23 镜像仓库和k8环境 一篇就够

Harbor

<u>http://harbor.bicisims.com/harbor/projects</u>

admin/Harbor12345

kubesphere

<u>http://121.36.161.70:30880/</u>

xunxingzhe/Admin123

1.工作负载

①discover

kind: Deployment

apiVersion: apps/v1

metadata:

name: discover

namespace: pgxt-test

labels:

io.kompose.service: discover

annotations:

deployment.kubernetes.io/revision: '5'

kompose.cmd: kompose convert

kompose.version: 1.26.0 (40646f47)

kubesphere.io/creator: admin

spec:

replicas: 1

selector:

matchLabels:

  io.kompose.service: discover

template:

metadata:

  creationTimestamp: null

  labels:

    io.kompose.network/energy: 'true'

    io.kompose.service: discover

  annotations:

    kompose.cmd: kompose convert

    kompose.version: 1.26.0 (40646f47)

    kubesphere.io/restartedAt: '2022-05-20T08:46:16.819Z'

spec:

  containers:

    - name: discover

      image: 'harbor.bicisims.com/pgxt-test/pgxtmes-component-discover:latest'

      ports:

        - containerPort: 31001

          protocol: TCP

      resources: {}

      terminationMessagePath: /dev/termination-log

      terminationMessagePolicy: File

      imagePullPolicy: Always

  restartPolicy: Always

  terminationGracePeriodSeconds: 30

  dnsPolicy: ClusterFirst

  securityContext: {}

  imagePullSecrets:

    - name: harbor

  schedulerName: default-scheduler

strategy:

type: RollingUpdate

rollingUpdate:

  maxUnavailable: 25%

  maxSurge: 25%

revisionHistoryLimit: 10

progressDeadlineSeconds: 600

②gateway

kind: Deployment

apiVersion: apps/v1

metadata:

name: gateway

namespace: pgxt-test

labels:

io.kompose.service: gateway

annotations:

deployment.kubernetes.io/revision: '11'

kompose.cmd: kompose convert

kompose.version: 1.26.0 (40646f47)

kubesphere.io/creator: admin

spec:

replicas: 1

selector:

matchLabels:

  io.kompose.service: gateway

template:

metadata:

  creationTimestamp: null

  labels:

    io.kompose.network/energy: 'true'

    io.kompose.service: gateway

  annotations:

    kompose.cmd: kompose convert

    kompose.version: 1.26.0 (40646f47)

    kubesphere.io/restartedAt: '2022-05-20T08:56:06.051Z'

spec:

  containers:

    - name: gateway

      image: 'harbor.bicisims.com/pgxt-test/pgxtmes-component-gateway:latest'

      ports:

        - containerPort: 31099

          protocol: TCP

      env:

        - name: COMPONENT_DISCOVER_URL

          value: 'http://discover.pgxt-test:31001/eureka/'

        - name: EUREKA_INSTANCE_IP_ADDRESS

          valueFrom:

            fieldRef:

              apiVersion: v1

              fieldPath: status.podIP

      resources: {}

      terminationMessagePath: /dev/termination-log

      terminationMessagePolicy: File

      imagePullPolicy: Always

  restartPolicy: Always

  terminationGracePeriodSeconds: 30

  dnsPolicy: ClusterFirst

  securityContext: {}

  imagePullSecrets:

    - name: harbor

  schedulerName: default-scheduler

strategy:

type: RollingUpdate

rollingUpdate:

  maxUnavailable: 25%

  maxSurge: 25%

revisionHistoryLimit: 10

progressDeadlineSeconds: 600

③system-consumer

kind: Deployment

apiVersion: apps/v1

metadata:

name: system-consumer

namespace: pgxt-test

labels:

io.kompose.service: system-consumer

annotations:

deployment.kubernetes.io/revision: '7'

kompose.cmd: kompose convert

kompose.version: 1.26.0 (40646f47)

kubesphere.io/creator: admin

spec:

replicas: 1

selector:

matchLabels:

  io.kompose.service: system-consumer

template:

metadata:

  creationTimestamp: null

  labels:

    io.kompose.network/energy: 'true'

    io.kompose.service: system-consumer

  annotations:

    kompose.cmd: kompose convert

    kompose.version: 1.26.0 (40646f47)

    kubesphere.io/restartedAt: '2022-05-20T09:30:55.232Z'

spec:

  containers:

    - name: system-consumer

      image: 'harbor.bicisims.com/pgxt-test/pgxtmes-consumer-system:latest'

      ports:

        - containerPort: 32202

          protocol: TCP

      env:

        - name: COMPONENT_DISCOVER_URL

          value: 'http://discover.pgxt-test:31001/eureka/'

        - name: EUREKA_INSTANCE_IP_ADDRESS

          valueFrom:

            fieldRef:

              apiVersion: v1

              fieldPath: status.podIP

      resources: {}

      terminationMessagePath: /dev/termination-log

      terminationMessagePolicy: File

      imagePullPolicy: Always

  restartPolicy: Always

  terminationGracePeriodSeconds: 30

  dnsPolicy: ClusterFirst

  securityContext: {}

  imagePullSecrets:

    - name: harbor

  schedulerName: default-scheduler

strategy:

type: RollingUpdate

rollingUpdate:

  maxUnavailable: 25%

  maxSurge: 25%

revisionHistoryLimit: 10

progressDeadlineSeconds: 600

④system-provider

kind: Deployment

apiVersion: apps/v1

metadata:

name: stock-provider

namespace: pgxt-test

labels:

io.kompose.service: stock-provider

annotations:

deployment.kubernetes.io/revision: '1'

kompose.cmd: kompose convert

kompose.version: 1.26.0 (40646f47)

kubesphere.io/creator: admin

spec:

replicas: 1

selector:

matchLabels:

  io.kompose.service: stock-provider

template:

metadata:

  creationTimestamp: null

  labels:

    io.kompose.network/energy: 'true'

    io.kompose.service: stock-provider

  annotations:

    kompose.cmd: kompose convert

    kompose.version: 1.26.0 (40646f47)

    kubesphere.io/restartedAt: '2022-05-20T09:47:32.928Z'

spec:

  containers:

    - name: stock-provider

      image: 'harbor.bicisims.com/pgxt-test/pgxtmes-provider-stock:latest'

      ports:

        - containerPort: 31205

          protocol: TCP

      env:

        - name: COMPONENT_DISCOVER_URL

          value: 'http://discover.pgxt-test:31001/eureka/'

        - name: EUREKA_INSTANCE_IP_ADDRESS

          valueFrom:

            fieldRef:

              apiVersion: v1

              fieldPath: status.podIP

      resources: {}

      terminationMessagePath: /dev/termination-log

      terminationMessagePolicy: File

      imagePullPolicy: Always

  restartPolicy: Always

  terminationGracePeriodSeconds: 30

  dnsPolicy: ClusterFirst

  securityContext: {}

  imagePullSecrets:

    - name: harbor

  schedulerName: default-scheduler

strategy:

type: RollingUpdate

rollingUpdate:

  maxUnavailable: 25%

  maxSurge: 25%

revisionHistoryLimit: 10

progressDeadlineSeconds: 600

⑤Nginx-web

kind: Deployment

apiVersion: apps/v1

metadata:

name: nginx-web

namespace: pgxt-test

labels:

io.kompose.service: nginx-web

annotations:

deployment.kubernetes.io/revision: '10'

kompose.cmd: kompose convert

kompose.version: 1.26.0 (40646f47)

kubectl.kubernetes.io/last-applied-configuration: >

  {"apiVersion":"apps/v1","kind":"Deployment","metadata":{"annotations":{"kompose.cmd":"kompose

  convert","kompose.version":"1.26.0

  (40646f47)"},"creationTimestamp":null,"labels":{"io.kompose.service":"nginx-web"},"name":"nginx-web","namespace":"default"},"spec":{"replicas":1,"selector":{"matchLabels":{"io.kompose.service":"nginx-web"}},"strategy":{"type":"Recreate"},"template":{"metadata":{"annotations":{"kompose.cmd":"kompose

  convert","kompose.version":"1.26.0

  (40646f47)"},"creationTimestamp":null,"labels":{"io.kompose.network/dp":"true","io.kompose.service":"nginx-web"}},"spec":{"containers":[{"image":"nginx:latest","name":"nginx-web","ports":[{"containerPort":80,"name":"java"},{"containerPort":81,"name":"static"}],"resources":{},"volumeMounts":[{"mountPath":"/etc/localtime","name":"timezone","readOnly":true},{"mountPath":"/etc/nginx/nginx.conf","name":"nginx-config","readOnly":true,"subPath":"nginx.conf"},{"mountPath":"/var/log/nginx","name":"nginx-web-log"},{"mountPath":"/opt/dist","name":"nginx-web-dist1","readOnly":true},{"mountPath":"/usr/share/nginx/html","name":"nginx-web-dist"}]}],"volumes":[{"hostPath":{"path":"/usr/share/zoneinfo/Asia/Shanghai"},"name":"timezone"},{"configMap":{"items":[{"key":"nginx.conf","path":"nginx.conf"}],"name":"nginx-config"},"name":"nginx-config"},{"name":"nginx-web-log","nfs":{"path":"/data/nginx-web/log","server":"192.168.0.190"}},{"name":"nginx-web-dist","nfs":{"path":"/data/nginx-web/dist","server":"192.168.0.190"}},{"name":"nginx-web-dist1","nfs":{"path":"/data/nginx-web/build","server":"192.168.0.190"}}]}}}}

kubesphere.io/creator: admin

spec:

replicas: 1

selector:

matchLabels:

  io.kompose.service: nginx-web

template:

metadata:

  creationTimestamp: null

  labels:

    io.kompose.network/nginx: 'true'

    io.kompose.service: nginx-web

  annotations:

    kompose.cmd: kompose convert

    kompose.version: 1.26.0 (40646f47)

    kubesphere.io/restartedAt: '2022-05-20T09:21:04.979Z'

spec:

  volumes:

    - name: timezone

      hostPath:

        path: /usr/share/zoneinfo/Asia/Shanghai

        type: ''

    - name: nginx-config

      configMap:

        name: nginx-config

        items:

          - key: nginx.conf

            path: nginx.conf

        defaultMode: 420

    - name: nginx-web-build

      nfs:

        server: 192.168.0.190

        path: /data/nginx-web/pgxt/build

  containers:

    - name: nginx-web

      image: 'nginx:latest'

      ports:

        - name: server

          containerPort: 80

          protocol: TCP

      resources: {}

      volumeMounts:

        - name: timezone

          readOnly: true

          mountPath: /etc/localtime

        - name: nginx-config

          readOnly: true

          mountPath: /etc/nginx/nginx.conf

          subPath: nginx.conf

        - name: nginx-web-build

          mountPath: /usr/share/nginx/build/html

      terminationMessagePath: /dev/termination-log

      terminationMessagePolicy: File

      imagePullPolicy: IfNotPresent

  restartPolicy: Always

  terminationGracePeriodSeconds: 30

  dnsPolicy: ClusterFirst

  securityContext: {}

  schedulerName: default-scheduler

strategy:

type: Recreate

revisionHistoryLimit: 10

progressDeadlineSeconds: 600

2.服务

①discover

kind: Service

apiVersion: v1

metadata:

name: discover

namespace: pgxt-test

labels:

app: discover

annotations:

kubesphere.io/creator: admin

spec:

ports:

- name: discover

  protocol: TCP

  port: 31001

  targetPort: 31001

  nodePort: 30621

selector:

io.kompose.network/energy: 'true'

io.kompose.service: discover

clusterIP: 10.96.7.13

clusterIPs:

- 10.96.7.13

type: NodePort

sessionAffinity: None

externalTrafficPolicy: Cluster

ipFamilies:

- IPv4

ipFamilyPolicy: SingleStack

internalTrafficPolicy: Cluster

②Nginx-web

kind: Service

apiVersion: v1

metadata:

name: nginx-web

namespace: pgxt-test

labels:

app: nginx-web

annotations:

kubesphere.io/creator: admin

spec:

ports:

- name: http-web

  protocol: TCP

  port: 80

  targetPort: 80

  nodePort: 30480

selector:

io.kompose.network/nginx: 'true'

io.kompose.service: nginx-web

clusterIP: 10.96.244.71

clusterIPs:

