diff --git a/plugin/pkg/auth/authorizer/rbac/bootstrappolicy/namespace_policy.go b/plugin/pkg/auth/authorizer/rbac/bootstrappolicy/namespace_policy.go
index 54b87495545..c40758c8af4 100644
--- a/plugin/pkg/auth/authorizer/rbac/bootstrappolicy/namespace_policy.go
+++ b/plugin/pkg/auth/authorizer/rbac/bootstrappolicy/namespace_policy.go
@@ -53,7 +53,7 @@ func addNamespaceRole(namespace string, role rbac.Role) {
 
 func addNamespaceRoleBinding(namespace string, roleBinding rbac.RoleBinding) {
 	if !strings.HasPrefix(namespace, "kube-") {
-		glog.Fatalf(`roles can only be bootstrapped into reserved namespaces starting with "kube-", not %q`, namespace)
+		glog.Fatalf(`rolebindings can only be bootstrapped into reserved namespaces starting with "kube-", not %q`, namespace)
 	}
 
 	existingRoleBindings := namespaceRoleBindings[namespace]