Project-level cluster: allow management project in descendant groups
Extending from !18429 (comment 233296682)
- Project-level cluster is only accessible by the project it is attached to.
- With !18429 (merged), a management project can now also access this project cluster. On the restriction that the management project must be in the same namespace / group as the project.
- We should also extend this to allow management projects which are in descendant groups of the project.