Facebook uses quite a lot of chef, but I don't recall seeing them make any mention of how they manage osquery directly. I'd imagine they have an in-house TLS server that isn't open source, though