diff --git a/data/common/common.yaml b/data/common/common.yaml
--- a/data/common/common.yaml
+++ b/data/common/common.yaml
@@ -1109,6 +1109,10 @@
     type: CNAME
     record: reaper.internal.softwareheritage.org
     data: k8s-archive-production.internal.softwareheritage.org.
+  k8s-archive-production-thanos/CNAME:
+    type: CNAME
+    record: k8s-archive-production-thanos.internal.softwareheritage.org
+    data: k8s-archive-production.internal.softwareheritage.org.
   glyptotek/A: # OPNSense firewall, not managed by puppet
     record: "%{alias('opnsense::hosts.glyptotek.fqdn')}"
     data: "%{alias('opnsense::hosts.glyptotek.ip')}"
@@ -3382,6 +3386,7 @@
 # Other puppet managed stores will be automatically dealt with
 thanos::query::non_puppet_managed::stores:
   - mmca-thanos.softwareheritage.org:443
+  - k8s-archive-production-thanos.internal.softwareheritage.org:443
 
 thanos::stores:
   historical: