
+  template:
+    metadata:
+      labels:
+        app: developer-center-backend-installer
+    spec:
+      restartPolicy: Never
+      containers:
+      - name: developer-center-backend-installer
+        # 若使用了学校搭设的私有仓库，请修改
+        image: paas.harbor.nwpu.edu.cn/developer-center/developer-center-backend-installer:1.0.2-SNAPSHOT
+        imagePullPolicy: Always
+        envFrom:
+        - configMapRef:
+            name: jvm-env
+        - secretRef:
+            name: datasource-env-secret
+        - configMapRef:
+            name: developer-center-backend-installer-env
+        resources:
+          requests:
+            memory: "256Mi"
+          limits:
+            memory: "256Mi"
+      imagePullSecrets:
+        - name: harbor-registry
diff --git a/project/nwpu/k8s-rancher/open-platform/0.developer-center/4.10.developer-center-minio.yaml b/project/nwpu/k8s-rancher/open-platform/0.developer-center/4.10.developer-center-minio.yaml
new file mode 100644
index 0000000..8206d04
--- /dev/null
+++ b/project/nwpu/k8s-rancher/open-platform/0.developer-center/4.10.developer-center-minio.yaml
@@ -0,0 +1,114 @@
+# 2.authx-service-minio.yaml
+
+####################################################
+# minio
+# 文件服务器，对象存储
+####################################################
+
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: minio-data-pvc
+  namespace: developer-center
+spec:
+  accessModes:
+    - ReadWriteMany
+  # 根据情况修改
+  storageClassName: supwisdom-nfs-storage
+  resources:
+    requests:
+      storage: 5Gi
+
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: minio-env-secret
+  namespace: developer-center
+type: Opaque
+data:
+  # 修改 access_key，并使用 base64 工具进行编码
+  # 默认值：1y8N@8R@a_2u
+  MINIO_ACCESS_KEY: bWluaW9hZG1pbg==
+  # 修改 secret_key，并使用 base64 工具进行编码
+  # 默认至：8pxlIe9#lN7Q
+  MINIO_SECRET_KEY: bWluaW9hZG1pbg==
+
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  namespace: developer-center
+  name: minio-svc
+  labels:
+    app: minio
+spec:
+  ports:
+    - port: 9000
+      targetPort: http
+      protocol: TCP
+      name: http
+  selector:
+    app: minio
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  namespace: developer-center
+  name: minio
+spec:
+  selector:
+    matchLabels:
+      app: minio
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: minio
+    spec:
+      containers:
+      - name: minio
+        image: minio/minio:RELEASE.2020-04-23T00-58-49Z
+        imagePullPolicy: Always
+        args: 
+        - "server"
+        - "/data"
+        ports:
+        - containerPort: 9000
+          name: http
+        envFrom:
+        - secretRef:
+            name: minio-env-secret
+        volumeMounts:
+        - mountPath: /data
+          name: minio-data
+        resources:
+          requests:
+            memory: "256Mi"
+          limits:
+            memory: "256Mi"
+      volumes:
+      - name: minio-data
+        persistentVolumeClaim:
+          claimName: minio-data-pvc
+
+
+# 该 ingress 配置可选
+---
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+  name: minio-ingress
+  namespace: developer-center
+spec:
+  rules:
+  # 修改为学校的根域名
+  - host: developer-center-minio-test.paas.newcapec.cn
+    http:
+      paths:
+      - path: /
+        backend:
+          serviceName: minio-svc
+          servicePort: http
+
diff --git a/project/nwpu/k8s-rancher/open-platform/0.developer-center/4.2.developer-center-backend-sa.yaml b/project/nwpu/k8s-rancher/open-platform/0.developer-center/4.2.developer-center-backend-sa.yaml
new file mode 100644
index 0000000..58e6248
--- /dev/null
+++ b/project/nwpu/k8s-rancher/open-platform/0.developer-center/4.2.developer-center-backend-sa.yaml
@@ -0,0 +1,101 @@
+# 4.2.developer-center-backend-sa.yaml
+
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  namespace: developer-center
+  name: developer-center-backend-sa-env
+data:
+  SERVER_PORT: "8080"
+  SSL_ENABLED: "false"
+  #SSL_KEYSTORE_FILE: file:/certs/server/server.keystore
+  #SSL_TRUSTSTORE_FILE: file:/certs/server/server.truststore
+
+  SERVER_MAXHTTPHEADERSIZE: "10240"
+
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  namespace: developer-center
+  name: developer-center-backend-sa-env-secret
+type: Opaque
+data:
+  #SSL_KEYSTORE_PASSWORD: ""
+  #SSL_TRUSTSTORE_PASSWORD: ""
+
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  namespace: developer-center
+  name: developer-center-backend-sa-svc
+  labels:
+    app: developer-center-backend-sa
+    needMonitor: 'true'
+spec:
+  ports:
+    - port: 8080
+      targetPort: http
+      protocol: TCP
+      name: http
+    - port: 6060
+      targetPort: http-metrics
+      protocol: TCP
+      name: http-metrics
+  selector:
+    app: developer-center-backend-sa
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  namespace: developer-center
+  name: developer-center-backend-sa
+spec:
+  selector:
+    matchLabels:
+      app: developer-center-backend-sa
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: developer-center-backend-sa
+    spec:
+      containers:
+      - name: developer-center-backend-sa
+        # 若使用了学校搭设的私有仓库，请修改
+        image: paas.harbor.nwpu.edu.cn/developer-center/developer-center-backend-sa:1.0.2-SNAPSHOT
+        imagePullPolicy: Always
+        ports:
+        - containerPort: 8080
+          name: http
+        - containerPort: 6060
+          name: http-metrics
+        envFrom:
+        - configMapRef:
+            name: jvm-env
+        - secretRef:
+            name: datasource-env-secret
+        - secretRef:
+            name: developer-center-backend-sa-env-secret
+        - configMapRef:
+            name: developer-center-backend-sa-env
+        resources:
+          requests:
+            memory: "512Mi"
+          limits:
+            memory: "512Mi"
+        readinessProbe:
+          httpGet:
+            path: /actuator/health
+            port: 8080
+          initialDelaySeconds: 20
+          periodSeconds: 5
+          timeoutSeconds: 5
+          successThreshold: 1
+          failureThreshold: 10
+      imagePullSecrets:
+        - name: harbor-registry
+
diff --git a/project/nwpu/k8s-rancher/open-platform/0.developer-center/4.4.developer-center-bff.yaml b/project/nwpu/k8s-rancher/open-platform/0.developer-center/4.4.developer-center-bff.yaml
new file mode 100644
index 0000000..07576ab
--- /dev/null
+++ b/project/nwpu/k8s-rancher/open-platform/0.developer-center/4.4.developer-center-bff.yaml
@@ -0,0 +1,281 @@
+# 4.4.developer-center-bff.yaml
+
+#ConfigMap 中的地址要替换相应实际环境中的地址
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  namespace: developer-center
+  name: developer-center-bff-env
+data:
+  SERVER_PORT: "8080"
+  SSL_ENABLED: "false"
+  #SSL_KEYSTORE_FILE: file:/certs/server/server.keystore
+  #SSL_TRUSTSTORE_FILE: file:/certs/server/server.truststore
+
+  SERVER_MAXHTTPHEADERSIZE: "10240"
+
+
+  SERVER_TOMCAT_ACCEPT_COUNT: "5000"
+  SERVER_TOMCAT_MAX_CONNECTIONS: "10000"
+  SERVER_TOMCAT_MAX_THREADS: "800"
+  SERVER_TOMCAT_MIN_SPARE_THREADS: "100"
+
+
+  LOGGING_LEVEL_ROOT: INFO
+
+  #同环境中backend服务的地址
+  DEVELOPER_CENTER_SA_SERVER_URL: http://developer-center-backend-sa-svc.developer-center.svc.cluster.local:8080
+  DEVELOPER_CENTER_SA_CLIENT_AUTH_ENABLED: "false"
+  # DEVELOPER_CENTER_SA_CLIENT_AUTH_KEY_PASSWORD: ""
+  # DEVELOPER_CENTER_SA_CLIENT_AUTH_KEYSTORE_FILE: file:/certs/common/common.keystore
+  # DEVELOPER_CENTER_SA_CLIENT_AUTH_KEYSTORE_PASSWORD: ""
+  # DEVELOPER_CENTER_SA_CLIENT_AUTH_TRUSTSTORE_FILE: file:/certs/common/common.truststore
+  # DEVELOPER_CENTER_SA_CLIENT_AUTH_TRUSTSTORE_PASSWORD: ""
+
+  #本服务依赖到的文件上传服务
+  TPAS_FILE_API_URL: http://agent-service-svc.thirdparty-agent-service.svc.cluster.local:8080/api/v1/tpas/file/minio
+  TPAS_CLIENT_AUTH_ENABLED: "false"
+  #TPAS_CLIENT_AUTH_KEY_PASSWORD: ""
+  #TPAS_CLIENT_AUTH_KEYSTORE_FILE: file:/certs/client/client.keystore
+  #TPAS_CLIENT_AUTH_KEYSTORE_PASSWORD: ""
+  #TPAS_CLIENT_AUTH_TRUSTSTORE_FILE: file:/certs/client/client.truststore
+  #TPAS_CLIENT_AUTH_TRUSTSTORE_PASSWORD: ""
+
+
+  #同环境中poa服务的地址
+  PLATFORM_OPENAPI_SA_SERVER_URL: http://poa-sa-svc.poa.svc.cluster.local:8443
+  PLATFORM_OPENAPI_SA_CLIENT_AUTH_ENABLED: "false"
+  # PLATFORM_OPENAPI_SA_CLIENT_AUTH_KEY_PASSWORD: ""
+  # PLATFORM_OPENAPI_SA_CLIENT_AUTH_KEYSTORE_FILE: file:/certs/common/common.keystore
+  # PLATFORM_OPENAPI_SA_CLIENT_AUTH_KEYSTORE_PASSWORD: ""
+  # PLATFORM_OPENAPI_SA_CLIENT_AUTH_TRUSTSTORE_FILE: file:/certs/common/common.truststore
+  # PLATFORM_OPENAPI_SA_CLIENT_AUTH_TRUSTSTORE_PASSWORD: ""
+
+  #同环境中授权服务的地址
+  USER_AUTHZ_SA_SERVER_URL: http://user-authorization-sa-svc.user-authorization-service.svc.cluster.local:8080
+  USER_AUTHZ_SA_CLIENT_AUTH_ENABLED: "false"
+  # USER_AUTHZ_SA_CLIENT_AUTH_KEY_PASSWORD: ""
+  # USER_AUTHZ_SA_CLIENT_AUTH_KEYSTORE_FILE: file:/certs/common/common.keystore
+  # USER_AUTHZ_SA_CLIENT_AUTH_KEYSTORE_PASSWORD: ""
+  # USER_AUTHZ_SA_CLIENT_AUTH_TRUSTSTORE_FILE: file:/certs/common/common.truststore
+  # USER_AUTHZ_SA_CLIENT_AUTH_TRUSTSTORE_PASSWORD: ""
+
+  #同环境中用户服务的地址
+  USER_DATA_SERVICE_SERVER_URL: http://user-data-service-goa-svc.user-data-service.svc.cluster.local:8080
+  USER_DATA_SERVICE_CLIENT_AUTH_ENABLED: "false"
+  # USER_DATA_SERVICE_CLIENT_AUTH_KEY_PASSWORD: ""
+  # USER_DATA_SERVICE_CLIENT_AUTH_KEYSTORE_FILE: file:/certs/common/common.keystore
+  # USER_DATA_SERVICE_CLIENT_AUTH_KEYSTORE_PASSWORD: ""
+  # USER_DATA_SERVICE_CLIENT_AUTH_TRUSTSTORE_FILE: file:/certs/common/common.truststore
+  # USER_DATA_SERVICE_CLIENT_AUTH_TRUSTSTORE_PASSWORD: ""
+
+  #同环境中认证服务的地址
+  CAS_SA_SERVER_URL: http://cas-server-sa-api-svc.cas-server.svc.cluster.local:8080
+  CAS_SA_CLIENT_AUTH_ENABLED: "false"
+  # CAS_SA_CLIENT_AUTH_KEY_PASSWORD: ""
+  # CAS_SA_CLIENT_AUTH_KEYSTORE_FILE: file:/certs/common/common.keystore
+  # CAS_SA_CLIENT_AUTH_KEYSTORE_PASSWORD: ""
+  # CAS_SA_CLIENT_AUTH_TRUSTSTORE_FILE: file:/certs/common/common.truststore
+  # CAS_SA_CLIENT_AUTH_TRUSTSTORE_PASSWORD: ""
+
+  UNIAUTH_SA_SERVER_URL: https://uniauth.nwpu.edu.cn
+  UNIAUTH_SA_CLIENT_AUTH_ENABLED: "false"
+  # UNIAUTH_SA_CLIENT_AUTH_KEY_PASSWORD: ""
+  # UNIAUTH_SA_CLIENT_AUTH_KEYSTORE_FILE: file:/certs/common/common.keystore
+  # UNIAUTH_SA_CLIENT_AUTH_KEYSTORE_PASSWORD: ""
+  # UNIAUTH_SA_CLIENT_AUTH_TRUSTSTORE_FILE: file:/certs/common/common.truststore
+  # UNIAUTH_SA_CLIENT_AUTH_TRUSTSTORE_PASSWORD: ""
+
+  #同环境中文件服务的地址
+  MINIO_SA_SERVER_URL: http://minio-sa.minio-sa.svc.cluster.local:9090
+  MINIO_SA_CLIENT_AUTH_ENABLED: "false"
+  # MINIO_SA_CLIENT_AUTH_KEY_PASSWORD: ""
+  # MINIO_SA_CLIENT_AUTH_KEYSTORE_FILE: file:/certs/common/common.keystore
+  # MINIO_SA_CLIENT_AUTH_KEYSTORE_PASSWORD: ""
+  # MINIO_SA_CLIENT_AUTH_TRUSTSTORE_FILE: file:/certs/common/common.truststore
+  # MINIO_SA_CLIENT_AUTH_TRUSTSTORE_PASSWORD: ""
+
+  #同环境中消息服务的地址
+  MESSAGE_MANAGER_SERVER_URL: http://message-service-manager.message-service.svc.cluster.local:8080/manager
+  MESSAGE_MANAGER_CLIENT_AUTH_ENABLED: "false"
+  # MESSAGE_MANAGER_AUTH_KEY_PASSWORD: ""
+  # MESSAGE_MANAGER_AUTH_KEYSTORE_FILE: file:/certs/common/common.keystore
+  # MESSAGE_MANAGER_AUTH_KEYSTORE_PASSWORD: ""
+  # MESSAGE_MANAGER_AUTH_TRUSTSTORE_FILE: file:/certs/common/common.truststore
+  # MESSAGE_MANAGER_AUTH_TRUSTSTORE_PASSWORD: ""
+
+  FLOW_SERVER_URL: https://formflow.nwpu.edu.cn/formflow
+  FLOW_CLIENT_AUTH_ENABLED: "false"
+  # FLOW_CLIENT_AUTH_KEY_PASSWORD: ""
+  # FLOW_CLIENT_AUTH_KEYSTORE_FILE: file:/certs/common/common.keystore
+  # FLOW_CLIENT_AUTH_KEYSTORE_PASSWORD: ""
+  # FLOW_CLIENT_AUTH_TRUSTSTORE_FILE: file:/certs/common/common.truststore
+  # FLOW_CLIENT_AUTH_TRUSTSTORE_PASSWORD: ""
+
+  TTC_SERVER_URL: https://formflow.nwpu.edu.cn/ttc
+  TTC_CLIENT_AUTH_ENABLED: "false"
+  # TTC_CLIENT_AUTH_KEY_PASSWORD: ""
+  # TTC_CLIENT_AUTH_KEYSTORE_FILE: file:/certs/common/common.keystore
+  # TTC_CLIENT_AUTH_KEYSTORE_PASSWORD: ""
+  # TTC_CLIENT_AUTH_TRUSTSTORE_FILE: file:/certs/common/common.truststore
+  # TTC_CLIENT_AUTH_TRUSTSTORE_PASSWORD: ""
+
+
+  FLOW_KEYS: "TtcTmxwbGJ6VnZhVE0xV1dGR05XRTJOVFZaY1djMVlTdEg="
+
+  FLOW_ABILITY_MESSAGE_APPID: "32d20532-b37a-402d-88a6-d5475e764e4e"
+  FLOW_ABILITY_TTC_APPID: "f74f0f9b-8a1f-41e6-b488-c8874228cc31"
+  FLOW_ABILITY_MINIO_APPID: "11ce12f3-7eef-404e-a087-738147090850"
+  FLOW_ABILITY_AUTH_APPID: "fc8a8d1-9455-4f69-b999-b866f89c9472"
+  FLOW_ABILITY_CAS_APPID: "73b541e5-1344-44bf-9fad-c5f1b033e9fc"
+
+  FLOW_APIVERSION_APPID: "6a7fc2f9-fcc0-4a2d-9f67-0943213a7aad"
+
+  FLOW_SCOPE_APPID: 315b8be1-649f-401c-80c3-419ff395d7ae
+  FLOW_SCOPE_SONFORM: sonform_colorful_egg_1616843524737_3
+  FLOW_SCOPE_API_SONFORM: sonform_colorful_egg_1616843524737_4
+
+  FLOW_APPLICATION_SCOPES_APPID: 4661bc95-38dd-4e88-9514-dc93f1e95223
+  FLOW_APPLICATION_SCOPES_SCOPES_SONFORM: sonform_colorful_egg_1616498573794
+  FLOW_APPLICATION_SCOPES_API_FIELDS_SONFORM: sonform_colorful_egg_1616556009894
+
+  FLOW_NEW_API_APPID: aced312b-b933-4ec1-b123-92abb61ab9be
+
+
+  POA_SA_API_SEPCS_UPLOAD_CHECK_CASE: "false"
+
+  MINIO_SA_BASIC_AUTH_USERNAME: saadmin
+  MINIO_SA_BASIC_AUTH_PASSWORD: saadmin
+
+  UNIAUTH_SA_BASIC_AUTH_USERNAME: saadmin
+  UNIAUTH_SA_BASIC_AUTH_PASSWORD: saadminfoobar
+
+  USER_IDENTITY_TYPE_DEVELOPER_INDIVIDUAL: D01
+  USER_IDENTITY_TYPE_DEVELOPER_ENTERPRISE: D02
+  USER_ORGANIZATION: "1"
+
+  USER_AUTHZ_BUSINESSDOMAINID: "1"
+  USER_AUTHZ_SYSTEMID: "1"
+
+
+  # 用于替换 OAS 文档 里的 变量 ${POA_SERVER_URL}
+  POA_SERVER_URL: https://poa.nwpu.edu.cn
+
+  POA_DOCS_SERVER_URL: https://poa-docs.nwpu.edu.cn
+
+  FORM_DESIGN_SERVER_URL: https://form-design.nwpu.edu.cn
+
+  DEV_CENTER_SERVER_URL: https://dev-center.nwpu.edu.cn
+  DEV_PORTAL_SERVER_URL: https://dev-portal.nwpu.edu.cn
+
+
+  DEVELOPER-CENTER-BFF.NONCE.STORE.IMPL: redis
+  # DEVELOPER-CENTER-BFF_SERVER_PREFIX: http://localhost:8080
+
+  SMS_TEMPLATE_APPLY_ACCOUNT_REGISTER_SEND_CODE_BY_MOBILE : "{prefix}：您当前正在注册账号，须验证手机有效，验证码{code}，有效期5分钟，请尽快完成验证。"
+
+
+  # 基础能力开通后，自动添加scopes
+  ABILITY_POA_SCOPES_AUTO_USER_AUTH: "authz:v1:readRole"
+  ABILITY_POA_SCOPES_AUTO_MESSAGE: "messagecenter:v1:readMessage,messagecenter:v1:writeMessage,messagecenter:v1:sendMessage"
+  ABILITY_POA_SCOPES_AUTO_TTC: "ttc:v1:writeTtc"
+
+
+  # POA API 对接配置
+  POA_API_SERVER_URL: https://poa.nwpu.edu.cn
+  POA_API_CLIENT_ID: "hHPqzPSSpXptVMlkZhsZWziO42c="
+  POA_API_CLIENT_SECRET: "w_HhrhdoQYIw6-FIvDbBZsLKTbRWuHfhRFWC1tS_wm0="
+  POA_API_SCOPES: "user:v1:readGroup"
+
+  # POA_API_SERVER_URL: http://poa.paas.nwpu.edu.cn
+  # POA_API_CLIENT_ID: "e7EB5MTxWNPtrOU3wGrcx07epq8="
+  # POA_API_CLIENT_SECRET: "6PPy0C1jpeQiBfKTEwfXVAfXvz65s3fD9l1AGTCVoPQ="
+  # POA_API_SCOPES: "user:v1:readGroup"
+
+
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  namespace: developer-center
+  name: developer-center-bff-env-secret
+type: Opaque
+data:
+  #SSL_KEYSTORE_PASSWORD: ""
+  #SSL_TRUSTSTORE_PASSWORD: ""
+
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  namespace: developer-center
+  name: developer-center-bff-svc
+  labels:
+    app: developer-center-bff
+    needMonitor: 'true'
+spec:
+  ports:
+    - port: 8080
+      targetPort: http
+      protocol: TCP
+      name: http
+    - port: 6060
+      targetPort: http-metrics
+      protocol: TCP
+      name: http-metrics
+  selector:
+    app: developer-center-bff
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  namespace: developer-center
+  name: developer-center-bff
+spec:
+  selector:
+    matchLabels:
+      app: developer-center-bff
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: developer-center-bff
+    spec:
+      containers:
+      - name: developer-center-bff
+        # 若使用了学校搭设的私有仓库，请修改
+        image: paas.harbor.nwpu.edu.cn/developer-center/developer-center-bff:1.0.2-SNAPSHOT
+        imagePullPolicy: Always
+        ports:
+        - containerPort: 8080
+          name: http
+        - containerPort: 6060
+          name: http-metrics
+        envFrom:
+        - configMapRef:
+            name: jvm-env
+        - secretRef:
+            name: redis-env-secret
+        - secretRef:
+            name: developer-center-bff-env-secret
+        - configMapRef:
+            name: developer-center-bff-env
+        resources:
+          requests:
+            memory: "512Mi"
+          limits:
+            memory: "512Mi"
+        readinessProbe:
+          httpGet:
+            path: /actuator/health
+            port: 8080
+          initialDelaySeconds: 20
+          periodSeconds: 5
+          timeoutSeconds: 5
+          successThreshold: 1
+          failureThreshold: 10
+      imagePullSecrets:
+        - name: harbor-registry