- 10.96.244.71

type: NodePort

sessionAffinity: None

externalTrafficPolicy: Cluster

ipFamilies:

- IPv4

ipFamilyPolicy: SingleStack

internalTrafficPolicy: Cluster

③gateway

kind: Service

apiVersion: v1

metadata:

name: gateway

namespace: pgxt-test

labels:

app: gateway

annotations:

kubesphere.io/creator: admin

spec:

ports:

- name: gateway

  protocol: TCP

  port: 31099

  targetPort: 31099

selector:

io.kompose.service: gateway

clusterIP: 10.96.212.251

clusterIPs:

- 10.96.212.251

type: ClusterIP

sessionAffinity: None

ipFamilies:

- IPv4

ipFamilyPolicy: SingleStack

internalTrafficPolicy: Cluster

3 应用路由

kind: Ingress

apiVersion: networking.k8s.io/v1

metadata:

name: pgxtmes

namespace: pgxt-test

annotations:

kubesphere.io/creator: admin

spec:

ingressClassName: nginx

rules:

- host: pgxtmes.bicitech.cn

  http:

    paths:

      - path: /

        pathType: Prefix

        backend:

          service:

            name: nginx-web

            port:

              number: 80

4 保密字典

①harbor

kind: Secret

apiVersion: v1

metadata:

name: harbor

namespace: pgxt-test

annotations:

kubesphere.io/creator: admin

secret.kubesphere.io/force-insecure: 'true'

data:

.dockerconfigjson: >-

eyJhdXRocyI6eyJodHRwOi8vaGFyYm9yLmJpY2lzaW1zLmNvbSI6eyJ1c2VybmFtZSI6ImFkbWluIiwicGFzc3dvcmQiOiJIYXJib3IxMjM0NSIsImVtYWlsIjoiIiwiYXV0aCI6IllXUnRhVzQ2U0dGeVltOXlNVEl6TkRVPSJ9fX0=

type: kubernetes.io/dockerconfigjson

②default-token-g4mxn

kind: Secret

apiVersion: v1

metadata:

name: default-token-g4mxn

namespace: pgxt-test

annotations:

kubernetes.io/service-account.name: default

kubernetes.io/service-account.uid: 69c66e88-9aea-49a7-8a11-7a6b2c319629

data:

ca.crt: >-

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

namespace: cGd4dC10ZXN0

token: >-

ZXlKaGJHY2lPaUpTVXpJMU5pSXNJbXRwWkNJNkluVkNSbFJpY1c1U1VIVlRkRE00UlhGNldXRlZaV00zTlhJMU9VcFRPVlF6WVdad2N6Z3haV3M1ZW1NaWZRLmV5SnBjM01pT2lKcmRXSmxjbTVsZEdWekwzTmxjblpwWTJWaFkyTnZkVzUwSWl3aWEzVmlaWEp1WlhSbGN5NXBieTl6WlhKMmFXTmxZV05qYjNWdWRDOXVZVzFsYzNCaFkyVWlPaUp3WjNoMExYUmxjM1FpTENKcmRXSmxjbTVsZEdWekxtbHZMM05sY25acFkyVmhZMk52ZFc1MEwzTmxZM0psZEM1dVlXMWxJam9pWkdWbVlYVnNkQzEwYjJ0bGJpMW5ORzE0YmlJc0ltdDFZbVZ5Ym1WMFpYTXVhVzh2YzJWeWRtbGpaV0ZqWTI5MWJuUXZjMlZ5ZG1salpTMWhZMk52ZFc1MExtNWhiV1VpT2lKa1pXWmhkV3gwSWl3aWEzVmlaWEp1WlhSbGN5NXBieTl6WlhKMmFXTmxZV05qYjNWdWRDOXpaWEoyYVdObExXRmpZMjkxYm5RdWRXbGtJam9pTmpsak5qWmxPRGd0T1dGbFlTMDBPV0UzTFRoaE1URXROMkUyWWpKak16RTVOakk1SWl3aWMzVmlJam9pYzNsemRHVnRPbk5sY25acFkyVmhZMk52ZFc1ME9uQm5lSFF0ZEdWemREcGtaV1poZFd4MEluMC5OaVd1YTJic21nZ3dQaElWc3p4UURmTEMtVFlOMXZVMDJiZjF1aEJZbWlUcVJuYnM1RWpiMk9MaWFOdzdHSVZDdTlLSDl6SjFDQWZOb3Via05ZaF9RNTJ0YmU4b1pKRHZnNXk1T1h4UXZjcXhuRnVtX19ZYU1MdFZsdS1MempGQzhpbVFNZFdDUUlMeF9vOElac1NOY0I2R1RsaktYcEZuUnMtZnRXN1dJOVFMbWR0RDQzMWtzNkd1aHdOQ25KTUx6dlRVNFVWcmplYnRMTEg4d3RONmZObnJzVndvMXI0MWhFMklfb3RrRFhpN2ota3hMV21rNmdGb0tqSTJ5eUdpRkprN0lxdlo0WVpnNU80WFlWaHdFejZ0TTgyc3Z1aU1zNkxDdWVDRHBIWmNtNVl4aUR1VkhtUy1SUXg1MFd3NHFJdVk0bEk5VzNJb0hBSzVQM1NFZ3c=

