jerry153fish/remote-secrets ? reverse-engineered prompt

Build me a Kubernetes operator that lets me define one custom resource and have it turn remote secret values into a normal Kubernetes Secret for me.

I want it to support a simple plain text mode, plus common remote sources like AWS SSM Parameter Store, AWS Secrets Manager, and CloudFormation outputs. The idea is that I can point to one or more remote values, map them to secret keys, and the controller keeps the Kubernetes Secret in sync.

Please make it installable with a CRD and controller manifest, and include example YAML I can apply right away. It should also be able to read cloud credentials from a Kubernetes Secret or the normal AWS credential chain. If you can, include basic metrics so I can see sync success, failures, and timing. Look up current docs online if you need to.