+
diff --git a/project/nwpu/k8s-rancher/open-platform/0.developer-center/4.5.developer-center-gateway-zuul.yaml b/project/nwpu/k8s-rancher/open-platform/0.developer-center/4.5.developer-center-gateway-zuul.yaml
new file mode 100644
index 0000000..9fffc66
--- /dev/null
+++ b/project/nwpu/k8s-rancher/open-platform/0.developer-center/4.5.developer-center-gateway-zuul.yaml
@@ -0,0 +1,187 @@
+# 4.5.developer-center-gateway-zuul.yaml
+
+#ConfigMap 中的地址要替换相应实际环境中的地址
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  namespace: developer-center
+  name: developer-center-gateway-zuul-env
+data:
+  SERVER_PORT: "8080"
+  SSL_ENABLED: "false"
+  #SSL_KEYSTORE_FILE: file:/certs/server/server.keystore
+  #SSL_TRUSTSTORE_FILE: file:/certs/server/server.truststore
+
+  SERVER_MAXHTTPHEADERSIZE: "10240"
+
+
+  SERVER_TOMCAT_ACCEPT_COUNT: "5000"
+  SERVER_TOMCAT_MAX_CONNECTIONS: "10000"
+  SERVER_TOMCAT_MAX_THREADS: "800"
+  SERVER_TOMCAT_MIN_SPARE_THREADS: "100"
+
+  SPRING_DATASOURCE_DRUID_INITIAL_SIZE: "10"
+  SPRING_DATASOURCE_DRUID_MAX_ACTIVE: "20"
+  SPRING_DATASOURCE_DRUID_MIN_IDLE: "10"
+
+  SPRING_REDIS_JEDIS_POOL_MAXACTIVE: "800"
+  SPRING_REDIS_JEDIS_POOL_MAXIDLE: "100"
+  SPRING_REDIS_JEDIS_POOL_MINIDLE: "100"
+
+
+  ZUUL_HOST_MAX_PER_ROUTE_CONNECTIONS: "1000"
+  ZUUL_HOST_MAX_TOTAL_CONNECTIONS: "1000"
+  ZUUL_SEMAPHORE_MAX_SEMAPHORES: "10000"
+
+
+  INFRAS_SECURITY_BASIC_ENABLED: "false"
+  INFRAS_SECURITY_JWT_ENABLED: "true"
+
+  INFRAS_SECURITY_JWT_TOKEN_GENERATE_TYPE: cas
+  INFRAS_SECURITY_JWT_TOKEN_DECRYPT_KEY_PRIVATE_KEY_PEM_PKCS8: ""
+  # 这里依赖cas 服务
+  INFRAS_SECURITY_JWT_TOKEN_SIGNING_KEY_URL: "http://cas-server-site-webapp-svc.cas-server.svc.cluster.local:8080/cas/jwt/publicKey"
+  INFRAS_SECURITY_JWT_PUBLIC_KEY_PEM: ""
+  INFRAS_SECURITY_JWT_PRIVATE_KEY_PEM_PKCS8: ""
+  
+
+  INFRAS_SECURITY_CAS_ENABLED: "true"
+  #这里的地址对应ingress配置文件里网关服务的对外地址
+  APP_SERVER_HOST_URL: "http://dev-center.paas.nwpu.edu.cn"
+  #APP_LOGIN_URL: "/cas/login"
+  #APP_LOGOUT_URL: "/cas/logout"
+  CAS_SERVER_HOST_URL: "http://uis.paas.nwpu.edu.cn/cas"
+
+
+  ##
+  # userDetailsService 的实现配置
+  # memery，基于内存，用户名任意，角色固定，一般用于开发调试
+  # authn, 基于后端管理，采用本地帐号、角色的数据接口
+  # sa, 中台后端服务，建议和cas一起使用
+  #
+  DEVELOPER_CENTER_GATEWAY_ZUUL_SECURITY_USERDETAILS_SERVICE_IMPL: sa
+
+
+  ## 用户授权服务
+  # USER_AUTHORIZATION_SERVICE_APPLICATION_ID: "6"
+
+
+  ZUUL_HTTPCLIENT_CLIENT_AUTH_ENABLED: "false"
+  #ZUUL_HTTPCLIENT_CLIENT_AUTH_KEY_PASSWORD: ""
+  #ZUUL_HTTPCLIENT_CLIENT_AUTH_KEYSTORE_FILE: file:/certs/common/common.keystore
+  #ZUUL_HTTPCLIENT_CLIENT_AUTH_KEYSTORE_PASSWORD: ""
+
+  DEVELOPER_CENTER_SA_SERVER_URL: http://developer-center-backend-sa-svc.developer-center.svc.cluster.local:8080
+  DEVELOPER_CENTER_SA_CLIENT_AUTH_ENABLED: "false"
+  #DEVELOPER_CENTER_SA_CLIENT_AUTH_KEY_PASSWORD: ""
+  #DEVELOPER_CENTER_SA_CLIENT_AUTH_KEYSTORE_FILE: file:/certs/common/common.keystore
+  #DEVELOPER_CENTER_SA_CLIENT_AUTH_KEYSTORE_PASSWORD: ""
+  #DEVELOPER_CENTER_SA_CLIENT_AUTH_TRUSTSTORE_FILE: file:/certs/common/common.truststore
+  #DEVELOPER_CENTER_SA_CLIENT_AUTH_TRUSTSTORE_PASSWORD: ""
+
+  USER_DATA_SERVICE_SERVER_URL: http://user-data-service-goa-svc.user-data-service.svc.cluster.local:8080
+  USER_DATA_SERVICE_CLIENT_AUTH_ENABLED: "false"
+  #USER_DATA_SERVICE_CLIENT_AUTH_KEY_PASSWORD: ""
+  #USER_DATA_SERVICE_CLIENT_AUTH_KEYSTORE_FILE: file:/certs/common/common.keystore
+  #USER_DATA_SERVICE_CLIENT_AUTH_KEYSTORE_PASSWORD: ""
+  #USER_DATA_SERVICE_CLIENT_AUTH_TRUSTSTORE_FILE: file:/certs/common/common.truststore
+  #USER_DATA_SERVICE_CLIENT_AUTH_TRUSTSTORE_PASSWORD: ""
+
+  USER_AUTHZ_SERVICE_SERVER_URL: http://user-authorization-sa-svc.user-authorization-service.svc.cluster.local:8080
+  USER_AUTHZ_SERVICE_CLIENT_AUTH_ENABLED: "false"
+  #USER_AUTHZ_SERVICE_CLIENT_AUTH_KEY_PASSWORD: ""
+  #USER_AUTHZ_SERVICE_CLIENT_AUTH_KEYSTORE_FILE: file:/certs/common/common.keystore
+  #USER_AUTHZ_SERVICE_CLIENT_AUTH_KEYSTORE_PASSWORD: ""
+  #USER_AUTHZ_SERVICE_CLIENT_AUTH_TRUSTSTORE_FILE: file:/certs/common/common.truststore
+  #USER_AUTHZ_SERVICE_CLIENT_AUTH_TRUSTSTORE_PASSWORD: ""
+
+  ZUUL_ROUTES_BFF_ABILITY_MESSAGE_URL: http://message-manager-svc.message-service.svc.cluster.local:8080/manager/api/v1
+  ZUUL_ROUTES_BFF_ADMIN_URL: http://developer-center-bff-svc.developer-center.svc.cluster.local:8080
+  ZUUL_ROUTES_BFF_PORTAL_URL: http://developer-center-bff-svc.developer-center.svc.cluster.local:8080
+
+
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  namespace: developer-center
+  name: developer-center-gateway-zuul-env-secret
+type: Opaque
+data:
+  #SSL_KEYSTORE_PASSWORD: ""
+  #SSL_TRUSTSTORE_PASSWORD: ""
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  namespace: developer-center
+  name: developer-center-gateway-zuul-svc
+  labels:
+    app: developer-center-gateway-zuul
+    needMonitor: 'true'
+spec:
+  ports:
+    - port: 8080
+      targetPort: http
+      protocol: TCP
+      name: http
+    - port: 6060
+      targetPort: http-metrics
+      protocol: TCP
+      name: http-metrics
+  selector:
+    app: developer-center-gateway-zuul
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  namespace: developer-center
+  name: developer-center-gateway-zuul
+spec:
+  selector:
+    matchLabels:
+      app: developer-center-gateway-zuul
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: developer-center-gateway-zuul
+    spec:
+      containers:
+      - name: developer-center-gateway-zuul
+        # 若使用了学校搭设的私有仓库，请修改
