diff --git a/.github/workflows/aks-deploy.yaml b/.github/workflows/aks-deploy.yaml
index 9f909bfd..cfffa067 100644
--- a/.github/workflows/aks-deploy.yaml
+++ b/.github/workflows/aks-deploy.yaml
@@ -81,6 +81,11 @@ on:
         type: string
         description: "The webhook URL for the deployment status"
         default: ${{ vars.MSTEAMS_DEPLOYMENT_WEBHOOK }}
+      checkoutSubmodules:
+        required: false
+        type: string
+        description: "Check out submodules"
+        default: ${{ vars.GIT_CHECKOUT_SUBMODULES }}
     secrets:
       azureClusterName:
         required: true
@@ -98,6 +103,8 @@ on:
         required: false
       webAuthenticationUsername:
         required: false
+      PAT_ACTION_CI:
+        required: false
 
 jobs:
   build:
@@ -108,6 +115,8 @@ jobs:
         uses: actions/checkout@v4
         with:
           ref: ${{ inputs.checkoutRef }}
+          submodules: ${{ inputs.checkoutSubmodules }}
+          token: ${{ secrets.PAT_ACTION_CI || github.token }}
 
       - name: Extract Helm values
         id: setenvs