Resource reservation is a feature that allows you to specify the amount of CPU and memory resources that a service or a container needs. This helps the scheduler to place the service or the container on a node that has enough available resources. However, resource reservation does not control which node the service or the container runs on, nor does it enforce any separation or isolation between different services or containers. Therefore, resource reservation cannot be used to schedule containers to meet the security policy requirements.
Reference:
[Reserve compute resources for containers]
[Docker Certified Associate (DCA) Study Guide]
1: https://docs.docker.com/config/containers/resource_constraints/
2: https://success.docker.com/certification/study-guides/dca-study-guide