diff --git a/data/common/common.yaml b/data/common/common.yaml
index 060834c5b31ba5b3256a42f0d5d6213823cde91c..bec2f3afddac3d3df9cc214fabf40b1b18e08580 100644
--- a/data/common/common.yaml
+++ b/data/common/common.yaml
@@ -1109,6 +1109,10 @@ bind::resource_records:
     type: CNAME
     record: reaper.internal.softwareheritage.org
     data: k8s-archive-production.internal.softwareheritage.org.
+  k8s-archive-production-thanos/CNAME:
+    type: CNAME
+    record: k8s-archive-production-thanos.internal.softwareheritage.org
+    data: k8s-archive-production.internal.softwareheritage.org.
   glyptotek/A: # OPNSense firewall, not managed by puppet
     record: "%{alias('opnsense::hosts.glyptotek.fqdn')}"
     data: "%{alias('opnsense::hosts.glyptotek.ip')}"
@@ -3382,6 +3386,7 @@ thanos::objstore::config:
 # Other puppet managed stores will be automatically dealt with
 thanos::query::non_puppet_managed::stores:
   - mmca-thanos.softwareheritage.org:443
+  - k8s-archive-production-thanos.internal.softwareheritage.org:443
 
 thanos::stores:
   historical: