Original from 19/May/2014... updated!
I found this workflow for our systems:
- Up the new box.
- Generate keys in that new box.
- "Fetch" the pub key from the new server to the ansible server.
- Copy that key to authorized_keys file of the other server (from ansible server).
- Execute a rsync from the new server without asking key to the other server.
My trick is: