diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 9ec8b0d..0525e3c 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1,6 +1,7 @@
 stages:
   - docker-dev
   - deploy-dev
+  - deploy-new-prd
   - deploy-test
   - docker-prd
   #- deploy-staging
@@ -20,6 +21,7 @@ variables:
   NAMESPACE_TEST: masastack-test
   NAMESPACE_STAGING: masastack-staging
   NAMESPACE_PRD: masastack
+  NAMESPACE_SEC: masa-to-sec
 
 docker-dev:
   stage: docker-dev
@@ -49,6 +51,31 @@ deploy-dev:
     - kubectl --kubeconfig ./config set image deployment/dcc dcc=$NEW_IMAGE_DCC_UI_DEV -n $NAMESPACE_DEV
     - kubectl --kubeconfig ./config set image deployment/dcc-service dcc-service=$NEW_IMAGE_DCC_DEV -n $NAMESPACE_DEV
   retry: 2
+    
+deploy-sec:
+  stage: deploy-dev
+  image: registry.cn-hangzhou.aliyuncs.com/masa/library:kubectl-shell-v1.21.1
+  only:
+    - main
+  script:
+    - echo $KUBE_CONFIG_NEW_YDY | base64 -d > ./config
+    - echo $CI_PIPELINE_ID
+    - kubectl --kubeconfig ./config set image deployment/dcc dcc=$NEW_IMAGE_DCC_UI_DEV -n $NAMESPACE_SEC
+    - kubectl --kubeconfig ./config set image deployment/dcc-service dcc-service=$NEW_IMAGE_DCC_DEV -n $NAMESPACE_SEC
+  retry: 2
+
+deploy-new-prd:
+  stage: deploy-new-prd
+  image: registry.cn-hangzhou.aliyuncs.com/masa/library:kubectl-shell-v1.21.1
+  only:
+    - main
+  script:
+    - echo $KUBE_CONFIG_LSD_PRD_YDY | base64 -d > ./config
+    - echo $CI_COMMIT_ID
+    - kubectl --kubeconfig ./config set image deployment/dcc dcc=$NEW_IMAGE_DCC_UI_DEV -n $NAMESPACE_PRD
+    - kubectl --kubeconfig ./config set image deployment/dcc-service dcc-service=$NEW_IMAGE_DCC_DEV -n $NAMESPACE_PRD
+  retry: 2
+  when: manual
 
 deploy-test:
   stage: deploy-test