diff --git a/pkg/kubeapiserver/authorizer/config.go b/pkg/kubeapiserver/authorizer/config.go
index 3a65d5d1555..ca275dd4db7 100644
--- a/pkg/kubeapiserver/authorizer/config.go
+++ b/pkg/kubeapiserver/authorizer/config.go
@@ -54,11 +54,6 @@ type AuthorizationConfig struct {
 	// TTL for caching of unauthorized responses from the webhook server.
 	WebhookCacheUnauthorizedTTL time.Duration
 
-	// Options for RBAC
-
-	// User which can bootstrap role policies
-	RBACSuperUser string
-
 	InformerFactory informers.SharedInformerFactory
 }
 
@@ -167,9 +162,6 @@ func (config AuthorizationConfig) New() (authorizer.Authorizer, error) {
 	if !authorizerMap[modes.ModeWebhook] && config.WebhookConfigFile != "" {
 		return nil, errors.New("Cannot specify --authorization-webhook-config-file without mode Webhook")
 	}
-	if !authorizerMap[modes.ModeRBAC] && config.RBACSuperUser != "" {
-		return nil, errors.New("Cannot specify --authorization-rbac-super-user without mode RBAC")
-	}
 
 	return union.New(authorizers...), nil
 }