It is required to manually edit prometheusrule to ignore certs "serving-cert-*" managed by OpenShift.