+        image: paas.harbor.nwpu.edu.cn/developer-center/developer-center-gateway-zuul:1.0.2-SNAPSHOT
+        imagePullPolicy: Always
+        ports:
+        - containerPort: 8080
+          name: http
+        - containerPort: 6060
+          name: http-metrics
+        envFrom:
+        - configMapRef:
+            name: jvm-env
+        - secretRef:
+            name: redis-env-secret
+        - secretRef:
+            name: developer-center-gateway-zuul-env-secret
+        - configMapRef:
+            name: developer-center-gateway-zuul-env
+        resources:
+          requests:
+            memory: "512Mi"
+          limits:
+            memory: "512Mi"
+        readinessProbe:
+          httpGet:
+            path: /actuator/health
+            port: 8080
+          initialDelaySeconds: 20
+          periodSeconds: 5
+          timeoutSeconds: 5
+          successThreshold: 1
+          failureThreshold: 10
+      imagePullSecrets:
+        - name: harbor-registry
+
diff --git a/project/nwpu/k8s-rancher/open-platform/0.developer-center/4.9.developer-center-admin-ui-spa.yaml b/project/nwpu/k8s-rancher/open-platform/0.developer-center/4.9.developer-center-admin-ui-spa.yaml
new file mode 100644
index 0000000..180f949
--- /dev/null
+++ b/project/nwpu/k8s-rancher/open-platform/0.developer-center/4.9.developer-center-admin-ui-spa.yaml
@@ -0,0 +1,101 @@
+# 4.9.developer-center-admin-ui-spa.yaml
+
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  namespace: developer-center
+  name: developer-center-admin-ui-spa-env
+data:
+  # 如果配置值中 存在 & 的，需要用 \& 进行转义（此说明只在该镜像配置中有效）
+  # 这里需要替换实际环境中的地址
+  MAIN_SERVER: https://dev-admin.nwpu.edu.cn
+
+  DEVELOPER_CENTER_API: https://dev-center.nwpu.edu.cn
+  MESSAGE_SERVICE_API: https://message-service.nwpu.edu.cn/manager
+
+  AUTH_TYPE: cas
+  AUTH_CAS: https://uis.nwpu.edu.cn/cas
+  JWT_ISS: https://uis.nwpu.edu.cn/cas
+  JWT_SECRET: (@<rhnPaUYKC_k770*DuWwYQ_#Zc#8c(2rB?kae)rN)>K7qy)awCjxp$L653Mf$2
+
+
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  namespace: developer-center
+  name: developer-center-admin-ui-spa-env-secret
+type: Opaque
+data:
+
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  namespace: developer-center
+  name: developer-center-admin-ui-spa-svc
+  labels:
+    app: developer-center-admin-ui-spa
+    needMonitor: 'true'
+spec:
+  ports:
+    - port: 80
+      targetPort: http
+      protocol: TCP
+      name: http
+    # - port: 6060
+    #   targetPort: http-metrics
+    #   protocol: TCP
+    #   name: http-metrics
+  selector:
+    app: developer-center-admin-ui-spa
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  namespace: developer-center
+  name: developer-center-admin-ui-spa
+spec:
+  selector:
+    matchLabels:
+      app: developer-center-admin-ui-spa
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: developer-center-admin-ui-spa
+    spec:
+      containers:
+      - name: developer-center-admin-ui-spa
+        # 若使用了学校搭设的私有仓库，请修改
+        image: paas.harbor.nwpu.edu.cn/developer-center/developer-center-admin-ui-spa:0.0.2
+        imagePullPolicy: Always
+        ports:
+        - containerPort: 80
+          name: http
+        # - containerPort: 6060
+        #   name: http-metrics
+        envFrom:
+        - secretRef:
+            name: developer-center-admin-ui-spa-env-secret
+        - configMapRef:
+            name: developer-center-admin-ui-spa-env
+        resources:
+          requests:
+            memory: "128Mi"
+          limits:
+            memory: "128Mi"
+        # readinessProbe:
+        #   httpGet:
+        #     path: /actuator/health
+        #     port: 8080
+        #   initialDelaySeconds: 20
+        #   periodSeconds: 5
+        #   timeoutSeconds: 5
+        #   successThreshold: 1
+        #   failureThreshold: 10
+      imagePullSecrets:
+        - name: harbor-registry
+
diff --git a/project/nwpu/k8s-rancher/open-platform/0.developer-center/4.9.developer-center-portal-ui.yaml b/project/nwpu/k8s-rancher/open-platform/0.developer-center/4.9.developer-center-portal-ui.yaml
new file mode 100644
index 0000000..7d470ab
--- /dev/null
+++ b/project/nwpu/k8s-rancher/open-platform/0.developer-center/4.9.developer-center-portal-ui.yaml
@@ -0,0 +1,104 @@
+# 4.9.developer-center-portal-ui.yaml
+
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  namespace: developer-center
+  name: developer-center-portal-ui-env
+data:
+  # 如果配置值中 存在 & 的，需要用 \& 进行转义（此说明只在该镜像配置中有效）
+  # 这里需要替换实际环境中的地址
+  MAIN_SERVER: https://dev-portal.nwpu.edu.cn
+
+  BASE_API: https://dev-center.nwpu.edu.cn
+
+  MESSAGE_SERVICE_API: https://message-service.nwpu.edu.cn/manager
+  DEVELOPER_API: https://dev-center.nwpu.edu.cn
+
+  AUTH_TYPE: cas
+
+  AUTH_CAS: https://uis.nwpu.edu.cn/cas
+  JWT_ISS: https://uis.nwpu.edu.cn/cas
+  JWT_SECRET: (@<rhnPaUYKC_k770*DuWwYQ_#Zc#8c(2rB?kae)rN)>K7qy)awCjxp$L653Mf$2
+
+  DOC_API: https://dev-center.nwpu.edu.cn
+
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  namespace: developer-center
+  name: developer-center-portal-ui-env-secret
+type: Opaque
+data:
+
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  namespace: developer-center
+  name: developer-center-portal-ui-svc
+  labels:
+    app: developer-center-portal-ui
+    needMonitor: 'true'
+spec:
+  ports:
+    - port: 80
+      targetPort: http
+      protocol: TCP
+      name: http
+    # - port: 6060
+    #   targetPort: http-metrics
+    #   protocol: TCP
+    #   name: http-metrics
+  selector:
+    app: developer-center-portal-ui
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  namespace: developer-center
