diff --git a/.github/workflows/generate_terraform_docs.yaml b/.github/workflows/generate_terraform_docs.yaml
index c513d0fdb..1a98c64be 100644
--- a/.github/workflows/generate_terraform_docs.yaml
+++ b/.github/workflows/generate_terraform_docs.yaml
@@ -13,6 +13,10 @@ on:
         type: boolean
         description: Whether to enable auto-merge for the created pull request.
         default: true
+    secrets:
+      github-token:
+        description: Token used to create the pull request. Use a PAT to allow CI to trigger on the resulting PR.
+        required: false
 
 jobs:
   docs:
@@ -35,7 +39,7 @@ jobs:
       uses: canonical/create-pull-request@main
       if: ${{ github.event_name != 'pull_request' }}
       with:
-        github-token: ${{ secrets.GITHUB_TOKEN }}
+        github-token: ${{ secrets.github-token || secrets.GITHUB_TOKEN }}
         commit-message: "chore(docs): Update Terraform documentation"
         branch-name: terraform-docs
         title: "chore(docs): Update Terraform documentation"
diff --git a/docs/changelog.md b/docs/changelog.md
index ffff1d561..9d0add230 100644
--- a/docs/changelog.md
+++ b/docs/changelog.md
@@ -6,6 +6,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 Each revision is versioned by the date of the revision.
 
+## 2026-03-22
+
+- Add optional `github-token` secret to the `generate_terraform_docs` workflow to allow callers to pass a PAT, enabling CI workflows to trigger on the resulting pull request.
+
 ## 2026-03-10
 
 - Drop leftover registry input.