While the global /etc/gemrc configuration is standard for system installed gems, gems that come in omnibus packages like chef-client, chefdk, etc don’t respect this setting. It turns out for chef-client it’s /opt/chef/embedded/etc/gemrc.