What steps did you take and what happened:
As discussed in metal3-sec group related to metal3-io/baremetal-operator#1241 CAPM3/IPAM (capm3-system namespace) should not be running among user workloads, but with k8s controlplane or infra nodes.

What did you expect to happen:
CAPM3/IPAM (capm3-system) is running on controlplane or in infra nodes, not among regular workload. These should be sensible default value, and documentation should be available to explain the options.

Environment:

• CAPM3 version: any/latest
• Environment (metal3-dev-env or other): any

/kind bug
/kind documentation
/assign @lentzi90