type: kubernetes.io/service-account-token

5 配置字段

①nginx-config

kind: ConfigMap

apiVersion: v1

metadata:

name: nginx-config

namespace: pgxt-test

annotations:

kubesphere.io/creator: admin

data:

nginx.conf: |

user  nginx;

worker_processes  auto;

error_log  /var/log/nginx/error.log notice;

pid        /var/run/nginx.pid;

events {

    worker_connections  1024;

}

http {

    include       /etc/nginx/mime.types;

    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '

                      '$status $body_bytes_sent "$http_referer" '

                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile        on;

    #tcp_nopush     on;

    keepalive_timeout  65;

    #gzip  on;

     map $http_upgrade $connection_upgrade {

    default          keep-alive;  #默认为keep-alive 可以支持 一般http请求

    'websocket'      upgrade;     #如果为websocket 则为 upgrade 可升级的。

}

 upstream gateway-service{

        server gateway:31099;

    }

server {

                listen      80;

                location / {

                root /usr/share/nginx/build/html;

                proxy_set_header Host $host;

                proxy_set_header X-Real-IP $remote_addr;

                proxy_set_header X-Forwarded-For $remote_addr;

                index index.html;

                try_files $uri $uri/ /index.html;

                }

                # 静态资源

                location ~ .*\.(gif|jpg|jpeg|png|flac|mp3|mkv|apk)$ {

                root /usr/share/nginx/build/html;

                }

                location /api {

                proxy_connect_timeout 300;

                proxy_read_timeout 300;

                proxy_send_timeout 300;

                proxy_set_header X-Real-IP $remote_addr;

                proxy_pass http://gateway-service/api;

                client_max_body_size 20m;

                }

}

}

②kube-root-ca.crt

kind: ConfigMap

apiVersion: v1

metadata:

name: kube-root-ca.crt

namespace: pgxt-test

annotations:

kubernetes.io/description: >-

  Contains a CA bundle that can be used to verify the kube-apiserver when

  using internal endpoints such as the internal service IP or

  kubernetes.default.svc. No other usage is guaranteed across distributions

  of Kubernetes clusters.

data:

