By default, GitLab allows external people to sign up. This can be disabled to restrict use only to approved users as follows:

GitLab > Admin area > Settings > Features > remove the check mark "Sign-up enabled"