Cluster can be read only by master

app/policies/project_policy.rb

@@ -164,7 +164,6 @@ class ProjectPolicy < BasePolicy
     enable :create_pipeline
     enable :update_pipeline
     enable :create_pipeline_schedule
-    enable :read_cluster
     enable :create_merge_request
     enable :create_wiki
     enable :push_code
@@ -189,12 +188,13 @@ class ProjectPolicy < BasePolicy
     enable :admin_build
     enable :admin_container_image
     enable :admin_pipeline
-    enable :create_cluster
     enable :admin_environment
     enable :admin_deployment
     enable :admin_pages
     enable :read_pages
     enable :update_pages
+    enable :read_cluster
+    enable :create_cluster
   end
 
   rule { can?(:public_user_access) }.policy do