diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 525e8e6..22c2de7 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -75,11 +75,11 @@ jobs:
 
 
       - name: k8s Check and Apply New Deployment
-        uses: http://139.9.216.111:3000/bamanker/steevchen-kubectl@master
+        uses: http://139.9.216.111:3000/bamanker/kubectl@master
+        env:
+          KUBE_CONFIG: ${{ secrets.KUBE_CONFIG }}
         with:
-          config: ${{ secrets.KUBE_CONFIG }}
-          command: ls
-#          command: apply -f http://${{ secrets.DEVOPS_GITEA_TOKEN }}@139.9.216.111:3000/bamanker/myk3sTest/src/branch/master/.deploy/deployment.yml
+          command: apply -f deployment.yml
 #      - name: k8s Update Deployment
 #        uses: http://139.9.216.111:3000/bamanker/kubectl@master
 #        env:
diff --git a/deployment.yml b/deployment.yml
new file mode 100644
index 0000000..306f262
--- /dev/null
+++ b/deployment.yml
@@ -0,0 +1,79 @@
+---
+## k8s默认是访问不了外部服务的，需要代理,以mysql和redis为例，代理myservice名称到192.168.0.100，配置文件中对应的ip修改为myservice
+#apiVersion: v1
+#kind: Endpoints
+#metadata:
+#  name: myservice
+#subsets:
+#  - addresses:
+#      - ip: 192.168.0.100
+#    ports:
+#      - port: 6379
+#        protocol: TCP
+#        name: redis
+#      - port: 3306
+#        protocol: TCP
+#        name: mysql
+#---
+#apiVersion: v1
+#kind: Service
+#metadata:
+#  name: myservice
+#spec:
+#  ports:
+#    - port: 6379
+#      targetPort: 6379
+#      protocol: TCP
+#      name: redis
+#    - port: 3306
+#      targetPort: 3306
+#      protocol: TCP
+#      name: mysql
+#
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: myk3sTest
+spec:
+  replicas: 2
+  revisionHistoryLimit: 3
+  selector:
+    matchLabels:
+      app: myk3sTest
+  template:
+    metadata:
+      labels:
+        app: myk3sTest
+    spec:
+      containers:
+        - image: ${env.REGISTRY}/${env.IMAGE_NAME}:${steps.datetime.outputs.datetime}
+          name: myk3sTest
+          imagePullPolicy: Always
+          readinessProbe:
+            httpGet:
+              path: /actuator/health
+              port: 9090
+            initialDelaySeconds: 1
+            successThreshold: 5
+          ports:
+            - containerPort: 9090
+      imagePullSecrets:
+        - name: dockerhub-id
+
+---
+
+apiVersion: v1
+kind: Service
+metadata:
+  name: myk3sTest
+spec:
+  type: NodePort
+  externalTrafficPolicy: Local
+  ports:
+    - name: http-8080
+      protocol: TCP
+      port: 9090
+      nodePort: 30099
+  selector:
+    app: myk3sTest