+  name: developer-center-portal-ui
+spec:
+  selector:
+    matchLabels:
+      app: developer-center-portal-ui
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: developer-center-portal-ui
+    spec:
+      containers:
+      - name: developer-center-portal-ui
+        image: paas.harbor.nwpu.edu.cn/developer-center/developer-center-portal-ui:0.0.2
+        imagePullPolicy: Always
+        ports:
+        - containerPort: 80
+          name: http
+        # - containerPort: 6060
+        #   name: http-metrics
+        envFrom:
+        - secretRef:
+            name: developer-center-portal-ui-env-secret
+        - configMapRef:
+            name: developer-center-portal-ui-env
+        resources:
+          requests:
+            memory: "128Mi"
+          limits:
+            memory: "128Mi"
+        # readinessProbe:
+        #   httpGet:
+        #     path: /actuator/health
+        #     port: 8080
+        #   initialDelaySeconds: 20
+        #   periodSeconds: 5
+        #   timeoutSeconds: 5
+        #   successThreshold: 1
+        #   failureThreshold: 10
+      imagePullSecrets:
+        - name: harbor-registry
+
diff --git a/project/nwpu/k8s-rancher/open-platform/1.0.init.sql b/project/nwpu/k8s-rancher/open-platform/1.0.init.sql
new file mode 100644
index 0000000..299dcc9
--- /dev/null
+++ b/project/nwpu/k8s-rancher/open-platform/1.0.init.sql
@@ -0,0 +1,170 @@
+
+use cas_server;
+
+INSERT INTO `TB_SERVICE` (`ID`, `COMPANY_ID`, `DELETED`, `ADD_ACCOUNT`, `ADD_TIME`, 
+  `NAME`, `DESCRIPTION`, `INFORMATION_URL`, `LOGOUT_URL`, 
+  `RESPONSE_TYPE`, `LOGOUT_TYPE`, 
+  `EVALUATION_ORDER`, `FRIENDLY_NAME`, `REGISTERED_SERVICE_ID`, `SERVICE_ID`, 
+  `ENABLED`, `SSO_ENABLED`, `REQUIRE_ALL_ATTRIBUTES`, 
+  `APPLICATION_ID`, `EXTERNAL_ID`,
+  `ID_TOKEN_ENABLED`, `JWT_AS_SERVICE_TICKET`, 
+  `APPLICATION_DOMAIN`
+)
+VALUES ('31', '1', 0, 'admin', '2020-07-01 00:00:00',
+  '开发者门户', '开发者门户', 'https://dev-portal.nwpu.edu.cn', 'https://dev-portal.nwpu.edu.cn/slo?clearToken=clearToken', 
+  'REDIRECT', 'FRONT_CHANNEL', 
+  31, '开发者门户', 31, 'https://dev-portal.nwpu.edu.cn/(.*)', 
+  1, 1, 1, 
+  '31', '31', 
+  1, 1, 
+  'dev-portal.nwpu.edu.cn'
+);
+
+
+use developer_center;
+
+INSERT INTO `TB_DEV_ACCOUNT` (`ID`, `COMPANY_ID`, `DELETED`, `USERNAME`, `PASSWORD`, `IS_DEVELOPER`,
+  `TYPE`, `NAME`, `STATUS`, `CERTIFICATE_TYPE`, `CERTIFICATE_NUMBER`, `EXTERNAL_ID`
+)
+VALUES ('150', '1', '0', 'defaultDeveloper', 'defaultDeveloper', '1',
+'individual', '上海树维', '1', '1', '150', '150');
+
+INSERT INTO `TB_DEV_ACCOUNT` (`ID`, `COMPANY_ID`, `DELETED`, `USERNAME`, `PASSWORD`, `IS_OPERATOR`,
+  `TYPE`, `NAME`, `STATUS`, `CERTIFICATE_TYPE`, `CERTIFICATE_NUMBER`, `EXTERNAL_ID`
+)
+VALUES ('151', '1', '0', 'defaultOperator', 'defaultOperator', '1',
+'individual', '上海树维管理员', '1', '1', '151','151');
+
+
+INSERT INTO `TB_DEV_ACCOUNT` (`ID`, `COMPANY_ID`, `DELETED`, `ADD_ACCOUNT`, `ADD_TIME`,
+  `USERNAME`, `PASSWORD`, `ENABLED`, `ACCOUNT_NON_EXPIRED`, `ACCOUNT_NON_LOCKED`, `CREDENTIALS_NON_EXPIRED`,
+  `IS_DEVELOPER`, `IS_OPERATOR`, `IS_SCOPE_AUDIT`, `IS_ADMINISTRATOR`, `IS_SCHOOL_ACCOUNT`,
+  `TYPE`, `NAME`, `STATUS`
+)
+VALUES ('13', '1', 0, 'admin', '2020-07-01 00:00:00',
+  'openadmin', 'openadmin', 1, 1, 1, 1,
+  0, 0, 0, 1, 0,
+  'admin', '开放平台管理员', '1'
+);
+
+
+use user;
+
+-- 身份
+INSERT INTO `TB_B_IDENTITY_TYPE`(`ID`, `DELETED`, `PARENT_IDENTITY_TYPE_ID`,
+  `CODE`, `NAME`, `ENABLE`, `SORT`)
+VALUES ('D01', 0, null, 'D01', '个人开发者', 1, 0);
+
+INSERT INTO `TB_B_IDENTITY_TYPE`(`ID`, `DELETED`, `PARENT_IDENTITY_TYPE_ID`,
+  `CODE`, `NAME`, `ENABLE`, `SORT`)
+VALUES ('D02', 0, null, 'D02', '企业开发者', 1, 0);
+commit;
+
+
+-- defaultDeveloper
+INSERT INTO `TB_B_USER` (`ID`, `DELETED`,
+  `UID`, `PASSWORD`, `NAME`, `NAME_SPELLING`, `FULL_NAME_SPELLING`,
+  `CERTIFICATE_TYPE_ID`, `CERTIFICATE_NUMBER`, `PHONE_NUMBER`, `EMAIL`,
+  `GENDER_ID`, `NATION_ID`, `COUNTRY_ID`, `ADDRESS_ID`)
+VALUES ('150', 0,
+  '150', 'defaultDeveloper', '上海树维', 'defaultDeveloper', 'defaultDeveloper',
+  '20001', '150', null, 'defaultDeveloper@supwisdom.com',
+  '30001', '40001', '50156', null);
+
+INSERT INTO `TB_B_SAFETY`(`ID`, `DELETED`, `USER_ID`, `SCORE`, `PASSWORD_SCORE`, `SECURE_EMAIL`, `SECURE_PHONE`)
+VALUES ('150', 0, '150', '0', '0', null, null);
+
+
+INSERT INTO `TB_B_ACCOUNT` (`ID`, `DELETED`, `USER_ID`,
+  `ACCOUNT_NAME`, `ACCOUNT_EXPIRY_DATE`, `ORGANIZATION_ID`, `IDENTITY_TYPE_ID`,
+  `ACTIVATION`, `STATE`, `IS_DATA_CENTER`, 
+  `USER_UID`, `USER_NAME`, `CERTIFICATE_TYPE_ID`, `CERTIFICATE_NUMBER`)
+VALUES ('150', 0, '150',
+  'defaultDeveloper', null, '0', 'D01',
+  1, 'NORMAL', 0, 
+  '150', '上海树维', '20001', '150');
+
+INSERT INTO `TB_B_ACCOUNT_ORGANIZATION` (`ID`, `DELETED`,
+  `ROOT_ORGANIZATION_ID`, `ACCOUNT_ID`, `ORGANIZATION_ID`)
+VALUES ('150_0', 0,
+  '0', '150', '0');
+
+/*
+INSERT INTO `TB_B_ACCOUNT_LABEL`(`ID`, `DELETED`,
+  `ACCOUNT_ID`, `LABEL_ID`)
+VALUES ('150_1', 0, '150', '1');
+*/
+
+commit;
+
+-- defaultOperator
+INSERT INTO `TB_B_USER` (`ID`, `DELETED`,
+  `UID`, `PASSWORD`, `NAME`, `NAME_SPELLING`, `FULL_NAME_SPELLING`,
+  `CERTIFICATE_TYPE_ID`, `CERTIFICATE_NUMBER`, `PHONE_NUMBER`, `EMAIL`,
+  `GENDER_ID`, `NATION_ID`, `COUNTRY_ID`, `ADDRESS_ID`)
+VALUES ('151', 0,
+  '151', 'defaultOperator', '上海树维业务管理员', 'defaultOperator', 'defaultOperator',
+  '20001', '151', null, 'defaultOperator@supwisdom.com',
+  '30001', '40001', '50156', null);
+
+INSERT INTO `TB_B_SAFETY`(`ID`, `DELETED`, `USER_ID`, `SCORE`, `PASSWORD_SCORE`, `SECURE_EMAIL`, `SECURE_PHONE`)
