diff --git a/api/envoy/extensions/filters/http/rbac/v3/rbac.proto b/api/envoy/extensions/filters/http/rbac/v3/rbac.proto
index 649869a255d2..c18ebd1137c8 100644
--- a/api/envoy/extensions/filters/http/rbac/v3/rbac.proto
+++ b/api/envoy/extensions/filters/http/rbac/v3/rbac.proto
@@ -43,10 +43,8 @@ message RBAC {
   // match any matcher will be denied.
   // If absent, no enforcing RBAC matcher will be applied.
   // If present and empty, deny all requests.
-  xds.type.matcher.v3.Matcher matcher = 4 [
-    (udpa.annotations.field_migrate).oneof_promotion = "rules_specifier",
-    (xds.annotations.v3.field_status).work_in_progress = true
-  ];
+  xds.type.matcher.v3.Matcher matcher = 4
+      [(udpa.annotations.field_migrate).oneof_promotion = "rules_specifier"];
 
   // Shadow rules are not enforced by the filter (i.e., returning a 403)
   // but will emit stats and logs and can be used for rule testing.