diff --git a/pkg/endpoint/policy.go b/pkg/endpoint/policy.go
index <HASH>..<HASH> 100644
--- a/pkg/endpoint/policy.go
+++ b/pkg/endpoint/policy.go
@@ -317,6 +317,14 @@ func (e *Endpoint) computeDesiredL3PolicyMapEntries(repo *policy.Repository, des
 	ingressPolicyEnabled := e.ingressPolicyEnabled
 	egressPolicyEnabled := e.egressPolicyEnabled
 
+	if !ingressPolicyEnabled {
+		e.getLogger().Debug("ingress policy is disabled, which equates to allow-all; allowing all identities")
+	}
+
+	if !egressPolicyEnabled {
+		e.getLogger().Debug("egress policy is disabled, which equates to allow-all; allowing all identities")
+	}
+
 	// Only L3 (label-based) policy apply.
 	// Complexity increases linearly by the number of identities in the map.
 	for identity, labels := range *e.prevIdentityCache {
endpoint: log when allow-all is being synthesized

Log when we are synthesizing an allow-all for PolicyMap insertion for debugging
purposes.