+VALUES ('151', 0, '151', '0', '0', null, null);
+
+
+INSERT INTO `TB_B_ACCOUNT` (`ID`, `DELETED`, `USER_ID`,
+  `ACCOUNT_NAME`, `ACCOUNT_EXPIRY_DATE`, `ORGANIZATION_ID`, `IDENTITY_TYPE_ID`,
+  `ACTIVATION`, `STATE`, `IS_DATA_CENTER`, 
+  `USER_UID`, `USER_NAME`, `CERTIFICATE_TYPE_ID`, `CERTIFICATE_NUMBER`)
+VALUES ('151', 0, '151',
+  'defaultOperator', null, '0', 'D02',
+  1, 'NORMAL', 0, 
+  '151', '上海树维业务管理员', '20001', '151');
+
+INSERT INTO `TB_B_ACCOUNT_ORGANIZATION` (`ID`, `DELETED`,
+  `ROOT_ORGANIZATION_ID`, `ACCOUNT_ID`, `ORGANIZATION_ID`)
+VALUES ('151_0', 0,
+  '0', '151', '0');
+
+/*
+INSERT INTO `TB_B_ACCOUNT_LABEL`(`ID`, `DELETED`,
+  `ACCOUNT_ID`, `LABEL_ID`)
+VALUES ('151_1', 0, '151', '1');
+*/
+
+commit;
+
+-- 平台管理员
+INSERT INTO `TB_B_USER` (`ID`, `DELETED`,
+  `UID`, `PASSWORD`, `NAME`, `NAME_SPELLING`, `FULL_NAME_SPELLING`,
+  `CERTIFICATE_TYPE_ID`, `CERTIFICATE_NUMBER`, `PHONE_NUMBER`, `EMAIL`,
+  `GENDER_ID`, `NATION_ID`, `COUNTRY_ID`, `ADDRESS_ID`)
+VALUES ('13', 0,
+  '13', 'openadmin', '开放平台管理员', 'openadmin', 'openadmin',
+  '20001', '13', null, 'openadmin@supwisdom.com',
+  '30001', '40001', '50156', null);
+
+INSERT INTO `TB_B_SAFETY`(`ID`, `DELETED`, `USER_ID`, `SCORE`, `PASSWORD_SCORE`, `SECURE_EMAIL`, `SECURE_PHONE`)
+VALUES ('13', 0, '13', '0', '0', null, null);
+
+
+INSERT INTO `TB_B_ACCOUNT` (`ID`, `DELETED`, `USER_ID`,
+  `ACCOUNT_NAME`, `ACCOUNT_EXPIRY_DATE`, `ORGANIZATION_ID`, `IDENTITY_TYPE_ID`,
+  `ACTIVATION`, `STATE`, `IS_DATA_CENTER`, 
+  `USER_UID`, `USER_NAME`, `CERTIFICATE_TYPE_ID`, `CERTIFICATE_NUMBER`)
+VALUES ('13', 0, '13',
+  'openadmin', null, '0', 'D02',
+  1, 'NORMAL', 0, 
+  '13', '开放平台管理员', '20001', '13');
+
+INSERT INTO `TB_B_ACCOUNT_ORGANIZATION` (`ID`, `DELETED`,
+  `ROOT_ORGANIZATION_ID`, `ACCOUNT_ID`, `ORGANIZATION_ID`)
+VALUES ('13_0', 0,
+  '0', '13', '0');
+
+/*
+INSERT INTO `TB_B_ACCOUNT_LABEL`(`ID`, `DELETED`,
+  `ACCOUNT_ID`, `LABEL_ID`)
+VALUES ('13_1', 0, '13', '1');
+*/
+
+commit;
diff --git "a/project/nwpu/k8s-rancher/open-platform/1.0.\344\272\221\345\271\263\345\217\260-\345\274\200\346\224\276\345\271\263\345\217\260\344\275\277\347\224\250\346\211\213\345\206\214.md" "b/project/nwpu/k8s-rancher/open-platform/1.0.\344\272\221\345\271\263\345\217\260-\345\274\200\346\224\276\345\271\263\345\217\260\344\275\277\347\224\250\346\211\213\345\206\214.md"
new file mode 100644
index 0000000..2e0cb08
--- /dev/null
+++ "b/project/nwpu/k8s-rancher/open-platform/1.0.\344\272\221\345\271\263\345\217\260-\345\274\200\346\224\276\345\271\263\345\217\260\344\275\277\347\224\250\346\211\213\345\206\214.md"
@@ -0,0 +1,148 @@
+# 云平台-开放平台使用手册
+
+
+## 部署更新
+
+  DEVELOPER_CENTER_SPA_URL: https://dev-admin.nwpu.edu.cn
+
+  DEVELOPER_CENTER_API_PREFIX: https://dev-center.nwpu.edu.cn
+  MESSAGE_SERVICE_API_PREFIX: https://message-service.nwpu.edu.cn/manager
+
+
+{
+  "DEVELOPER_CENTER_API": "https://dev-center.nwpu.edu.cn",
+  "MESSAGE_SERVICE_API": "https://message-service.nwpu.edu.cn/manager",
+}
+
+
+## 1.添加角色
+
+云平台菜单里：
+
+    基础管理-角色管理-添加：
+        代码 ：open-platform-admin
+        名称： 开放平台管理员
+
+## 2.添加菜单
+
+可以选择手动添加或者数据导入，步骤：   
+
+数据导入：  
+
+    基础管理-菜单管理-导入：
+
+注意修改为实际环境中的地址
+
+```json
+
+[
+  {
+    "id": "90000",
+    "parentIdOrCode": "1",
+    "code": "developer-center",
+    "name": "开放平台",
+    "memo": "",
+    "status": "1",
+    "origin": "https://admin-platform.nwpu.edu.cn",
+    "order": 90000,
+    "resourceIdOrCodes": [],
+    "url": "/developer-center/application",
+    "icon": ""
+  },
+  {
+    "id": "90100",
+    "parentIdOrCode": "90000",
+    "code": "developerAccount",
+    "name": "开发者账号管理",
+    "memo": "",
+    "status": "1",
+    "origin": "https://admin-platform.nwpu.edu.cn",
+    "order": 90100,
+    "resourceIdOrCodes": [],
+    "url": "/developer-center/developerAccount",
+    "icon": "su-icon-yingyongjuese"
+  },
+  {
+    "id": "90200",
+    "parentIdOrCode": "90000",
+    "code": "businessManage",
+    "name": "业务管理员账号管理",
+    "memo": "",
+    "status": "1",
+    "origin": "https://admin-platform.nwpu.edu.cn",
+    "order": 90200,
+    "resourceIdOrCodes": [],
+    "url": "/developer-center/businessManage",
+    "icon": "su-icon-fuwupingjiaguanli"
+  },
+  {
+    "id": "90300",
+    "parentIdOrCode": "90000",
+    "code": "scopeManage",
+    "name": "Scope审核员账号管理",
+    "memo": "",
+    "status": "0",
+    "origin": "https://admin-platform.nwpu.edu.cn",
+    "order": 90300,
+    "url": "/developer-center/scopeManage",
+    "icon": "su-icon-daifasong"
+  },
+  {
+    "id": "90400",
+    "parentIdOrCode": "90000",
+    "code": "applicationManage",
+    "name": "应用服务管理",
+    "memo": "",
+    "status": "1",
+    "origin": "https://admin-platform.nwpu.edu.cn",
+    "order": 90400,
+    "url": "/developer-center/applicationManage",
+    "icon": "su-icon-calendar-1"
+  },
+  {
+    "id": "90500",
+    "parentIdOrCode": "90000",
+    "code": "basicAbilityManagement",
+    "name": "基础能力管理",
+    "memo": "",
+    "status": "1",
+    "origin": "https://admin-platform.nwpu.edu.cn",
+    "order": 90500,
+    "url": "/developer-center/basicAbilityManagement",
+    "icon": "su-icon-neirongguanli"
+  },
+  {
+    "id": "90600",
+    "parentIdOrCode": "90000",
+    "code": "businessDomainManage",
+    "name": "业务域管理",
+    "memo": "",
+    "status": "1",
+    "origin": "https://admin-platform.nwpu.edu.cn",
+    "order": 90600,
+    "url": "/developer-center/businessDomainManage",
+    "icon": "su-icon-fuwupingjiaguanli"
+  },
+  {
+    "id": "90700",
+    "parentIdOrCode": "90000",