ca.crt: |

-----BEGIN CERTIFICATE-----

MIIC/jCCAeagAwIBAgIBADANBgkqhkiG9w0BAQsFADAVMRMwEQYDVQQDEwprdWJl

cm5ldGVzMB4XDTIyMDMxODAxNTYxNVoXDTMyMDMxNTAxNTYxNVowFTETMBEGA1UE

AxMKa3ViZXJuZXRlczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANZx

OUpun0KME9kJEu+s+mEefIx+a6mozpgr02XrRKu23YGIAPutl+NzcsjZp6mDvLev

+aS8qZ0CETWXt/znNErUbTA0lKZWFkBdm4VT5+Gw4uc3FlmUmTHFre6C/YrYIskf

aZE73Qrd5wrvTe/LrohmIY0jcdkntrqIoX+dZrmSWuIZSo8uMVEJbZcAuGI81Rgc

FmZX0iY6oUWl2i7M1EveV1GcJy/rb5qLpVG23RNAiqZAaYRCmYR7RCq/LIRrOkkn

z4D1yy9tYfopWXqDmhGuJywaEMBFurWrwTiHN90vgBJ2ZAmEDsR6YSfNTfbx/t2S

hXXEh/PArMX0JWq2UPcCAwEAAaNZMFcwDgYDVR0PAQH/BAQDAgKkMA8GA1UdEwEB

/wQFMAMBAf8wHQYDVR0OBBYEFEnEgPBAe8UMSh9+wUFf+zLJCYLNMBUGA1UdEQQO

MAyCCmt1YmVybmV0ZXMwDQYJKoZIhvcNAQELBQADggEBAFsKuXzgH0iQhAWkXyrD

OFf/ug84Fy9M10kfuqEu2oJLv5Jkx5qC83B7nGYXI5Pvz03KDQwLyoR8r6oVycd4

jFvzjB6ldLzQ9l8gMNNknhazrT4Prw0hiqp2T8hm0X/unSTVFzfLCp8gqBuVPSNJ

skO3DdkiLLw4bWLCWkiqRS0gywFnjEWuhjL9GCCY0hPS+JpAVqKOtyavCzialp4V

LPSDefm2/8my+Wfn3rmdlRl/lsop0IQW3b/z9uhXIRvFjHehkgcqpa5eKVGbePp3

0rGTRAN8A7wlU4mqcFNjrCo2U7fvOJmOeTBrW+vaRCVK3RKLtkPblqyKfz1GZckB

kZM=

-----END CERTIFICATE-----

③istio-ca-root-cert

kind: ConfigMap

apiVersion: v1

metadata:

name: istio-ca-root-cert

namespace: pgxt-test

labels:

istio.io/config: 'true'

data:

root-cert.pem: |

-----BEGIN CERTIFICATE-----

MIIC/TCCAeWgAwIBAgIRAKxlx4L9cVO+D1y3AlPLcygwDQYJKoZIhvcNAQELBQAw

GDEWMBQGA1UEChMNY2x1c3Rlci5sb2NhbDAeFw0yMjAzMjMwMjIxMDdaFw0zMjAz

MjAwMjIxMDdaMBgxFjAUBgNVBAoTDWNsdXN0ZXIubG9jYWwwggEiMA0GCSqGSIb3

DQEBAQUAA4IBDwAwggEKAoIBAQCZcjOqmmO1Yal3uaLs3qdAVXCn18GeuzE7cn0d

4eDQI5iiasYRqNsZblsAgFYiSkeBpHFO4Y3//ELvoxAyI4wutuW4mZGpL22ulH3x

i5IqNztQWHbEkLxw3vYVmVN4nGliSzd263QVU8FV+8XMqPOWqKcwUfdeIKo7RAgQ

/0tYWJKdWi4FcrKY0fWBJn1UngxJwTe+FIrBpETvTykSxSsI76sxL6zQ9V8quEDp

rrbu5QOFAf+lGD/b+MD8Cq/lI+H/6RAB93NOtQeXCZEyQblJy1MnFDDFQ9yxnZhX

CwRl/jfghRGvp/Yltn68KSXnmC6+/faQZT+gPZGJ7NTIYhnlAgMBAAGjQjBAMA4G

A1UdDwEB/wQEAwICBDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSVqiJ5b94M

