diff --git a/reactive/kubernetes_master.py b/reactive/kubernetes_master.py
index e84ea3cca6dc65dde4900087911b37265e616f9a..af005d0f5124e9331f4a3a5d6b5524b689d3a1c7 100644
--- a/reactive/kubernetes_master.py
+++ b/reactive/kubernetes_master.py
@@ -1319,7 +1319,7 @@ def configure_apiserver(etcd_connection_string):
     # Webhook config
     auth_mode = hookenv.config('authorization-mode')
     if 'Webhook' in re.split('[,\s]+', auth_mode):
-        api_opts['authentication-token-webhook-config-file'] = webhook_config_path
+        api_opts['authorization-webhook-config-file'] = webhook_config_path
 
     configure_kubernetes_service('kube-apiserver', api_opts, 'api-extra-args')
     restart_apiserver()