Stop firewalld if running:
  service.dead:
    - name: firewalld

Disable firewalld:
  service.disabled:
    - name: firewalld