We used to use one port group and a /22 or /23 for all CI jobs. This caused problems with IPI and keepalived multicast vrrp.

Since keepalived is all unicast now we could potentially use one vlan for multiple jobs.
Currently each vlan has a /25 subnet, this could be split into potentially 4 /27s
but we would need to maintain the /25 gateway address.