groups not present in ID Token when using GitLab

[lucj]

Hi, I'm trying to use kubelogin with GitLab IDP. When I use the following command, I get an ID Token but there is no groups property in that one, only groups_direct.

kubectl oidc-login setup --oidc-issuer-url=https://gitlab.com --oidc-client-id=$CLIENT_ID --oidc-client-secret=$CLIENT_SECRET

groups_direct is the list of group a user is a direct member of, whereas groups is the list of groups a user is member of either directly or via inheritance. As describe in GitLab doc, groups is not in the ID Token but in the userinfo.

Any idea of the syntax I should use to claim the groups ?
Does this involve --oidc-extra-scope or --oidc-groups-claim parameters ? (I tested --oidc-extra-scope with groups, userinfo/groups, ... but it doesn't work)