diff --git a/.github/workflows/weekly-docs.yaml b/.github/workflows/weekly-docs.yaml
index d66503e2552ed..f55f344941081 100644
--- a/.github/workflows/weekly-docs.yaml
+++ b/.github/workflows/weekly-docs.yaml
@@ -16,6 +16,8 @@ permissions:
 jobs:
   check-docs:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write # required to post PR review comments by the action
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
diff --git a/docs/admin/templates/extending-templates/provider-authentication.md b/docs/admin/templates/extending-templates/provider-authentication.md
index 770aeb3179927..c2fe8246610bb 100644
--- a/docs/admin/templates/extending-templates/provider-authentication.md
+++ b/docs/admin/templates/extending-templates/provider-authentication.md
@@ -42,6 +42,16 @@ environments:
 - [Amazon Web Services](https://registry.terraform.io/providers/hashicorp/aws/latest/docs)
 - [Microsoft Azure](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs)
 - [Kubernetes](https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs)
+- [Docker](https://registry.terraform.io/providers/kreuzwerker/docker/latest/docs)
+
+## Use a remote Docker host for authentication
+
+There are two ways to use a remote Docker host for authentication:
+
+- Configure the Docker provider to use a
+  [remote host over SSH or TCP](https://registry.terraform.io/providers/kreuzwerker/docker/latest/docs#remote-hosts).
+- Run an [external provisioner](../../provisioners.md) on the remote docker
+  host.
 
 Other providers might also support authenticated environments. Check the
 [documentation of the Terraform provider](https://registry.terraform.io/browse/providers)