Standardize service account roles for stats-pipeline node pool

[stephen-soltesz]

The stats-pipeline nodepool is created with service account authorization. The roles/permissions assigned in our standard projects are very different.

mlab-sandbox

• BigQuery Admin
• Storage Object Admin

mlab-staging

• bigquery.jobs.create

mlab-oti

• bigquery.jobs.create
• bigquery.jobs.list
• bigquery.savedqueries.get
• bigquery.savedqueries.list
• resourcemanager.projects.get

These should be the same.

I discovered this by trying to run the staging annotation export query and received permission denied error for base_tables.tcpinfo

{"CompletedSteps":["exports"],"Errors":["Error while exporting tcpinfo: googleapi: Error 403: Access Denied: Table mlab-staging:base_tables.tcpinfo: User does not have permission to query table mlab-staging:base_tables.tcpinfo., accessDenied"]}

[stephen-soltesz]

Autoscaling was not enabled in production data-processing cluster for the stats-pipeline nodepool.