diff --git a/salt/kafka/defaults.yaml b/salt/kafka/defaults.yaml
index 74bceae55..08bcc8d18 100644
--- a/salt/kafka/defaults.yaml
+++ b/salt/kafka/defaults.yaml
@@ -3,8 +3,6 @@ kafka:
   cluster_id:
   controllers:
   reset:
-  external_access:
-    enabled: False
   logstash: []
   config:
     password:
@@ -66,6 +64,7 @@ kafka:
       ssl_x_truststore_x_type: JKS
       ssl_x_truststore_x_password:
     external_access:
+      enabled: False
       listeners: EXTERNAL_ACCESS://0.0.0.0:29092
       listener_x_security_x_protocol_x_map: EXTERNAL_ACCESS:SASL_SSL
       sasl_x_enabled_x_mechanisms: PLAIN