http://forge.puppetlabs.com/domcleal/augeasproviders is great. Try it out.

sshd_config.pp

# puppet module install domcleal-augeasproviders
# puppet resource sshd_config
# cp /etc/ssh/sshd_config /etc/ssh/sshd_config.good
# puppet apply sshd_config.pp


resources { 'sshd_config':
  purge => true,
}

sshd_config { 'ListenAddress':
  ensure => present,
  value  => $ipaddress_eth0
}

sshd_config { 'PermitRootLogin':
  ensure => present,
  value  => 'no',
}