diff --git a/salt/kafka/defaults.yaml b/salt/kafka/defaults.yaml
index 08bcc8d18..6b97ea84d 100644
--- a/salt/kafka/defaults.yaml
+++ b/salt/kafka/defaults.yaml
@@ -68,4 +68,4 @@ kafka:
       listeners: EXTERNAL_ACCESS://0.0.0.0:29092
       listener_x_security_x_protocol_x_map: EXTERNAL_ACCESS:SASL_SSL
       sasl_x_enabled_x_mechanisms: PLAIN
-      sasl_x_mechanism_x_broker_x_protocol: SSL
\ No newline at end of file
+      sasl_x_mechanism_x_inter_x_broker_x_protocol: SSL
\ No newline at end of file
diff --git a/salt/kafka/soc_kafka.yaml b/salt/kafka/soc_kafka.yaml
index 19ab3d2ef..cb093600f 100644
--- a/salt/kafka/soc_kafka.yaml
+++ b/salt/kafka/soc_kafka.yaml
@@ -228,14 +228,40 @@ kafka:
         description: Enables or disables access to Kafka topics using user/password authentication. Used for producing / consuming messages via an external client.
         forcedType: bool
         helpLink: kafka.html
+      listeners:
+        description: Set of URIs that is listened on and the listener names in a comma-seperated list.
+        title: listeners
+        readonly: True
+        advanced: True
+        helpLink: kafka.html
+      listener_x_security_x_protocol_x_map:
+        description: External listener name and mapped security protocol.
+        title: listener.security.protocol.map
+        readonly: True
+        advanced: True
+        helpLink: kafka.html
+      sasl_x_enabled_x_mechanisms:
+        description: SASL/PLAIN is a simple username/password authentication mechanism, used with TLS to implement secure authentication.
+        title: sasl.enabled.mechanisms
+        readonly: True
+        advanced: True
+        helpLink: kafka.html
+      sasl_x_mechanism_x_inter_x_broker_x_protocol:
+        description: SASL mechanism used for inter-broker communication
+        title: sasl.mechanism.inter.broker.protocol
+        readonly: True
+        advanced: True
+        helpLink: kafka.html
       remote_users:
         user01: &remote_user
           username:
             description: Username to be used for custom account
             forcedType: string
+            global: True
           password:
             description: Password to be used for custom account
             forcedType: string
+            global: True
             sensitive: True
         user02: *remote_user
         user03: *remote_user