change the restart, it was not effective before

firewalld/config.sls

     - require:
       - pkg: package_firewalld # make sure package is installed
     - listen_in:
-      - service: service_firewalld # restart service
+      - module: service_firewalld # restart service
 
 config_firewalld:
   file.managed:
       - pkg: package_firewalld # make sure package is installed
       - file: directory_firewalld
     - listen_in: 
-      - service: service_firewalld # restart service
+      - module: service_firewalld # restart service
 

firewalld/init.sls

   pkg.installed:
     - name: {{ firewalld.package }}
 
-service_firewalld:
+service_firewalld_running:
   service.running:
     - name: {{ firewalld.service }}
     - enable: True         # start on boot
       - file: config_firewalld
       - service: iptables  # ensure it's stopped
       - service: ip6tables # ensure it's stopped
-{% else %}
+
 service_firewalld:
+  module.wait:
+    - name: service.restart
+    - m_name: {{ firewalld.service }}
+    - require:
+      - pkg: package_firewalld
+      - file: config_firewalld
+      - service: iptables  # ensure it's stopped
+      - service: ip6tables # ensure it's stopped
+
+{% else %}
+service_firewalld_dead:
   service.dead:
     - name: {{ firewalld.service }}
     - enable: False # don't start on boot

firewalld/services.sls

     - require:
       - pkg: package_firewalld # make sure package is installed
     - listen_in:
-      - service: service_firewalld # restart service
+      - module: service_firewalld # restart service
 
 
 # == Define: firewalld.services
       - pkg: package_firewalld # make sure package is installed
       - file: directory_firewalld_services
     - listen_in: 
-      - service: service_firewalld # restart service
+      - module: service_firewalld # restart service
     - context:
         name: {{ s_name }}
         service: {{ v }}

firewalld/zones.sls

     - require:
       - pkg: package_firewalld # make sure package is installed
     - listen_in:
-      - service: service_firewalld # restart service
-      
+      - module: service_firewalld # restart service
 
 # == Define: firewalld.zones
 #
       - pkg: package_firewalld # make sure package is installed
       - file: directory_firewalld_zones
     - listen_in: 
-      - service: service_firewalld   # restart service
+      - module: service_firewalld   # restart service
     - context:
         name: {{ z_name }}
         zone: {{ v }}