As discovered in #11690, there appears to be a deadlock when identity-allocation-mode=crd is used in combination with kvstore. Personally I don't know if this combination of options should be permitted, just reporting this as a follow-up, as right now it's possible for user to set it up this way and cilium-agent will lock-up (#11690 (comment)).