diff --git a/README.md b/README.md
index 91372761..c278984a 100644
--- a/README.md
+++ b/README.md
@@ -31,12 +31,15 @@ api-gateway solution:
 ## Image
 
 ```shell
-$ docker pull oamdev/cluster-gateway:v1.1.8 # Or other newer tags
+$ docker pull oamdev/cluster-gateway:v1.1.12 # Or other newer tags
 ```
 
 ## Documentation
 
-- __Run Local__: https://github.com/oam-dev/cluster-gateway/blob/master/docs/local-run.md
+- __Run locally__: https://github.com/oam-dev/cluster-gateway/blob/master/docs/local-run.md
+- __Sample cluster-gateway converting secret__:
+  - __ServiceAccountToken type secret__: https://github.com/oam-dev/cluster-gateway/blob/master/hack/samples/cluster-gateway-secret-serviceaccount-token.yaml
+  - __X.509 certificate type secret__: https://github.com/oam-dev/cluster-gateway/blob/master/hack/samples/cluster-gateway-secret-x509.yaml
 
 ### Performance
 
diff --git a/hack/samples/legacy-secret.yaml b/hack/samples/cluster-gateway-secret-serviceaccount-token.yaml
similarity index 59%
rename from hack/samples/legacy-secret.yaml
rename to hack/samples/cluster-gateway-secret-serviceaccount-token.yaml
index fbfc7f22..0c2bb198 100644
--- a/hack/samples/legacy-secret.yaml
+++ b/hack/samples/cluster-gateway-secret-serviceaccount-token.yaml
@@ -1,13 +1,13 @@
 apiVersion: v1
-data:
-  ca.crt: <...>
-  namespace: a3ViZS1zeXN0ZW0=
-  token: <...>
-  endpoint: "https://127.0.0.1:6443"
 kind: Secret
 metadata:
   labels:
     cluster.core.oam.dev/cluster-credential-type: ServiceAccountToken
+    cluster.core.oam.dev/cluster-endpoint-type: Direct
   name: foo1
   namespace: open-cluster-management-credentials
-type: Opaque
\ No newline at end of file
+type: Opaque
+data:
+  ca.crt: <...>
+  token: <...>
+  endpoint: "https://127.0.0.1:6443" # Optional upon ClusterProxy endpoint type
diff --git a/hack/samples/cluster-gateway-secret-x509.yaml b/hack/samples/cluster-gateway-secret-x509.yaml
new file mode 100644
index 00000000..9a411e57
--- /dev/null
+++ b/hack/samples/cluster-gateway-secret-x509.yaml
@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  labels:
+    cluster.core.oam.dev/cluster-credential-type: X509Certificate
+    cluster.core.oam.dev/cluster-endpoint-type: Direct
+  name: foo1
+  namespace: open-cluster-management-credentials
+type: Opaque
+data:
+  ca.crt: <...>
+  tls.crt: <...>
+  tls.key: <...>
+  endpoint: "https://127.0.0.1:6443" # Optional upon ClusterProxy endpoint type