vDpLHmiJ3Ign9Vai8DANBgkqhkiG9w0BAQsFAAOCAQEAW4691l4hdC21ViO35a0H

EoL0DwpNO8IKoFS2JTFwm6jOEaDPo+6c9C2fVWtRBfxv0xNPmzFcv28RvhnRHHsw

nflaUAY5VO+A0QW1dGGDKR0z/IBJ8TMX6VaQM9CCXc/Wx8eU5IIbCbdqJCS4CEm3

706c4tYIV5UE21FBvS2EZsLZ1JfyxWuZl9ZR5r1RJ5tpeQhD2mYwJV6SWCh4RcQe

tI9DJMrmeZV9L4Y+cdYQNqd1xFymPjqfnXJNtj72fP3NYGl0c3ggbUpu2pRVef/z

vU8D++0gvBFfAzfocd115dyxsUdabcQhOWQAfx9trJHpcnCllg74N3nvRNkE1x2+

eA==

-----END CERTIFICATE-----
©著作权归作者所有,转载或内容合作请联系作者
禁止转载,如需转载请通过简信或评论联系作者。
  • 序言:七十年代末,一起剥皮案震惊了整个滨河市,随后出现的几起案子,更是在滨河造成了极大的恐慌,老刑警刘岩,带你破解...
    沈念sama阅读 204,293评论 6 478
  • 序言:滨河连续发生了三起死亡事件,死亡现场离奇诡异,居然都是意外死亡,警方通过查阅死者的电脑和手机,发现死者居然都...
    沈念sama阅读 85,604评论 2 381
  • 文/潘晓璐 我一进店门,熙熙楼的掌柜王于贵愁眉苦脸地迎上来,“玉大人,你说我怎么就摊上这事。” “怎么了?”我有些...
    开封第一讲书人阅读 150,958评论 0 337
  • 文/不坏的土叔 我叫张陵,是天一观的道长。 经常有香客问我,道长,这世上最难降的妖魔是什么? 我笑而不...
    开封第一讲书人阅读 54,729评论 1 277
  • 正文 为了忘掉前任,我火速办了婚礼,结果婚礼上,老公的妹妹穿的比我还像新娘。我一直安慰自己,他们只是感情好,可当我...
    茶点故事阅读 63,719评论 5 366
  • 文/花漫 我一把揭开白布。 她就那样静静地躺着,像睡着了一般。 火红的嫁衣衬着肌肤如雪。 梳的纹丝不乱的头发上,一...
    开封第一讲书人阅读 48,630评论 1 281
  • 那天,我揣着相机与录音,去河边找鬼。 笑死,一个胖子当着我的面吹牛,可吹牛的内容都是我干的。 我是一名探鬼主播,决...
    沈念sama阅读 38,000评论 3 397
  • 文/苍兰香墨 我猛地睁开眼,长吁一口气:“原来是场噩梦啊……” “哼!你这毒妇竟也来了?” 一声冷哼从身侧响起,我...
    开封第一讲书人阅读 36,665评论 0 258
  • 序言:老挝万荣一对情侣失踪,失踪者是张志新(化名)和其女友刘颖,没想到半个月后,有当地人在树林里发现了一具尸体,经...
    沈念sama阅读 40,909评论 1 299
  • 正文 独居荒郊野岭守林人离奇死亡,尸身上长有42处带血的脓包…… 初始之章·张勋 以下内容为张勋视角 年9月15日...
    茶点故事阅读 35,646评论 2 321
  • 正文 我和宋清朗相恋三年,在试婚纱的时候发现自己被绿了。 大学时的朋友给我发了我未婚夫和他白月光在一起吃饭的照片。...
    茶点故事阅读 37,726评论 1 330
  • 序言:一个原本活蹦乱跳的男人离奇死亡,死状恐怖,灵堂内的尸体忽然破棺而出,到底是诈尸还是另有隐情,我是刑警宁泽,带...
    沈念sama阅读 33,400评论 4 321
  • 正文 年R本政府宣布,位于F岛的核电站,受9级特大地震影响,放射性物质发生泄漏。R本人自食恶果不足惜,却给世界环境...
    茶点故事阅读 38,986评论 3 307
  • 文/蒙蒙 一、第九天 我趴在偏房一处隐蔽的房顶上张望。 院中可真热闹,春花似锦、人声如沸。这庄子的主人今日做“春日...
    开封第一讲书人阅读 29,959评论 0 19
  • 文/苍兰香墨 我抬头看了看天上的太阳。三九已至,却和暖如春,着一层夹袄步出监牢的瞬间,已是汗流浃背。 一阵脚步声响...
    开封第一讲书人阅读 31,197评论 1 260
  • 我被黑心中介骗来泰国打工, 没想到刚下飞机就差点儿被人妖公主榨干…… 1. 我叫王不留,地道东北人。 一个月前我还...
    沈念sama阅读 44,996评论 2 349
  • 正文 我出身青楼,却偏偏与公主长得像,于是被迫代替她去往敌国和亲。 传闻我的和亲对象是个残疾皇子,可洞房花烛夜当晚...
    茶点故事阅读 42,481评论 2 342

推荐阅读更多精彩内容