Are docker containers safe enough to run third-party untrusted containers side-by-side with production system?

We plan to allow execution of third-party micro-services code on our infrastructure interacting with our api. Is dockerizing safe enough? Are there solutions for tracking resources(network, ram,cpu)container consumes?