+    "code": "auditManagement",
+    "name": "审核管理",
+    "memo": "",
+    "status": "1",
+    "origin": "https://admin-platform.nwpu.edu.cn",
+    "order": 90700,
+    "url": "/developer-center/auditManagement",
+    "icon": "su-icon-biaoqian"
+  }
+]
+
+```
+
+## 3.关联权限
+
+云平台菜单里：基础管理-角色管理，选择创建的角色进行权限关联。在展开的菜单中，选择刚刚添加的菜单，然后保存。
+
+## 4.账号关联角色
+
+云平台菜单里：授权管理-应用角色管理，选择创建的角色，将开放平台管理员账号设置为开放平台管理员这个角色。
diff --git a/project/nwpu/k8s-rancher/open-platform/1.minio-sa/01-namespace.yaml b/project/nwpu/k8s-rancher/open-platform/1.minio-sa/01-namespace.yaml
new file mode 100644
index 0000000..230f587
--- /dev/null
+++ b/project/nwpu/k8s-rancher/open-platform/1.minio-sa/01-namespace.yaml
@@ -0,0 +1,7 @@
+####################################################
+# namespace
+####################################################
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: developer-center-minio-sa
diff --git a/project/nwpu/k8s-rancher/open-platform/1.minio-sa/02-registry.yaml b/project/nwpu/k8s-rancher/open-platform/1.minio-sa/02-registry.yaml
new file mode 100644
index 0000000..8884c36
--- /dev/null
+++ b/project/nwpu/k8s-rancher/open-platform/1.minio-sa/02-registry.yaml
@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: Secret
+type: kubernetes.io/dockerconfigjson
+metadata:
+  name: harbor-supwisdom
+  namespace: developer-center-minio-sa
+data:
+  # 替换成自己的仓库用户名密码配置
+  .dockerconfigjson: eyJhdXRocyI6eyJoYXJib3Iuc3Vwd2lzZG9tLmNvbSI6eyJwYXNzd29yZCI6IlBXTWdQODVxaUxGQzIwIiwidXNlcm5hbWUiOiJyYW5jaGVyLmRldm9wcyJ9fX0=
diff --git a/project/nwpu/k8s-rancher/open-platform/1.minio-sa/03-1-configmap.yaml b/project/nwpu/k8s-rancher/open-platform/1.minio-sa/03-1-configmap.yaml
new file mode 100644
index 0000000..d4416a2
--- /dev/null
+++ b/project/nwpu/k8s-rancher/open-platform/1.minio-sa/03-1-configmap.yaml
@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  namespace: developer-center-minio-sa
+  name: minio-sa-config
+data:
+  # Minio参数,这里需要改为依赖的minio服务的地址
+  MINIO_ENDPOINT: developer-center-minio-test.paas.newcapec.cn
+  MINIO_USE_SSL: "false"
diff --git a/project/nwpu/k8s-rancher/open-platform/1.minio-sa/03-2-secret.yaml b/project/nwpu/k8s-rancher/open-platform/1.minio-sa/03-2-secret.yaml
new file mode 100644
index 0000000..37fdf3d
--- /dev/null
+++ b/project/nwpu/k8s-rancher/open-platform/1.minio-sa/03-2-secret.yaml
@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  namespace: developer-center-minio-sa
+  name: minio-sa-secret
+type: Opaque
+data:
+  # Minio参数
+  MINIO_ACCESS_KEY: bWluaW9hZG1pbg==
+  MINIO_SECRET_KEY: bWluaW9hZG1pbg==
+  # API Http basic auth参数
+  SA_API_USERNAME: c2FhZG1pbg==
+  SA_API_PASSWORD: c2FhZG1pbg==
+  # Pprof参数
+  PPROF_USERNAME: cHByb2ZhZG1pbg==
+  PPROF_PASSWORD: cHByb2ZhZG1pbg==
+
diff --git a/project/nwpu/k8s-rancher/open-platform/1.minio-sa/03-3-svc.yaml b/project/nwpu/k8s-rancher/open-platform/1.minio-sa/03-3-svc.yaml
new file mode 100644
index 0000000..8b4af2f
--- /dev/null
+++ b/project/nwpu/k8s-rancher/open-platform/1.minio-sa/03-3-svc.yaml
@@ -0,0 +1,19 @@
+apiVersion: v1
+kind: Service
+metadata:
+  namespace: developer-center-minio-sa
+  name: minio-sa-svc
+  labels:
+    app: minio-sa-svc
+spec:
+  ports:
+  - port: 9090
+    targetPort: http
+    protocol: TCP
+    name: http
+  - port: 6060
+    targetPort: http-metrics
+    protocol: TCP
+    name: http-metrics
+  selector:
+    app: minio-sa
diff --git a/project/nwpu/k8s-rancher/open-platform/1.minio-sa/03-4-deployment.yaml b/project/nwpu/k8s-rancher/open-platform/1.minio-sa/03-4-deployment.yaml
new file mode 100644
index 0000000..3a58ea0
--- /dev/null
+++ b/project/nwpu/k8s-rancher/open-platform/1.minio-sa/03-4-deployment.yaml
@@ -0,0 +1,39 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: minio-sa
+  namespace: developer-center-minio-sa
+spec:
+  selector:
+    matchLabels:
+      app: minio-sa
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: minio-sa
+    spec:
+      containers:
+      - name: minio-sa
+        # 根据情况修改镜像地址
+        image: harbor.supwisdom.com/institute/minio-sa:0.1.0
+        imagePullPolicy: Always
+        ports:
+        - containerPort: 9090
+          name: http
+        - containerPort: 6060
+          name: http-metrics
+        envFrom:
+        - configMapRef:
+            name: minio-sa-config
+        - secretRef:
+            name: minio-sa-secret
+        resources:
+          requests:
+            cpu: 100m
+            memory: "64Mi"
+          limits:
+            cpu: 1000m
+            memory: "128Mi"
+      imagePullSecrets:
+        - name: harbor-supwisdom
diff --git a/project/nwpu/k8s-rancher/open-platform/1.minio-sa/04-ingress.yaml b/project/nwpu/k8s-rancher/open-platform/1.minio-sa/04-ingress.yaml
new file mode 100644
index 0000000..06d991d
--- /dev/null
+++ b/project/nwpu/k8s-rancher/open-platform/1.minio-sa/04-ingress.yaml
@@ -0,0 +1,24 @@
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+  name: minio-sa-ingress
+  namespace: developer-center-minio-sa
+    #  annotations:
+    # cert-manager.io/cluster-issuer: "letsencrypt-prod"
+    # 如果采用letsencrypt自动签发证书
+  # nginx.ingress.kubernetes.io/ssl-redirect: "true"
+spec:
+  # tls:
+  ## 替换成正确的域名
+  # - hosts:
+  #   - minio-sa-test.paas.<xxx>.edu.cn
+  #   secretName: minio-sa-tls
+  rules:
+    # 替换成正确的域名
+    - host: develop-center-minio-sa-test.paas.newcapec.cn
+      http:
+        paths:
+          - path: /
+            backend:
+              serviceName: minio-sa-svc
+              servicePort: http
\ No newline at end of file