fix(controller): give cluster read-only access

Users should be able to access and view a cluster's endpoints such
that it can find the domain name and other relevant data.

fixes #903

No manual testing required. The unit test does that already :)