[BUG] rancher2_custom_user_token, argument renew = false doesn't work

[char-iot]

Rancher Server Setup

• Rancher version: 2.8.5
• Installation option (Docker install/Helm Chart): helm chart
  • If Helm Chart, Kubernetes Cluster and version (RKE1, RKE2, k3s, EKS, etc): RKE1
• Proxy/Cert Details: no proxy, self-signed

Information about the Cluster

• Kubernetes version: v1.29.6+rke2r1
• Cluster Type (Local/Downstream): Downstream
  • If downstream, what type of cluster? (Custom/Imported or specify provider for Hosted/Infrastructure Provider): Imported

    argument renew = false doesn't work

    To Reproduce

    # Create a rancher2 Token
    resource "rancher2_user" "foo" {
      name     = "foo"
      username = "foo"
      password = "changeme"
      enabled  = true
    }
    
    resource "rancher2_global_role_binding" "foo-login" {
      name           = "foo-login-binding"
      global_role_id = "user-base"
      user_id        = rancher2_user.foo.id
    }
    
    resource "rancher2_custom_user_token" "foo" {
      username    = rancher2_user.foo.username
      password    = rancher2_user.foo.password
      renew       = false
      description = "foo token"
      ttl         = 0
    
      depends_on = [
        rancher2_global_role_binding.foo-login
      ]
    }

    Actual Result

    when trys to rerun or any kind of change to repo, token would be renewed.

    Expected Result

    when trys to rerun or any kind of change to repo, token shouldn't be renewed.

    Screenshots

    

    Additional Question

    Is there a way to say renew only when older than 60days or expired?

[char-iot]

problem is with ttl being forced replaced with 7776000 every run.