Add fallback to cache.GetAccessList call

[smallinsky]

What

Issue: https://github.com/gravitational/teleport.e/issues/3938

CreateAccessList and AddAccessListMember flow depends on the cache propagation.

Add a fallback call for GetAccessList to prevent cache miss during fast chained CreateAccessList AddAccessListMember calls where access list needs to be present in cache during handling the AddAccessListMember call.

This is the same approach like CreateRole(Role: X) CreateUser(User[Role: X] where during user creation validaditon check if role x exist by doing a fallback call:

teleport/lib/cache/cache.go

Line 1935 in 5cb3a17

if trace.IsNotFound(err) && rg.IsCacheRead() {

Access List Flow:

1. Access list sync during plugin creation imports okta groups as access list.
   It creates a empty access list https://github.com/gravitational/teleport.e/blob/master/lib/okta/accesslistsync.go#L319
2. A new access list creation was not yet propagated to auth cache.
3. Access List member reconsider does auth.upsertAccessListMember("member", "accessListID") but access list is not visible in auth cache.
4. In the result if access list doesn't exist (not yet propagated to cache) the upsertAccessListMember call fails with AccessDenied error

changelog: Add fallback on GetAccessList cache miss call

[github-actions]

The PR changelog entry failed validation: Changelog entry not found in the PR body. Please add a "no-changelog" label to the PR, or changelog lines starting with changelog: followed by the changelog entries for the PR.

[github-actions]

The PR changelog entry failed validation: Changelog entry not found in the PR body. Please add a "no-changelog" label to the PR, or changelog lines starting with changelog: followed by the changelog entries for the PR.

[github-actions]

The PR changelog entry failed validation: Changelog entry not found in the PR body. Please add a "no-changelog" label to the PR, or changelog lines starting with changelog: followed by the changelog entries for the PR.

[github-actions]

The PR changelog entry failed validation: Changelog entry not found in the PR body. Please add a "no-changelog" label to the PR, or changelog lines starting with changelog: followed by the changelog entries for the PR.

[github-actions]

The PR changelog entry failed validation: Changelog entry not found in the PR body. Please add a "no-changelog" label to the PR, or changelog lines starting with changelog: followed by the changelog entries for the PR.

[github-actions]

The PR changelog entry failed validation: Changelog entry not found in the PR body. Please add a "no-changelog" label to the PR, or changelog lines starting with changelog: followed by the changelog entries for the PR.

[public-teleport-github-review-bot]

@smallinsky See the table below for backport results.

Branch	Result
branch/v14	Create PR
branch/v15	Create PR