diff --git a/cluster/gce/config-default.sh b/cluster/gce/config-default.sh
index fc36ebb6e1b..59e25f95864 100755
--- a/cluster/gce/config-default.sh
+++ b/cluster/gce/config-default.sh
@@ -217,7 +217,7 @@ resources:
     - aesgcm:
         keys:
         - name: key1
-          secret: $(dd if=/dev/urandom bs=32 count=1 2>/dev/null | base64 | tr -d '\r\n')
+          secret: $(dd if=/dev/urandom iflag=fullblock bs=32 count=1 2>/dev/null | base64 | tr -d '\r\n')
 EOM
 )
 fi