dpkg-reconfigure tzdata should be run :immediately after updating the data files. Otherwise if the Chef run fails for some other reason, the command will never be run, and the timezone will never actually be updated. This might not be an issue on Chef 11, but it is on Chef 10.