How to deploy an Elastifile Cluster in a Shared VPC Service Project

Introduction

Elastifile fully supports deployment in a service project which gets the network settings from a host project, in a shared VPC configuration.

Although, GCP Marketplace does not support out of the box deployment of ECFS into a shared VPC service project.

In order to install ECFS in this environment, the following procedure is required.

Elastifile requires the following prerequisites in order to have a smoothly deployment:

The service account running the EMS instance has the roles/compute.networkAdmin role on the shared host project.
The service account running the EMS instance has the roles/compute.securityAdmin role on the shared host project.
The service account running the EMS instance has the Compute Instance Admin (v1) role on the shared host project.
Ensure that the EMS instance you've created has "Full API" access. Check the Allow Full API access, after you choose the service account, on the instance edit page (if it was created by cli, shutdown the vm, change the access & start the vm).
The service account running the EMS instance has permissions to use the correct subnet

Please follow the Google document in order to deploy Elastifile using Terraform automation

How can we improve it?