defaultconfig.sls

{% from "firewalld/map.jinja" import firewalld with context %}

include:
 - firewalld

conf:
  file.managed:
    - user: root
    - group: root
    - mode: 600
    - name: {{ firewalld.conf }}
    - source: salt://firewalld/files/firewalld.conf

drop_zone:
  file.managed:
    - user: root
    - group: root
    - mode: 644
    - name: {{ firewalld.dropzone }}
    - source: salt://firewalld/files/drop.xml

init.sls

{% from "firewalld/map.jinja" import firewalld with context %}

include:
  - firewalld.defaultconfig
  - firewalld.service

firewalld:
  pkg.installed:
    - name: {{firewalld.server}}

map.jinja

{% set firewalld = salt['grains.filter_by']({
  'CentOS':{
    'server':'firewalld',
    'service':'firewalld',
    'conf':'/etc/firewalld/firewalld.conf',
    'dropzone':'/etc/firewalld/zones/drop.xml',
  },

}, merge=salt['pillar.get']('firewalld:lookup'))%}

service.sls

{% from "firewalld/map.jinja" import firewalld with context %}

include:
  - firewalld

service:
  - running
  - name: {{ firewalld.service }}
  - enable: True
  - watch:
    #File glob used to watch for any changes in the firewalld directory.
    - file: /etc/firewalld/*