puppet is nice.

gistfile1.txt

#!/bin/bash

agent_certname=$1

/opt/puppet/bin/puppet resource ini_setting certname \
  path="/etc/puppetlabs/puppet/puppet.conf" \
  section="main" \
  setting="certname" \
  value="${agent_certname}" \
  ensure="present"